Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a78281b-2722-3e73-b2f2-2d625cc1effd.roa
File:                     4a78281b-2722-3e73-b2f2-2d625cc1effd.roa (raw, json)
Hash identifier:          W73GmztwtNtqLdo8KGwl6knGJUVZasugjCV78491zMU=
Subject key identifier:   B4:FD:AC:E4:90:7E:E5:5A:7C:18:6F:01:B4:24:74:EE:0A:39:3F:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6C6F7217A443827F3E641F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a78281b-2722-3e73-b2f2-2d625cc1effd.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     397211
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:72:17:a4:43:82:7f:3e:64:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=ed5e9695-6858-40cf-b5d3-7c726df48999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:83:71:36:4d:42:e2:d9:b3:8b:f1:ba:ce:f3:
                    0f:36:e5:3d:b0:36:46:0a:73:2b:f0:1a:eb:e1:19:
                    84:c5:ef:13:63:73:a2:11:ae:23:3e:90:15:41:c2:
                    22:1a:90:f7:ec:07:2d:8d:85:a6:34:ff:b5:13:4a:
                    9e:20:71:4d:cf:17:97:55:4c:b8:3e:b3:48:07:f9:
                    0b:d6:61:22:32:09:b1:10:bd:de:69:b4:24:c6:7a:
                    66:7b:df:90:fa:11:a5:f4:d6:c9:7b:d0:63:16:32:
                    eb:16:52:0a:45:7a:ee:56:39:a8:e0:da:6d:98:dc:
                    0d:02:4b:2e:2b:3c:93:98:fe:45:ca:87:76:6c:47:
                    3c:68:21:8f:17:6b:ec:a6:5c:df:7c:ee:e4:5b:06:
                    51:81:6f:56:f5:49:2b:f8:9a:a2:c0:1a:3d:5f:69:
                    0d:82:c9:4e:6d:10:80:4a:8c:5a:5d:d7:f5:1d:21:
                    9f:16:f9:2a:10:8c:44:6a:ef:02:b9:9c:f3:31:09:
                    4f:ce:6e:6f:a3:9c:a6:ec:76:49:fd:db:c0:2a:c1:
                    e4:74:c5:1a:1b:3c:c3:06:6e:89:e4:08:18:7a:03:
                    5a:bb:86:30:1f:ce:ae:27:aa:ae:65:17:24:6d:19:
                    1c:7a:1c:4a:14:a6:45:81:e9:80:4d:f4:c8:19:ca:
                    0e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:FD:AC:E4:90:7E:E5:5A:7C:18:6F:01:B4:24:74:EE:0A:39:3F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a78281b-2722-3e73-b2f2-2d625cc1effd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:11:fb:4a:7d:c2:ce:5b:55:c4:f4:de:ec:c8:27:88:56:58:
         99:9e:2e:51:bc:e7:3a:5e:9c:b1:c9:6a:77:48:d8:a0:1b:7b:
         16:17:60:f3:26:5f:9a:96:f1:8d:4f:61:9e:b7:1b:be:fe:64:
         41:4b:d6:92:50:2e:1b:1e:66:51:c3:74:39:6c:d3:8a:ea:f2:
         e3:2f:78:f4:4d:c4:aa:f4:98:4f:42:2e:37:be:d9:b3:3f:7f:
         cc:e8:00:66:88:20:b9:90:7b:6a:e5:10:b4:4a:4f:7f:77:a0:
         d0:ea:6a:df:fd:fa:53:3d:4d:99:ee:6b:7c:52:20:cb:b5:99:
         c1:13:00:1d:ca:9c:fe:f3:48:06:84:d2:5b:d6:53:a0:9e:ed:
         ca:b7:29:e8:16:86:86:cf:78:48:61:ce:02:50:68:6b:16:1c:
         27:83:78:c6:10:af:01:88:37:3c:5d:d8:e6:cb:e6:99:68:60:
         8d:a7:9e:fa:22:92:75:cc:56:08:ce:28:66:c7:a1:e8:1a:23:
         7a:4f:af:e6:0b:28:77:52:96:53:2e:4c:24:fd:24:34:d3:c4:
         f3:de:0c:6d:dd:ec:67:c5:3f:cc:bd:a5:4d:bf:83:91:dd:d6:
         e1:21:1d:2f:26:47:62:7d:6a:cf:a7:91:eb:28:f8:5e:04:70:
         0d:66:0c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:38 2026 by rpki-client