Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85029ef8-83e9-3b2c-aff3-1996d8f13caa.roa
File:                     85029ef8-83e9-3b2c-aff3-1996d8f13caa.roa (raw, json)
Hash identifier:          DuE1Yc3Ijb/1tkjyukLrJzNrNc59R35KOmBeu7ojNWI=
Subject key identifier:   60:42:C8:41:01:0E:9F:C3:32:68:46:66:EE:28:C2:45:B2:1B:F5:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640F9FBAD44550C3F7EC0A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85029ef8-83e9-3b2c-aff3-1996d8f13caa.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396603
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:9f:ba:d4:45:50:c3:f7:ec:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=132e3645-ef98-44d6-8269-24adcc4ba678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:08:8a:df:83:19:c9:3c:1b:51:8f:4e:40:
                    0f:37:8a:fa:44:19:67:36:a4:a0:d8:a4:e7:bc:8b:
                    d1:5e:29:9b:c0:c3:bf:7c:1f:11:e5:92:e9:50:c6:
                    d7:fa:29:c4:5c:c1:2a:38:6c:1a:36:fb:54:4a:67:
                    2d:0d:48:f5:71:ca:e8:49:ff:18:1e:a1:cc:3c:5f:
                    b0:4a:ad:e3:64:e2:fc:39:27:4b:70:a0:a9:1c:0b:
                    08:03:8a:77:60:8c:76:81:61:ba:3b:7f:50:da:82:
                    5f:df:b6:d5:0e:86:f3:4f:b3:a6:13:c4:de:c4:a8:
                    d2:16:43:24:b4:47:24:5d:c4:0a:a1:62:88:90:b3:
                    55:d1:78:ad:5c:aa:8d:dc:01:07:7c:ea:1e:3e:c6:
                    ff:89:fb:60:f9:48:68:45:1f:ce:77:4a:67:df:a1:
                    bd:c3:e0:0f:de:03:bc:82:1e:54:30:78:c9:e2:f3:
                    9b:99:10:2e:39:1f:42:aa:59:ac:8c:bd:48:8d:84:
                    2c:18:23:fb:97:af:5a:af:25:73:1d:b1:a1:7c:89:
                    88:da:f1:31:b9:98:fd:94:c2:54:b2:01:68:23:18:
                    d4:3c:ec:dd:cc:4a:63:b3:68:6a:35:5a:4f:66:52:
                    a9:95:88:54:92:d0:b1:21:ae:6c:54:f3:da:c6:c4:
                    e6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:42:C8:41:01:0E:9F:C3:32:68:46:66:EE:28:C2:45:B2:1B:F5:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85029ef8-83e9-3b2c-aff3-1996d8f13caa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:95:ba:04:dd:f9:4a:f8:17:2a:35:fd:86:e4:a5:76:bf:de:
         7b:e6:f1:3b:8e:e6:7a:3e:3d:b7:ac:a0:e8:f5:98:d1:29:b3:
         9a:96:ff:8d:4a:8e:80:d0:ff:5d:e3:11:60:2c:b4:01:93:52:
         76:75:d9:f1:95:16:0a:ec:d7:23:f0:db:d3:4b:7c:0c:e4:e1:
         75:97:dd:12:8c:ec:d6:29:36:cd:fe:b3:77:bc:01:03:2b:07:
         6a:0b:1b:a2:6a:9b:b4:f4:9d:cd:38:2e:b5:15:1f:fb:40:97:
         4e:1a:04:2d:cd:09:28:6f:47:62:85:3d:b8:6d:22:81:1e:e0:
         14:3f:d2:dd:f4:d1:a5:20:d6:06:3f:7e:b5:c4:12:c0:18:ec:
         66:b1:50:1a:da:e3:21:37:34:fe:d2:31:22:02:0f:a9:41:5f:
         aa:51:df:73:50:74:e8:ef:7b:28:ef:51:b0:cb:d4:53:ca:f7:
         1e:04:de:26:ab:b0:9a:ce:65:e7:25:25:ac:1a:15:09:7e:07:
         32:fb:70:37:f6:70:7d:f5:b4:98:8a:b7:3f:ec:b1:c4:8f:c4:
         44:d0:be:08:f4:63:44:b1:9a:20:f1:5c:22:1f:a2:a3:1f:f2:
         4b:74:71:9f:33:a1:3f:46:35:49:c4:25:b4:47:84:93:73:01:
         76:ab:23:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:17:14 2026 by rpki-client