Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b02ccc2-648d-3461-96a8-cef4a6c9d8bf.roa
File:                     8b02ccc2-648d-3461-96a8-cef4a6c9d8bf.roa (raw, json)
Hash identifier:          kbaTiYQEVLBhDWDUp+vfuufwkTDk/FCr7lijlPnl9uM=
Subject key identifier:   CF:9A:99:2D:0E:35:13:3F:F2:DF:36:05:AE:DF:0B:7F:7A:0E:BC:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB8C38CB24682E0D57BD0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b02ccc2-648d-3461-96a8-cef4a6c9d8bf.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     36631
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b8:c3:8c:b2:46:82:e0:d5:7b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=b81faf44-d2d5-42e8-b53f-4c3c92d6d9ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:0b:ba:bc:b8:6f:5e:27:c5:34:5f:a6:f0:
                    77:c3:5d:22:e7:cc:56:1c:76:07:f4:7a:8b:56:df:
                    5c:15:58:3f:2c:2a:c8:e1:0e:a1:be:6c:63:80:d6:
                    ba:81:f0:04:a8:fd:20:88:53:8d:37:1c:b8:42:ce:
                    31:f2:49:29:fe:08:c4:12:f0:76:e1:c4:eb:f7:8e:
                    21:01:45:2d:b2:f6:61:32:2b:c8:b0:db:b7:36:0f:
                    9c:e9:24:17:ba:3f:60:ba:55:e8:08:6e:d8:0e:23:
                    21:ef:ef:20:25:0d:cc:ab:03:e9:6e:1a:b5:ce:af:
                    1a:cc:42:d4:b9:61:9d:87:64:7f:57:a2:e2:89:97:
                    b9:26:12:56:4f:ac:93:6f:95:be:95:77:65:65:bf:
                    e0:ea:b6:5e:da:49:65:ca:14:9b:cb:ba:a5:69:da:
                    12:af:0d:a7:74:e4:8e:86:dc:4e:32:15:65:6a:75:
                    2e:b1:59:b2:f3:fe:9a:3a:7c:5e:57:49:8c:b1:8b:
                    a2:fd:1d:96:1e:48:59:20:db:ca:65:51:b6:76:f7:
                    6d:21:ba:6d:5f:fc:2d:52:62:b8:5b:c3:58:f4:f2:
                    7c:d5:4c:12:86:62:20:44:a7:26:3c:27:83:1b:9e:
                    a2:4a:be:3f:ae:8f:b8:be:13:2c:ba:d6:c9:15:f1:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9A:99:2D:0E:35:13:3F:F2:DF:36:05:AE:DF:0B:7F:7A:0E:BC:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b02ccc2-648d-3461-96a8-cef4a6c9d8bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fd:07:a3:41:f3:05:a2:ae:45:82:05:3d:08:b8:08:59:88:
         b2:63:0c:7f:7e:bc:fb:c2:e2:8f:20:d2:4a:31:bb:e7:4f:f9:
         0b:fe:79:85:12:23:2a:72:f6:d6:0f:a1:0b:91:ca:c5:f4:9f:
         fe:91:31:fe:79:bf:6f:5f:0d:bb:71:a3:d0:e9:a3:72:2d:56:
         22:14:0b:1f:a8:58:c9:90:ad:29:17:d2:db:12:ff:b2:33:2c:
         f3:5b:cc:13:94:28:ca:9f:e9:af:4f:87:79:67:3f:92:8f:bd:
         61:52:76:68:e0:03:33:c8:34:42:32:87:b5:09:b0:18:47:c3:
         04:06:aa:78:8b:89:77:2d:f9:82:04:4b:02:c5:b9:4d:32:14:
         2a:23:a8:de:c4:23:1e:ae:99:eb:de:9b:d0:24:ef:ec:ec:3a:
         c7:66:bd:f1:f6:19:67:5d:3f:3d:90:09:8c:88:f3:7f:dc:0a:
         b3:0f:41:0c:60:bd:e1:b8:8c:92:09:88:e1:9b:6e:e1:2f:2f:
         6f:19:85:19:c6:95:03:40:5e:28:43:4a:8a:1c:46:ad:05:3d:
         09:c5:30:ad:d2:4b:db:ec:27:c9:1d:97:41:ea:9b:ca:1d:b7:
         8b:86:bb:af:48:c1:ac:ad:a2:d6:0d:01:63:e5:35:be:1e:ae:
         ca:bf:27:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:28:24 2026 by rpki-client