Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72c8705a-2785-37f1-8bdb-ca1d32488aa0.roa
File:                     72c8705a-2785-37f1-8bdb-ca1d32488aa0.roa (raw, json)
Hash identifier:          MzmaTJ2qOf5+vb43w67y/Iw96CxtWhTW/EgFQHi3DBg=
Subject key identifier:   63:55:8C:C1:31:D2:89:40:A6:1F:8A:87:A9:8B:05:6E:EA:CE:B2:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4C3D790454FB11013A020
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72c8705a-2785-37f1-8bdb-ca1d32488aa0.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     397207
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:c3:d7:90:45:4f:b1:10:13:a0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=7c69002d-95aa-4882-bbdd-e16306a0d177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e9:4c:11:70:fd:8c:33:dd:3b:c4:7e:b9:d2:
                    b9:3f:9f:7a:08:c7:c3:26:c5:61:91:10:ac:3b:92:
                    1b:dd:c0:91:7c:ae:04:07:3f:7b:8b:50:03:b1:47:
                    22:63:e2:d7:fb:f0:1d:4f:cf:1b:2b:0e:68:bc:7f:
                    b5:11:50:3c:89:05:97:a6:5f:6c:ed:81:dd:85:68:
                    84:d1:e4:ce:25:3c:4f:f6:31:b5:72:44:ee:56:ac:
                    37:22:a8:1f:a8:4c:cb:82:9a:f3:ea:13:2b:2a:ed:
                    d1:88:4b:23:59:3d:ca:09:e9:23:91:f9:d6:1e:51:
                    9a:66:ec:a6:39:36:9f:35:df:57:da:9a:06:89:58:
                    5b:7c:7b:eb:39:69:d3:e1:df:01:bc:24:de:0d:86:
                    1a:a1:0d:9f:de:c4:2c:77:44:e6:58:3b:88:a5:89:
                    b4:34:28:97:b2:8c:ee:dc:11:ee:ae:52:fc:df:e2:
                    43:6d:98:25:f6:bb:00:d8:49:18:e1:54:8a:04:13:
                    22:9b:58:be:36:2b:b1:be:17:6e:8a:4e:ba:c9:2a:
                    7e:62:ac:03:e3:7c:dd:f5:66:62:e0:8a:17:fe:1e:
                    30:e6:cb:2d:44:ba:db:41:8e:98:3e:3b:13:5d:a8:
                    e4:47:1e:02:00:db:43:6a:e9:d6:0e:bb:8a:e5:5b:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:55:8C:C1:31:D2:89:40:A6:1F:8A:87:A9:8B:05:6E:EA:CE:B2:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/72c8705a-2785-37f1-8bdb-ca1d32488aa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c0:06:8e:3e:76:bd:11:eb:06:0e:3b:b4:11:60:2c:8a:02:
         ab:6b:b3:9d:31:f3:62:b9:36:9b:e7:63:c5:5d:4d:f3:01:e1:
         e0:86:38:f4:18:bb:34:c7:d0:1c:36:ab:dc:0c:16:bf:6e:37:
         45:23:57:9b:ef:c4:c6:76:a1:6f:b7:11:d4:4e:00:d6:d4:47:
         04:83:43:e7:c8:70:0e:c6:1d:78:55:05:5a:db:5c:90:39:2f:
         a9:51:12:22:10:5a:46:9a:05:6e:88:89:29:e9:da:08:4f:9a:
         ee:93:98:1d:14:88:c0:2b:15:44:98:c0:2b:9a:68:94:cd:fa:
         c0:45:7c:95:53:74:a1:93:6a:97:fc:d7:f5:55:4d:f9:12:6c:
         c7:f3:41:ed:03:3d:fb:29:c3:25:8e:91:47:36:01:f8:40:52:
         b1:1b:8b:f4:d0:7d:97:37:41:47:65:02:8c:ed:39:e9:87:db:
         b2:82:e7:db:63:dd:b8:40:01:1d:d7:13:fb:dc:cb:61:ec:ef:
         d2:58:ed:78:a1:4c:45:2d:3d:e8:a1:96:b9:95:d8:1b:1e:d6:
         7d:c5:ed:11:13:7e:20:c6:7f:04:35:71:f0:54:78:16:b7:94:
         55:3e:6f:07:37:8f:fd:87:f6:80:c9:8c:40:3f:b0:2e:40:f4:
         3a:60:7c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:23 2026 by rpki-client