Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f6f6c1e-5ecf-345c-a124-a9e89979cfb0.roa
File:                     9f6f6c1e-5ecf-345c-a124-a9e89979cfb0.roa (raw, json)
Hash identifier:          mXoRhSPh89VsdAu7dw39sPnuG1rDxrztcPTl486BpUE=
Subject key identifier:   74:DA:D9:66:6C:44:2A:E5:B4:77:97:88:86:D6:58:23:68:BF:93:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D932558681171BBEFB9D3EC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f6f6c1e-5ecf-345c-a124-a9e89979cfb0.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     396602
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:58:68:11:71:bb:ef:b9:d3:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=14f8d482-9fc4-4bb9-aed5-b548f01f1ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:14:a5:43:36:31:03:3a:23:eb:52:ff:59:
                    37:9b:81:01:92:4e:ec:aa:fd:ca:a3:c1:2b:3f:51:
                    3b:08:5d:52:45:57:39:f3:60:02:f2:77:07:73:e6:
                    b9:24:eb:19:90:d4:87:d3:40:dc:c8:8d:8e:7a:46:
                    c8:f6:f7:0c:3d:be:ec:db:15:22:84:89:70:d0:1c:
                    c9:b6:00:cf:e5:59:41:aa:c6:92:93:91:3d:32:40:
                    f6:69:2b:1f:01:c2:39:cd:63:24:a2:cc:65:0c:db:
                    55:94:a9:c3:0b:9a:ac:e8:e1:20:3b:4f:89:98:f4:
                    29:74:ad:15:81:6b:7a:99:83:f2:9e:d3:4a:80:dd:
                    43:26:0d:7c:41:03:c6:09:80:5e:7f:d4:b1:df:d2:
                    fd:6a:da:5f:8f:e4:ca:ce:78:de:d2:83:ac:fc:b7:
                    aa:5f:df:57:7e:80:23:d6:80:9f:27:9c:5f:c2:6a:
                    14:d8:14:8c:e8:49:c7:bd:60:e9:6d:55:d1:68:44:
                    56:39:f6:44:05:e6:dc:47:e5:29:ea:07:63:56:30:
                    05:d6:49:4f:a1:77:1d:96:21:3a:e2:29:52:9a:ed:
                    82:33:10:4b:fe:4e:13:f4:29:69:49:94:9c:f3:20:
                    c0:4a:90:85:37:c0:79:c6:46:ce:7f:ab:27:6b:b5:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:D9:66:6C:44:2A:E5:B4:77:97:88:86:D6:58:23:68:BF:93:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f6f6c1e-5ecf-345c-a124-a9e89979cfb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d4:5c:7f:d9:18:89:a2:10:04:57:e8:24:72:9f:d4:8c:3f:
         64:c8:69:4f:84:94:86:af:c2:91:a4:48:c1:60:e3:cd:a2:9b:
         73:ac:95:56:ec:03:81:1c:35:54:2f:53:87:21:04:89:d4:3d:
         07:5e:d1:0c:04:a4:53:2d:bf:b8:77:e1:28:f3:88:fd:c4:c5:
         71:49:f3:7d:b2:45:da:03:ed:58:97:1b:21:f2:b7:d9:a1:d8:
         3c:e8:59:41:d9:f1:07:06:b7:fa:a1:61:b8:c5:c0:d5:1c:8c:
         67:fb:54:38:3f:24:8c:31:db:59:08:ef:76:9b:eb:0a:ad:00:
         e3:5e:5a:43:b2:c8:b1:1d:f1:0a:17:32:a8:f5:dc:50:a7:6f:
         14:0b:0e:fc:38:a4:31:49:7d:30:27:75:c3:3b:48:33:f2:07:
         47:ad:64:69:1a:23:48:77:3a:7d:b8:5d:49:06:dd:27:93:25:
         fe:cb:1c:67:0f:37:aa:f1:51:1a:17:d0:20:84:9d:23:69:1b:
         32:23:d7:b3:18:3e:44:d5:1f:73:3a:ae:4f:77:98:e6:a6:2c:
         da:1a:04:d7:bc:f2:0a:fe:81:79:4e:1d:70:e5:59:ef:be:b5:
         7c:28:90:62:9c:ea:32:e3:12:7d:35:76:43:22:aa:b6:9b:c6:
         1a:d0:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:14:08 2026 by rpki-client