Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90789a41-181a-34da-aac2-b673c6770eea.roa
File:                     90789a41-181a-34da-aac2-b673c6770eea.roa (raw, json)
Hash identifier:          7ABd1hjxz+THB+pkOSr54Z2AfJe3cTauIvL1c9GRrQ8=
Subject key identifier:   34:AF:38:E7:48:4D:B6:C0:87:14:74:0C:CF:CC:5C:D4:49:41:90:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E736A32735F0A623CCC8ADD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90789a41-181a-34da-aac2-b673c6770eea.roa
Signing time:             Fri 10 Jul 2026 09:00:12 +0000
ROA not before:           Fri 10 Jul 2026 09:00:12 +0000
ROA not after:            Thu 08 Oct 2026 09:00:12 +0000
asID:                     396578
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:6a:32:73:5f:0a:62:3c:cc:8a:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 09:00:12 2026 GMT
            Not After : Oct  8 09:00:12 2026 GMT
        Subject: CN=f9a6eb77-446d-48af-8bc9-5ea49eb624a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:b0:1f:18:f2:cb:53:91:23:5d:f8:2b:de:
                    43:22:2b:a1:f0:86:8c:33:14:57:30:66:90:b0:74:
                    8a:9d:ac:32:97:47:0d:6f:2f:25:b6:c1:fa:0d:51:
                    5d:84:92:e3:a1:f5:ee:d5:90:d5:ae:5a:56:4d:f8:
                    04:55:ce:54:27:4d:0a:f5:28:de:3d:f4:93:3d:13:
                    04:35:0d:ed:4f:e7:76:09:e2:17:89:d4:92:74:84:
                    69:2f:0d:0a:1f:85:63:d2:d0:4a:01:dc:ad:51:5e:
                    e0:89:46:a9:f2:37:7a:e5:08:9c:f7:b2:90:ba:67:
                    2d:a9:1b:77:7e:f3:60:80:90:7c:09:c4:ba:ce:04:
                    a1:f5:ea:3e:07:92:9a:b7:a2:68:a5:6e:36:e8:e2:
                    29:cf:98:bb:45:02:c1:74:0e:bc:02:88:79:eb:fb:
                    40:2e:52:6b:f0:e4:07:74:22:d0:11:3a:d6:ed:d1:
                    49:45:07:ea:81:ac:e6:60:eb:d3:07:77:1c:29:f9:
                    6b:10:e9:72:32:ab:29:b7:d5:85:ca:a8:fa:07:74:
                    e2:20:c5:9b:31:63:49:0c:dc:52:0a:42:ed:e3:ab:
                    21:89:b5:f3:3c:e9:8a:76:d2:55:23:75:0c:06:55:
                    94:4a:5e:dd:71:23:dc:ce:8b:fe:03:99:09:82:f6:
                    8e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AF:38:E7:48:4D:B6:C0:87:14:74:0C:CF:CC:5C:D4:49:41:90:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/90789a41-181a-34da-aac2-b673c6770eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:ab:da:45:a2:cb:5c:87:de:0d:6a:a5:d6:d9:72:80:c2:
         c9:dd:3f:51:bd:a0:d8:ce:d0:92:09:67:df:5f:ab:02:44:3a:
         c9:98:aa:45:f2:10:8e:67:4d:84:ae:18:c9:7e:12:9f:df:98:
         50:95:c7:da:cf:59:8a:46:e0:cc:c4:e1:7d:14:2e:a8:84:58:
         c7:63:df:84:b1:fc:31:e3:27:e5:f0:30:db:c6:54:ec:b3:4b:
         0c:e6:ee:76:c4:94:fd:10:7e:e5:1b:0a:57:b5:b3:fb:f3:31:
         9a:8a:9e:1e:88:20:1a:9c:03:43:4a:cd:ff:db:e6:97:8c:e3:
         a9:62:4c:bd:01:19:b9:b8:1c:89:72:3e:e3:de:e4:13:ad:8a:
         a5:b5:ab:1e:a5:6f:ca:54:0a:93:33:31:db:c9:2b:c0:4c:4e:
         dc:09:58:48:bc:06:97:f3:fe:25:98:4b:0c:bb:fa:ca:3d:2f:
         a1:5c:2d:f0:f9:9b:a5:86:8e:c4:3b:af:ec:54:e6:4c:e7:5a:
         0f:a0:e6:55:0a:91:a8:0d:de:22:c8:f9:37:f1:32:47:e6:54:
         3c:5e:5c:cb:17:de:57:a5:ca:ac:65:e3:9a:b8:39:1f:d1:37:
         62:77:e9:f4:de:18:8c:a1:47:4a:4b:28:8c:54:b4:c2:68:77:
         6b:6b:fc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:16:57 2026 by rpki-client