Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa37ee07-1855-3127-9b76-1cdeba89c189.roa
File:                     aa37ee07-1855-3127-9b76-1cdeba89c189.roa (raw, json)
Hash identifier:          HLWhN0syV5Y5ZvA50xClUyBVbjtCQoqlwwGtjnxYJdo=
Subject key identifier:   81:22:AF:6C:A7:5D:97:E1:9D:5F:8A:A8:D5:6E:27:22:3F:12:E6:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F75A347E25F1AF793404400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa37ee07-1855-3127-9b76-1cdeba89c189.roa
Signing time:             Tue 10 Mar 2026 14:28:40 +0000
ROA not before:           Tue 10 Mar 2026 14:28:40 +0000
ROA not after:            Mon 08 Jun 2026 14:28:40 +0000
asID:                     396593
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:a3:47:e2:5f:1a:f7:93:40:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:40 2026 GMT
            Not After : Jun  8 14:28:40 2026 GMT
        Subject: CN=6b56ef60-3a18-464e-ad9f-f92bf8fe0e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7b:58:51:f0:81:fb:6c:97:09:e4:b8:f4:50:
                    89:c4:e4:8d:02:e6:9f:f7:8e:c7:f2:63:4c:c7:b1:
                    e9:a7:f4:ea:6c:76:02:e3:b9:10:68:66:3d:b1:a3:
                    21:17:82:58:9b:8f:b2:ec:ab:66:c1:b5:33:d8:04:
                    25:2b:3b:74:a5:31:ae:de:87:c8:85:56:7c:6c:3e:
                    ff:20:23:57:18:60:94:26:a0:3e:99:16:63:e2:6a:
                    91:f7:f2:71:44:ca:0d:71:f1:5c:81:2e:ea:8a:b1:
                    52:3b:1b:3e:51:97:4a:77:41:3e:50:49:7d:cf:43:
                    82:9a:d2:24:0d:ea:26:05:8f:85:c6:2f:fa:39:32:
                    0d:17:aa:64:68:e0:f4:41:bc:89:47:3b:53:5f:6f:
                    fa:9d:21:96:44:bd:de:97:d3:be:71:ed:8e:a1:01:
                    ab:0d:5d:24:51:a3:7b:8e:ea:fe:70:fc:fc:b5:82:
                    01:40:81:eb:06:93:df:46:cd:e6:bc:66:03:4f:32:
                    39:18:94:37:16:cc:f8:c4:78:f7:c9:b8:24:23:de:
                    6a:2a:e9:1e:51:77:7e:23:fe:9e:02:dd:13:28:b5:
                    bf:bc:e9:e0:d6:3f:92:3f:3e:49:52:82:41:b4:18:
                    e3:1d:0f:66:2f:2f:2c:34:a3:fa:a1:8a:d7:84:55:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:22:AF:6C:A7:5D:97:E1:9D:5F:8A:A8:D5:6E:27:22:3F:12:E6:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa37ee07-1855-3127-9b76-1cdeba89c189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:3a:29:c1:1f:1c:74:d1:2f:eb:10:b7:0f:e6:55:7d:7c:
         24:f9:86:46:6c:ca:6b:fe:23:9b:48:e1:1c:47:0a:eb:54:60:
         98:18:fb:d4:95:85:ef:af:00:49:79:97:34:2b:4b:50:3c:1b:
         d8:5b:f8:19:37:71:51:3a:79:83:64:91:e6:f9:f5:6a:c4:eb:
         f8:d4:e5:a4:e4:ba:c0:e6:1f:21:78:c4:bb:9b:f7:d5:db:96:
         dc:8d:9a:0e:87:a4:e7:da:4c:dd:b6:36:73:3c:a6:ed:71:0e:
         0e:8b:f8:fc:2f:95:02:64:92:ed:50:9c:0e:01:3b:1f:13:e1:
         04:f0:33:bf:d5:77:d5:ca:f1:4f:85:1e:1e:84:f5:2f:ed:e3:
         e4:0f:27:4d:0c:e4:46:df:d8:99:0e:88:4e:d7:a0:67:fc:8e:
         22:d2:8e:ce:53:98:6b:5e:3f:38:8d:b3:68:f6:cd:44:6b:06:
         07:b6:39:24:54:4e:0b:c4:ad:17:32:61:8c:81:70:d9:5b:2b:
         0c:2c:1c:5f:1c:81:6b:9e:a7:e2:d8:8c:1e:1a:dd:1f:87:b8:
         9f:48:5f:7c:38:c9:40:fe:9e:bc:bc:e3:10:17:75:6a:67:aa:
         20:b1:49:5d:c2:09:ea:37:2c:4d:60:44:22:d7:93:cf:40:cd:
         5b:fe:c0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:03 2026 by rpki-client