Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa
File:                     4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa (raw, json)
Hash identifier:          gLfsDa5GYD3sey5+dxQoV5Z16ucLNCxBc5X2qq+ja0M=
Subject key identifier:   19:B2:9F:24:4F:A9:7C:F8:DA:BE:A1:89:F4:BE:15:14:D7:68:70:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E815FB7CAB5BF85ED1E6B9AA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     396563
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:b7:ca:b5:bf:85:ed:1e:6b:9a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=084b29d1-dfac-4491-8077-ff13d2b8d50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:9e:79:6e:30:13:9c:5c:7b:04:c7:e7:f3:
                    a9:66:f6:38:51:a4:5b:23:85:d5:96:da:5d:b7:03:
                    aa:88:ee:bd:57:50:a1:c6:df:75:60:e5:84:9e:32:
                    fe:3e:75:fa:a8:08:6d:6b:9b:b4:94:98:0c:a0:51:
                    59:84:1a:c7:76:ac:10:82:c7:20:2e:d8:e5:bd:55:
                    4d:88:52:a7:61:3e:dc:07:ee:4e:0e:08:84:56:09:
                    59:6e:da:23:ca:de:cc:a3:23:97:ad:72:2e:68:44:
                    8a:f5:f6:6a:c2:a4:47:04:57:69:71:e0:fa:cc:68:
                    58:c0:b3:c9:ce:31:9f:54:ae:dd:9b:f2:c1:7d:5b:
                    db:b4:be:d6:ac:b4:ea:40:4c:20:19:5c:c5:ed:53:
                    53:0a:de:80:df:7a:44:c6:26:2d:b4:e8:26:54:7c:
                    e1:06:d0:56:60:c9:cb:eb:2e:58:c1:d7:d8:65:92:
                    bf:26:8b:56:48:dd:b3:da:23:57:34:63:7b:81:b0:
                    a4:a8:e7:31:cb:0f:ee:18:5e:fd:16:78:72:c1:cb:
                    31:1b:6e:6b:aa:0c:4d:d6:52:a3:29:e5:17:91:19:
                    28:1c:97:21:de:99:ab:48:97:7e:3b:da:49:84:fb:
                    45:c6:61:6a:2b:d9:63:a8:aa:5f:74:9f:04:1e:b4:
                    44:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B2:9F:24:4F:A9:7C:F8:DA:BE:A1:89:F4:BE:15:14:D7:68:70:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:7a:bf:39:20:37:93:22:79:29:5e:46:d4:89:04:29:fa:e5:
         1b:dc:75:80:e7:d3:c9:e5:da:38:b0:af:74:ba:e5:dc:c2:0e:
         d7:04:28:4a:87:f4:6c:23:3e:0c:3f:a8:2a:a4:dd:fc:01:04:
         d8:7f:05:71:14:7b:7a:f6:41:84:74:7b:12:b0:b5:11:19:a5:
         63:13:ec:3d:61:a5:b1:81:c0:45:47:1b:be:8c:2b:a3:43:cc:
         ca:13:97:44:43:e3:90:e3:aa:68:2a:00:05:f8:bc:ce:ef:0b:
         ce:ce:f8:e7:30:e5:82:68:03:7e:d9:c5:2e:50:2d:bb:82:e6:
         e0:26:72:ec:96:78:76:6c:a6:59:4f:ad:bb:da:a5:a5:56:98:
         6a:c5:0e:e5:d0:3f:b3:bd:6b:14:9a:7b:59:a7:2b:3b:5f:13:
         51:85:ac:2c:50:a5:5a:53:94:8d:bb:6a:b4:4c:2c:0e:09:4f:
         a9:60:db:bc:d4:20:74:5f:05:4b:57:a6:f3:94:f0:db:0f:c1:
         59:49:7e:d4:77:93:ec:14:f6:d0:a5:9c:e2:58:31:27:54:e8:
         95:50:43:49:a6:b3:08:4c:2a:20:17:48:43:03:f9:c0:c8:f9:
         be:ee:ff:ff:05:6d:f1:9f:98:58:73:e9:2c:e9:75:7c:78:8c:
         9a:44:e8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:19:03 2026 by rpki-client