Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82e11ca8-1d8b-30cd-a7ac-943b6ff28428.roa
File:                     82e11ca8-1d8b-30cd-a7ac-943b6ff28428.roa (raw, json)
Hash identifier:          wpfOiQh5voGXnczhwNUENP+AwR397yOEd6BcKCxLt24=
Subject key identifier:   67:64:A5:F3:02:D9:30:86:BD:62:61:EC:6B:18:89:18:DC:8A:B2:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64EF5AE2A525DE51FFF7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82e11ca8-1d8b-30cd-a7ac-943b6ff28428.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     396567
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ef:5a:e2:a5:25:de:51:ff:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=661eafda-6c6d-4d76-9dc8-88d7bcb55254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:8b:8b:19:00:6e:92:a2:17:c6:c1:95:2b:
                    7e:1b:93:36:8b:da:a4:90:d6:53:90:65:17:c4:49:
                    14:26:2d:5d:37:f3:41:09:65:d7:0d:51:bb:2c:40:
                    6d:8c:8a:d0:dd:07:b9:b4:3f:68:34:33:5c:c4:06:
                    e9:2a:41:97:d8:28:be:e4:6f:34:b0:1f:8f:de:46:
                    0f:2d:88:be:ca:91:e0:14:cd:93:07:6c:27:54:67:
                    47:1c:39:9b:a0:c0:90:08:b6:75:e8:25:5e:9a:00:
                    68:65:43:8c:17:e9:46:a6:f4:10:71:05:cf:fa:7b:
                    a1:94:83:41:66:3a:df:fc:93:4f:f4:f6:3c:a5:a0:
                    c9:00:17:ee:06:6a:e9:fa:87:d5:82:e8:aa:51:86:
                    15:f9:f8:a4:50:fe:20:14:ae:3b:be:b3:f7:b7:79:
                    9b:93:17:5d:12:cb:12:ad:65:1e:de:08:34:97:d7:
                    27:94:2c:72:90:0a:37:db:27:4d:ca:bf:8e:d8:29:
                    32:58:48:32:73:e9:34:f6:16:c7:65:4f:98:73:d9:
                    ed:a8:8f:ac:c0:43:16:a1:1c:11:5c:ad:63:04:ec:
                    3a:b8:63:98:99:d0:ce:5b:76:3d:a0:a7:82:3a:27:
                    5a:b1:10:92:75:d0:1c:fa:85:84:de:0b:3c:ef:cb:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:64:A5:F3:02:D9:30:86:BD:62:61:EC:6B:18:89:18:DC:8A:B2:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82e11ca8-1d8b-30cd-a7ac-943b6ff28428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a8:91:72:ce:5a:80:8b:78:32:de:ef:bd:a4:d8:bf:87:3e:
         33:ee:45:eb:42:d4:6e:f6:58:43:88:6e:31:65:7f:5e:75:6b:
         c1:21:60:48:1b:6d:c1:97:58:e8:7a:7d:0d:d2:7c:84:29:c1:
         b7:af:72:c4:5d:93:c3:fc:62:67:4f:56:0b:0c:28:f9:42:68:
         a6:1d:8d:47:6e:56:10:f6:09:c0:a0:ec:38:79:55:07:69:15:
         5a:30:8c:4c:2b:df:50:19:b3:0f:2b:05:7d:40:03:34:fc:c8:
         c6:ab:36:6c:c4:8a:7e:76:f2:fd:08:f0:52:38:1b:a3:30:c0:
         9a:07:c4:19:8b:48:2e:ef:71:c8:07:48:2d:41:82:01:21:7c:
         86:60:e4:04:b5:42:a7:3d:93:f4:c8:2c:4e:a4:2d:f4:40:57:
         6d:84:23:06:d2:02:49:71:16:48:e3:b5:b3:ba:b7:ec:de:94:
         bc:5b:c5:b4:38:d3:e6:80:17:07:24:5b:89:de:a4:16:67:47:
         f6:16:16:7b:93:c9:c5:46:79:8b:6b:4a:5c:04:fd:05:84:ac:
         1b:f3:d7:ee:da:61:20:58:ff:36:2f:58:93:04:ad:8d:1f:2a:
         ec:31:28:fd:f1:e8:fe:1a:a5:e8:fb:52:eb:d7:84:e6:85:79:
         68:85:9b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:10 2026 by rpki-client