Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab11d9ed-05e8-379d-a412-1deb1a173917.roa
File:                     ab11d9ed-05e8-379d-a412-1deb1a173917.roa (raw, json)
Hash identifier:          4upaP/5mRJo9/V5RSk70tcIDzwgowriqat20xzlKEQI=
Subject key identifier:   1F:EE:45:9F:50:4F:E1:AC:C9:FD:88:6A:F8:25:BE:22:B4:60:C0:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FAC0E670BFCEFD3352840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab11d9ed-05e8-379d-a412-1deb1a173917.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     397199
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:ac:0e:67:0b:fc:ef:d3:35:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=eb1e69ee-0605-45f4-86e5-c0ab7b4c09d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:83:9d:43:38:d2:07:24:ca:b3:e6:c0:f6:
                    8e:55:d2:3f:b8:60:c0:ef:a4:9c:1e:93:f4:ce:12:
                    7e:b0:79:3f:7b:de:b6:ed:a5:cf:6d:31:8e:42:a8:
                    e4:1d:73:dd:34:d3:4f:ff:f7:99:db:6b:4f:43:a2:
                    e8:5d:56:2a:92:25:65:3b:88:97:2f:cb:c9:70:4c:
                    a8:b1:00:ac:db:0c:3a:b0:60:f4:8f:1f:b0:2b:fc:
                    86:d7:48:13:36:bc:8b:1b:92:6f:f4:02:1e:c3:c1:
                    73:a2:5a:78:14:6a:99:15:d7:7b:02:56:3e:35:1f:
                    ba:a2:24:52:e6:cc:5c:74:9a:6d:d1:54:76:fc:9d:
                    41:f5:36:95:7f:d4:bf:51:40:cb:ff:6d:83:09:c9:
                    70:ad:ba:1e:36:e9:04:08:32:4e:69:0a:fb:be:73:
                    74:2d:8d:e9:55:51:51:1a:67:61:8e:45:45:8e:d5:
                    9e:41:fe:18:39:82:bf:bc:ec:ed:f7:a7:06:32:68:
                    4a:a2:61:77:c5:e6:2a:ea:ec:ce:a1:ca:73:ee:07:
                    25:29:2f:38:8d:7e:b9:65:50:d7:2a:c5:35:f3:1a:
                    14:11:17:b8:d7:35:96:91:5c:e9:41:b8:05:29:eb:
                    ab:ce:c7:80:10:8a:1f:24:bb:b6:07:a2:6c:7a:29:
                    a2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:EE:45:9F:50:4F:E1:AC:C9:FD:88:6A:F8:25:BE:22:B4:60:C0:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab11d9ed-05e8-379d-a412-1deb1a173917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:3f:33:65:00:b7:ed:2e:3f:95:dd:36:5a:c5:37:2c:b8:
         ef:07:fd:81:2f:c9:2c:1b:eb:06:9b:09:cc:0c:46:66:6d:34:
         51:3a:07:88:b2:4c:e4:56:40:67:bd:57:bf:9e:f3:10:5c:be:
         2a:0f:fb:2d:c1:63:f8:1c:cc:cc:ea:b3:c3:62:e4:ce:a5:14:
         c2:9b:7c:6b:e0:ff:5a:74:ee:ad:0a:fa:18:94:37:b9:3c:a3:
         6a:db:ad:02:db:49:11:e3:b9:80:83:ba:26:85:c0:58:25:af:
         b4:8c:ad:8e:bd:c2:2b:40:f3:4b:f5:30:37:24:94:b4:10:0a:
         43:23:45:c1:dd:59:fe:fd:7c:f9:4a:ae:f5:31:33:0f:49:c2:
         1b:55:e7:80:12:ec:5c:00:49:70:86:5e:18:c5:0c:c6:40:1d:
         0f:c8:04:d6:3a:d5:22:95:8f:38:0e:da:be:c0:64:a0:6f:11:
         54:eb:b6:15:d5:3a:4b:da:18:ff:69:11:a0:94:b5:ef:7c:2f:
         48:75:dc:c5:3b:ab:e1:13:c2:e8:17:aa:1e:e5:d0:44:bd:e4:
         6f:5d:ed:05:70:7b:9e:d8:20:1e:86:cd:e4:f2:e6:9d:b9:99:
         b1:c0:e9:8c:b2:35:b4:49:b6:1d:07:4c:dd:22:30:ac:a7:25:
         78:6d:e4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:08 2026 by rpki-client