Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6cd2f4-2f1e-3c24-9279-6a4d63e449ce.roa
File:                     8a6cd2f4-2f1e-3c24-9279-6a4d63e449ce.roa (raw, json)
Hash identifier:          NUq6OVcDVl4DdEhnLmgMcHrvIJiQUJhTZ/C8DU6NwpU=
Subject key identifier:   25:00:B8:AA:26:CD:53:09:0A:CD:91:03:2C:8C:08:8D:9D:35:CB:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C32EC19F8AFF7A5E11500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6cd2f4-2f1e-3c24-9279-6a4d63e449ce.roa
Signing time:             Thu 12 Mar 2026 14:31:04 +0000
ROA not before:           Thu 12 Mar 2026 14:31:04 +0000
ROA not after:            Wed 10 Jun 2026 14:31:04 +0000
asID:                     10515
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:32:ec:19:f8:af:f7:a5:e1:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:04 2026 GMT
            Not After : Jun 10 14:31:04 2026 GMT
        Subject: CN=d098ebe5-8b4c-4583-8595-7ef13aebc6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:2f:fc:35:40:d9:72:d0:bc:1c:ca:1b:1c:
                    2b:76:6b:d5:f1:3f:39:85:54:b5:4b:75:88:6e:ff:
                    76:d2:a9:ab:a6:33:c4:55:f4:97:bb:c7:47:83:3e:
                    b0:0c:3b:0e:02:a5:47:25:d7:e4:5c:45:75:03:73:
                    8c:62:e4:cf:6d:52:b5:2c:6f:1a:85:4b:19:0b:59:
                    19:a1:4c:31:61:24:dd:55:13:cc:a7:a7:fb:bb:e5:
                    1a:36:c7:6e:27:c0:78:e4:5b:69:e4:2f:e4:94:47:
                    dc:d8:af:32:da:9b:ce:eb:05:cc:b8:8c:8a:46:64:
                    d4:a4:d8:f3:6a:86:8a:61:cc:ba:01:2c:22:71:c3:
                    89:65:32:51:59:f4:9e:80:31:24:22:25:e4:67:f5:
                    80:5c:f9:87:c5:f1:ec:3a:63:1b:a4:a5:87:b6:9a:
                    e8:6f:c6:38:68:af:db:69:6e:63:1d:06:e4:68:6f:
                    48:10:8f:f2:50:8d:82:cc:0a:86:7b:fe:b7:6b:63:
                    b9:3c:8c:88:b6:5c:a2:4e:cf:e5:42:79:f6:75:6b:
                    a9:e5:2d:d9:bb:8d:7b:e7:f8:45:8d:30:85:b9:bf:
                    5b:7f:64:23:6f:b0:b7:23:e5:85:3c:24:b4:23:e6:
                    9f:ba:17:74:9c:90:91:67:1a:bd:dc:ac:50:82:c4:
                    39:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:00:B8:AA:26:CD:53:09:0A:CD:91:03:2C:8C:08:8D:9D:35:CB:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a6cd2f4-2f1e-3c24-9279-6a4d63e449ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e4:ec:2b:e2:fe:01:6b:28:2d:09:6a:a8:7f:18:5f:4b:8b:
         6e:ad:be:1e:fc:84:6f:68:d0:a5:be:17:f9:c8:f1:3c:e7:af:
         4e:ef:0c:7a:86:8c:91:75:4f:3a:9b:08:f7:55:48:e9:ce:80:
         5f:93:97:a4:39:7c:7f:5b:aa:d8:a2:0a:00:02:e8:c3:48:13:
         29:45:63:90:14:43:e7:7c:34:e6:8b:02:e9:20:24:0f:49:a2:
         af:70:ef:d5:66:84:b1:5c:11:57:ab:6c:7c:33:cb:02:f8:3c:
         eb:2b:2e:82:18:5e:a6:fd:f1:2d:d1:45:56:ff:8d:4a:a5:63:
         d7:12:0b:da:2a:74:cf:5e:29:ab:b1:2f:80:a2:3d:1a:79:f9:
         eb:e9:c4:33:93:59:5e:dd:5d:2e:a9:ac:c6:73:22:fb:b9:d4:
         da:b9:cf:de:cf:e3:37:cf:d4:08:a2:3b:50:cd:a3:ad:51:5f:
         bc:e3:9a:7e:21:55:8e:bc:bb:64:f3:23:84:a5:e5:79:51:72:
         3d:f5:5f:b0:62:b1:b5:a0:53:2a:3a:ee:d1:47:ac:3c:d3:d1:
         e7:57:8b:d2:d1:26:83:66:8a:15:80:0e:3c:6f:f4:f1:40:46:
         23:c0:f7:12:8e:98:f8:9b:ce:cd:21:7d:93:cb:6b:7f:21:2b:
         05:aa:2c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:36:37 2026 by rpki-client