Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b5445be-1661-3315-b7bb-ee8ff17ea030.roa
File:                     7b5445be-1661-3315-b7bb-ee8ff17ea030.roa (raw, json)
Hash identifier:          cjKTiz9yvJUWbR6D8t2AkgSf0n3/MYt1sneb7pDfQvY=
Subject key identifier:   CC:6E:BB:A5:2D:01:C0:EF:40:1A:34:09:3F:4F:B3:D6:A4:80:78:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FF85B40223168D4259100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b5445be-1661-3315-b7bb-ee8ff17ea030.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396584
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f8:5b:40:22:31:68:d4:25:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=b7acb230-900d-48f1-abda-184021c0da12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:40:e3:1c:bc:50:77:d1:02:2a:0d:bf:34:
                    9b:4a:4e:aa:86:8d:15:d4:40:93:70:4c:9f:04:9e:
                    5e:6f:a1:08:5c:f9:91:0b:7a:84:f8:c2:c2:37:f9:
                    e7:ff:3d:c7:40:2c:79:26:0d:2b:08:a2:0a:03:4a:
                    99:ce:35:4b:72:bc:45:4f:5d:16:51:c4:96:2f:f1:
                    d2:c0:21:ab:45:06:ec:4f:a0:a8:f3:70:a9:96:a1:
                    0a:b4:90:56:ed:bb:ba:0d:c4:a5:aa:ef:2e:bf:25:
                    a8:3e:0b:f5:ae:ab:8c:8c:31:66:70:39:d3:fb:2d:
                    4e:b9:cf:3c:7b:8a:c2:26:8f:d0:37:c5:5d:34:0f:
                    3d:29:8b:74:ae:4d:b8:c9:ca:a1:bc:6a:ed:74:47:
                    0e:25:38:98:f0:4c:38:f5:87:b4:9d:af:ea:1e:81:
                    75:2e:c7:39:15:81:b1:1e:26:51:96:f3:8c:71:d7:
                    c1:c3:b4:05:85:da:94:fd:8b:10:45:db:04:d6:bf:
                    b7:45:bc:02:0d:e3:f2:c0:01:aa:75:b7:c9:cd:6e:
                    bc:28:6c:d1:e3:b3:1b:dc:a8:7c:6e:f2:86:5a:78:
                    ff:9e:6b:46:be:e4:de:b4:61:07:a9:bc:5e:48:13:
                    f6:ad:05:98:b8:a0:46:c5:79:98:5b:6e:6a:67:88:
                    99:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6E:BB:A5:2D:01:C0:EF:40:1A:34:09:3F:4F:B3:D6:A4:80:78:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7b5445be-1661-3315-b7bb-ee8ff17ea030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:68:e6:4e:06:b1:db:94:4d:98:50:68:2c:ba:a1:0f:e0:c6:
         19:48:74:00:c9:81:1f:8d:71:5a:82:14:f3:4a:9b:44:aa:e9:
         70:bc:9f:74:bc:f3:11:95:07:31:46:d5:00:9c:1e:87:49:3b:
         d4:23:61:49:38:f6:35:91:ca:83:31:4f:62:aa:5d:3a:fe:98:
         cd:41:c6:f2:67:3f:2b:a9:b2:93:c5:47:53:84:30:a9:ab:81:
         eb:40:67:4b:e0:c1:3f:75:bd:f3:4d:a0:10:4f:b2:dd:2c:74:
         f7:27:dd:73:62:33:61:d2:23:cd:ab:7b:50:ed:b2:8e:34:78:
         d9:39:01:32:82:da:33:62:b1:e0:9f:da:2c:53:80:e5:a1:cf:
         94:34:38:af:0d:8e:24:f3:cc:88:ae:b1:9b:22:cb:98:4b:1b:
         82:3a:cb:d2:dc:68:6c:ef:fc:92:95:2d:5b:50:d6:c1:e8:7b:
         62:72:75:d3:75:80:3f:8c:a8:0d:84:5a:58:a5:fd:e8:e0:35:
         04:93:1f:98:25:fd:84:0c:4c:1d:0b:05:0e:82:94:33:6e:89:
         d8:a7:b1:2d:19:68:61:ae:39:91:8c:9a:3f:1d:de:28:c5:cc:
         20:73:3c:e0:80:c6:0a:d0:28:d6:fa:c5:58:ed:e9:c1:ea:73:
         09:e3:80:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:35 2026 by rpki-client