Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a5c0b29-f6ea-30fe-ba27-d0662bbede2c.roa
File:                     8a5c0b29-f6ea-30fe-ba27-d0662bbede2c.roa (raw, json)
Hash identifier:          8T0XSIw2DlSbrrmwz0WeQ8Bq37WZ3ne7cjtKqiRhk+g=
Subject key identifier:   AC:55:A1:90:81:07:55:2D:7F:FC:B1:BC:FD:5C:35:71:F7:6E:B3:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E534F43A1825931E38C248000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a5c0b29-f6ea-30fe-ba27-d0662bbede2c.roa
Signing time:             Sun 28 Jun 2026 21:00:11 +0000
ROA not before:           Sun 28 Jun 2026 21:00:11 +0000
ROA not after:            Sat 26 Sep 2026 21:00:11 +0000
asID:                     396549
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:53:4f:43:a1:82:59:31:e3:8c:24:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 28 21:00:11 2026 GMT
            Not After : Sep 26 21:00:11 2026 GMT
        Subject: CN=558afe9c-0c13-4f56-b155-41c95436d8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:83:94:f1:71:9a:11:c1:71:ca:3b:2b:bf:0a:
                    b4:cc:42:2c:d7:4c:8f:3b:60:fb:eb:cc:07:a0:62:
                    37:1d:e1:36:20:d9:31:05:47:5f:90:1b:cb:e6:01:
                    79:a7:98:06:bd:78:6b:ee:a5:f5:ed:24:cf:46:9e:
                    32:0d:a5:e0:28:37:cc:16:4b:be:b2:61:17:6f:b7:
                    4a:82:4b:da:4f:11:68:66:74:b6:a1:d1:3d:c5:a0:
                    a3:07:fc:fc:81:64:45:88:7d:c1:8b:de:e3:f3:c6:
                    82:7e:86:81:34:66:9f:61:7e:6a:46:e4:35:69:12:
                    38:12:74:47:82:b1:e8:83:e0:ea:5c:e6:40:58:de:
                    22:94:c1:82:94:56:c5:24:46:f1:8b:b0:6b:f2:6b:
                    30:e5:7d:53:48:79:13:db:bc:e9:4b:44:ba:9f:8b:
                    4a:fc:cd:b4:54:c4:cb:41:a0:61:82:8f:4d:69:e5:
                    76:4c:27:4c:3b:59:a5:15:cd:57:4e:11:4d:16:9c:
                    b8:dc:8c:d7:48:2a:5a:36:5e:30:23:78:62:3e:5e:
                    69:ae:a6:08:96:f9:25:1f:94:c1:6b:8e:63:a4:0a:
                    dc:af:69:b0:4d:0c:8c:99:e1:1d:9a:2d:e7:3c:43:
                    85:d9:06:23:be:4f:64:01:0d:de:9e:e7:c1:59:37:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:55:A1:90:81:07:55:2D:7F:FC:B1:BC:FD:5C:35:71:F7:6E:B3:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a5c0b29-f6ea-30fe-ba27-d0662bbede2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:c6:5c:ff:1a:12:aa:01:d6:48:c0:3c:9b:39:3b:dc:ee:1a:
         90:40:a3:83:31:36:0a:b8:14:7f:5b:25:ae:98:8e:9d:55:e2:
         b7:fc:3d:99:c8:e0:b6:01:73:2e:1c:0c:6a:b8:55:26:5c:53:
         c9:cf:0f:79:2e:19:27:f8:e1:e8:07:d2:07:f5:97:af:cf:c9:
         1f:75:8c:c5:fb:ca:cc:cb:7a:8e:0c:53:c2:ea:32:55:35:d1:
         3a:95:71:b7:d8:30:78:16:68:15:04:73:01:95:8e:94:ac:dd:
         f7:90:12:37:d3:7c:06:77:12:0a:9e:93:3d:f4:f0:ab:af:47:
         97:65:6e:c8:67:37:25:fe:4a:51:57:13:6f:c4:19:85:c7:5e:
         93:4c:15:df:ac:27:a8:84:53:66:6a:1d:e7:ed:8f:39:42:d2:
         c4:70:85:e1:bd:da:33:d9:71:9b:b2:40:a1:67:e9:e3:45:58:
         b9:8b:8b:52:97:e4:67:91:15:0e:3c:4a:e8:b4:09:41:ec:72:
         04:ed:3f:e6:49:e4:ee:c3:f7:ef:d6:b5:8a:72:e6:cc:ce:3d:
         81:1d:dd:7f:9f:f9:34:72:c1:4b:01:81:ff:09:2e:4f:f8:04:
         c0:04:3c:53:fe:a2:23:9d:39:fd:0c:dc:ea:1c:3a:9f:87:b6:
         70:4f:b6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:14:17 2026 by rpki-client