Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/704bf10c-c32a-3dcf-a46a-949d90e6f783.roa
File:                     704bf10c-c32a-3dcf-a46a-949d90e6f783.roa (raw, json)
Hash identifier:          Md+66+MNEVY88Xa0glkc//EiGK/U2PQBLsKMd1NYtqs=
Subject key identifier:   3E:FB:7E:0F:C7:62:A1:9D:95:A4:EB:40:E8:86:AE:7F:AE:DB:C1:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FAA7C299D6C0E1AFD8D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/704bf10c-c32a-3dcf-a46a-949d90e6f783.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396593
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:aa:7c:29:9d:6c:0e:1a:fd:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=ef81969b-fd5a-4511-bfc5-4125fb0c1fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:8b:83:ef:d8:8e:0e:bf:6f:63:8c:1d:9f:
                    40:34:43:e6:b4:41:22:b7:bf:c1:a1:86:5d:5d:98:
                    04:6b:8d:25:8a:2d:b1:bf:ec:06:96:d9:c4:ee:f0:
                    92:21:e7:05:b8:67:02:b7:22:9c:ce:5d:e3:6b:f8:
                    3f:8d:64:73:a5:79:3c:28:e5:26:31:d3:2c:db:45:
                    aa:37:b9:2f:98:04:71:49:92:c6:7d:63:0a:88:38:
                    71:9b:e9:a9:c8:00:1f:9d:91:c9:ba:fa:c3:03:56:
                    0f:7e:fe:54:ee:70:a4:23:7b:ab:cc:9a:36:f7:b7:
                    af:12:ad:55:4f:4a:57:97:01:e6:eb:c3:c5:0c:03:
                    45:d8:d9:89:33:9e:c4:56:ab:39:fa:0b:3f:a0:ab:
                    3d:f6:9d:fb:77:2a:c3:71:9e:17:c3:68:89:f1:ed:
                    9e:7c:a0:9f:a6:05:de:8f:36:fb:64:1a:b8:7e:7f:
                    48:35:a3:dd:76:d9:d5:ce:9e:f7:40:a2:d4:b1:c2:
                    19:44:7a:d8:ab:82:05:2a:a7:65:1b:1d:0c:08:db:
                    85:d1:0c:af:b5:bb:7a:bc:00:40:75:b7:41:3c:70:
                    2d:6d:53:23:d8:5f:6b:f5:59:6a:6b:ee:19:df:3a:
                    0a:ac:dc:b2:ec:b9:fb:1b:f6:59:45:bc:37:47:52:
                    1e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FB:7E:0F:C7:62:A1:9D:95:A4:EB:40:E8:86:AE:7F:AE:DB:C1:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/704bf10c-c32a-3dcf-a46a-949d90e6f783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:65:d4:2c:27:c3:ef:43:9b:cd:fb:eb:99:21:df:88:b1:11:
         4b:c4:24:b7:37:24:2b:6d:ea:21:9f:65:f8:bb:7d:47:6d:8b:
         2b:27:b5:17:7f:9c:2f:96:e5:e1:f8:f5:ce:96:58:d9:6e:28:
         61:17:df:d5:35:65:0f:14:ef:7c:46:a8:c4:3b:06:79:34:a3:
         de:69:1a:21:47:48:a3:75:16:30:99:2b:c0:87:23:ad:35:06:
         55:a3:38:23:cf:a8:85:80:49:15:f1:bd:44:e0:01:b0:78:c2:
         c3:82:f6:57:f9:a1:ed:2c:9a:29:d1:0e:97:1a:aa:11:eb:09:
         18:ba:43:ae:c6:84:1a:88:ea:fa:5a:48:21:fd:d6:14:76:74:
         74:e5:d1:4d:d6:5d:84:82:88:a4:19:c6:a1:9f:70:e5:1e:7d:
         fa:be:fe:db:73:4d:96:2f:eb:5e:92:48:3d:02:11:60:d1:eb:
         aa:91:72:28:17:99:64:33:19:c0:6b:1f:34:f5:df:13:39:96:
         1e:19:15:54:9d:9e:92:b3:a8:70:3b:b7:84:82:58:aa:a2:45:
         63:06:f4:03:0e:9c:9c:99:d7:a2:82:54:cc:c9:28:76:65:3f:
         c2:fd:82:2b:30:e2:c9:90:f5:2c:3a:0e:5b:e8:9a:bd:e8:b7:
         aa:23:99:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:30:31 2026 by rpki-client