Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e87f776-e3cd-38e3-a67b-d6df7dc59231.roa
File:                     4e87f776-e3cd-38e3-a67b-d6df7dc59231.roa (raw, json)
Hash identifier:          u2Z2+jB4h+EoSbZNc4xfhjuHVoHTmzBRVw9CSNPGrRw=
Subject key identifier:   3D:B4:1A:2B:3F:0F:E2:5B:24:AC:6B:FB:01:FD:C9:8F:33:0C:FC:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FFA0320A625BB60952420
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e87f776-e3cd-38e3-a67b-d6df7dc59231.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     36621
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:fa:03:20:a6:25:bb:60:95:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=3fc1db19-f835-478a-9e06-6d96f5f0f760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e1:bb:49:bf:57:0e:ff:24:13:85:75:92:a1:
                    f8:27:18:66:86:4a:72:eb:62:bc:d0:98:a3:99:74:
                    6a:7d:d8:e6:7b:99:28:0a:ae:10:62:b6:a5:31:33:
                    2c:c0:c4:02:f6:65:bd:b2:f4:fb:24:8b:df:6d:c4:
                    dd:dc:59:a9:b1:f5:7f:5c:11:d2:02:86:20:bc:35:
                    eb:b0:ad:07:12:34:4c:9a:1d:3e:35:46:25:53:fe:
                    ec:ca:ff:94:28:4c:67:c4:92:e8:86:93:e8:66:a2:
                    71:6f:db:2f:e5:5e:a3:9a:a7:83:cd:e1:22:7b:b9:
                    22:09:2b:51:70:df:0e:e2:ba:ab:9b:01:eb:24:76:
                    ab:9c:04:17:7c:27:02:f2:77:31:49:d5:33:ec:48:
                    c7:2a:98:f4:4f:98:c4:c1:61:f2:0b:98:7d:43:3d:
                    79:d0:f8:4a:e0:5a:fe:55:f2:ba:89:70:0d:2d:59:
                    ac:de:3e:c4:7d:d1:d6:3c:e4:32:44:1b:6d:24:b4:
                    a3:b8:c2:20:c4:2d:f9:09:9b:79:61:93:07:7c:58:
                    a1:d6:9e:9b:a1:c1:16:89:14:49:1c:15:b5:35:9c:
                    5d:d9:a6:a2:c2:f8:44:69:f9:91:24:4f:6e:18:d5:
                    56:42:94:1b:cf:1d:1b:8f:a4:55:b3:09:29:0b:e4:
                    6d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B4:1A:2B:3F:0F:E2:5B:24:AC:6B:FB:01:FD:C9:8F:33:0C:FC:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e87f776-e3cd-38e3-a67b-d6df7dc59231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6e:02:93:fd:cd:d1:64:24:40:53:35:12:3d:6a:70:fe:d2:
         5f:d9:b4:1e:1d:b0:4c:d0:de:fa:b8:39:d3:d9:a0:2c:c0:f2:
         69:51:89:ad:4c:43:7e:06:9e:5c:da:22:ef:88:58:6e:82:23:
         5a:e2:58:5f:7e:ec:5c:dc:3f:46:5e:fb:98:be:ad:a0:87:f3:
         e3:d3:0a:24:b1:15:82:86:e5:59:d5:35:84:b2:cf:04:03:e9:
         7a:f2:cc:1d:8a:62:c0:c3:00:28:9a:9d:89:c3:07:86:e8:63:
         18:49:42:c8:d3:ee:26:e7:ee:a1:87:6d:34:ec:29:ef:40:ab:
         8d:cb:49:e2:b6:e7:b8:b2:1b:da:d9:c5:7a:74:bb:4d:1f:44:
         0f:3f:f2:22:17:eb:6e:b1:33:ef:40:bb:89:53:f8:b1:3b:12:
         fd:17:51:2e:ae:ea:ef:1d:bc:14:4b:d2:e7:82:92:65:1b:98:
         1a:4a:af:cb:f2:be:a3:2e:42:54:70:09:ff:b6:68:c9:0f:3a:
         92:3b:c8:29:ac:11:07:9b:76:3e:91:5c:02:25:bc:51:14:e4:
         59:55:d8:dc:93:a9:89:d0:1f:ca:fd:98:a9:13:a2:00:cb:c1:
         30:7f:fa:bd:dd:ca:21:5b:a3:87:52:2c:39:4e:fe:f5:31:e6:
         a6:ef:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:32:19 2026 by rpki-client