Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85d09de1-14e7-3237-9e3c-a99f9cf15dca.roa
File:                     85d09de1-14e7-3237-9e3c-a99f9cf15dca.roa (raw, json)
Hash identifier:          Stm+joQykyte/16POpNUxJs6yGPFjUmwPmCJ4d1gYAI=
Subject key identifier:   38:25:A5:EF:86:96:E2:47:54:70:D2:4C:F3:50:27:67:78:79:18:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA2B6935A0809750555C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85d09de1-14e7-3237-9e3c-a99f9cf15dca.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     20172
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:2b:69:35:a0:80:97:50:55:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=a45cd44d-6e64-4bb2-855a-ccb49298ad27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:69:73:10:af:bf:09:63:12:ca:43:a7:6d:57:
                    03:84:22:47:55:4f:93:60:ce:c9:a7:d2:90:9e:b9:
                    59:d2:e7:0d:26:e0:cc:96:98:5f:ac:47:38:3b:44:
                    17:3e:16:4f:23:08:8d:ab:1a:42:d9:be:22:29:8f:
                    0d:49:3f:4e:33:12:c1:5a:ff:8f:ab:c3:b9:0a:5f:
                    bd:78:0e:ac:59:e7:74:3c:81:83:fd:ba:ac:32:ce:
                    5d:22:91:df:9c:fb:e6:f5:17:a3:01:ed:22:84:91:
                    c2:63:a8:f7:d9:82:d4:e2:1b:3d:30:44:7b:36:6b:
                    23:cc:89:13:3b:9e:17:c0:69:00:cb:49:88:52:cb:
                    89:59:76:95:15:92:66:10:b5:66:d3:02:85:c9:61:
                    54:84:cc:c3:f2:d4:99:ff:3e:07:f6:2c:d0:ef:5b:
                    64:28:0f:bf:9a:06:48:28:a2:e4:53:b6:22:59:cd:
                    80:b0:22:07:d1:b3:21:72:ed:c7:60:cb:89:66:98:
                    be:f1:2b:a4:bb:08:e4:dc:fc:f5:ca:df:8d:d1:2e:
                    ac:71:3e:df:94:46:f9:b1:ba:c0:9e:a8:9a:72:f0:
                    30:26:08:9e:a0:8d:2a:18:4d:e5:ea:0b:e7:6a:2b:
                    33:31:22:7d:0f:2b:ad:c1:6c:74:e7:a8:c3:e0:3a:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:25:A5:EF:86:96:E2:47:54:70:D2:4C:F3:50:27:67:78:79:18:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85d09de1-14e7-3237-9e3c-a99f9cf15dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:db:27:c8:1a:7c:fb:9c:e5:68:94:04:50:ae:6e:33:8f:04:
         f3:15:2f:e1:82:a6:ed:00:6a:46:8f:1c:28:24:89:7a:31:c6:
         2f:bd:26:59:56:3b:b1:06:34:dd:85:86:29:32:83:79:f0:f9:
         2a:a5:bd:49:4e:3a:df:be:24:0d:d0:7c:dc:5d:3e:2a:93:b5:
         92:38:b9:8a:3e:d8:45:e8:a7:77:d1:f4:86:ae:71:e7:1a:16:
         25:68:8f:4d:fd:ba:7c:5b:f8:42:8c:31:f0:79:03:8d:0f:cc:
         4e:8a:6c:bf:c1:b7:6e:72:5b:0e:91:5d:cf:36:d1:9f:58:46:
         c5:a4:fe:ec:d6:d4:ef:67:17:a2:7a:5c:9f:6b:f8:d8:67:c5:
         31:2a:a3:00:d4:ac:88:1d:5b:77:d7:4e:8b:1d:fe:ca:d8:27:
         e4:4c:ed:12:37:51:44:4c:27:59:1f:12:a1:f3:dd:29:61:83:
         85:39:2a:e5:58:0f:e4:f7:b2:5c:09:c1:65:72:e6:3d:55:c1:
         6b:ae:18:7f:6c:5d:9b:47:2b:ab:0a:34:e7:96:8e:d8:a4:3b:
         87:0b:ac:c3:8f:b3:5a:82:a4:32:b0:80:c1:c8:47:59:4a:24:
         4a:5b:d9:31:7e:4f:56:6b:e8:09:b1:93:37:73:59:15:63:7c:
         3b:cc:b4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:01 2026 by rpki-client