Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8d75a2-6d34-3ca5-86b3-91361252dcee.roa
File:                     5c8d75a2-6d34-3ca5-86b3-91361252dcee.roa (raw, json)
Hash identifier:          vNPgL65yJFnKUrci25W2LEUBYTqBYDjPONhCdxczTk0=
Subject key identifier:   D4:44:D1:FD:A7:6C:46:7F:BB:B1:7F:14:1F:94:A1:FA:62:23:29:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9325599AE56319F109715700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8d75a2-6d34-3ca5-86b3-91361252dcee.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     397207
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:59:9a:e5:63:19:f1:09:71:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=3e32d866-6f2a-49df-9cf9-a3929d0429f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f2:d3:5c:15:81:22:10:66:5d:c1:97:91:38:
                    2f:c6:f4:79:2b:34:60:4c:82:9c:bb:31:c1:33:fa:
                    85:4b:00:dc:52:61:b6:2a:37:af:a3:2f:95:a7:b1:
                    a9:b8:e6:83:b5:57:f0:80:2c:35:98:90:db:6a:1b:
                    e2:88:97:b7:a9:fe:ca:54:6e:74:8d:3d:e5:ea:7c:
                    60:38:65:c3:20:50:f3:f3:66:ee:ca:2b:73:50:6a:
                    be:d8:3e:6e:31:cc:95:6f:26:f1:62:11:ce:c4:96:
                    72:16:75:f6:7a:48:93:7d:89:46:ec:36:4f:b6:5a:
                    d7:81:29:61:3b:40:71:24:19:64:73:08:3e:c8:df:
                    b5:82:e2:04:47:f6:d5:d7:a4:91:05:5b:50:c1:d5:
                    e4:4f:64:e4:2b:50:6a:76:2b:9e:67:00:42:f8:f4:
                    e1:1b:92:d0:49:7b:03:60:21:af:6b:5a:e6:df:d6:
                    0d:b2:bc:b4:e4:8d:ad:f2:ee:1d:b0:bb:21:17:60:
                    d4:e4:39:51:95:40:fc:a0:32:6b:d2:67:b9:f6:89:
                    48:58:60:15:e4:0e:14:4a:75:00:d7:e7:57:23:23:
                    04:27:72:3d:d1:7e:29:dd:7b:0a:49:f2:2e:da:ce:
                    c3:a5:08:78:3f:04:46:5b:14:33:f0:27:5d:70:03:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:44:D1:FD:A7:6C:46:7F:BB:B1:7F:14:1F:94:A1:FA:62:23:29:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c8d75a2-6d34-3ca5-86b3-91361252dcee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:5e:3c:d8:2e:c1:b4:4d:af:36:ff:f6:9d:a9:8a:45:da:38:
         bd:88:10:34:18:85:52:43:43:25:83:db:83:46:0d:cc:2d:86:
         1e:55:5b:0e:78:60:c5:65:d0:36:93:7b:c7:3a:9b:a4:ef:f6:
         a2:38:9c:91:30:0a:c2:25:89:3a:ae:49:58:75:e1:56:0d:89:
         f9:c6:84:54:9d:71:d4:4b:05:d9:96:4a:47:08:36:c6:a5:f0:
         e9:40:88:66:8d:83:4b:4c:ef:63:73:4c:97:35:02:6b:3b:4a:
         09:90:58:89:39:c5:c6:cc:40:ea:47:31:88:08:66:f5:96:25:
         78:48:f2:f0:f4:b3:a2:68:ef:a7:db:ca:a9:3a:96:e3:70:9f:
         21:f1:45:50:b8:b1:ef:8d:81:38:b2:97:d1:a4:d6:2b:ba:77:
         73:e5:3d:42:88:c9:79:b7:56:b7:fe:d5:f7:fe:e1:d4:61:55:
         f2:98:c2:63:06:97:a4:60:c8:c1:24:77:52:ae:0a:92:d8:2b:
         fb:33:57:42:a4:25:70:88:23:a5:cd:7a:29:76:78:ed:91:9c:
         aa:33:4f:d9:54:54:da:17:03:00:63:19:d9:37:e8:7d:dd:16:
         86:65:c4:ba:38:fe:5c:03:f0:12:18:ec:1c:31:9b:fd:30:f9:
         20:f3:1a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:38:17 2026 by rpki-client