Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab7ef872-8227-33b0-bf36-7ba7b426c2c9.roa
File:                     ab7ef872-8227-33b0-bf36-7ba7b426c2c9.roa (raw, json)
Hash identifier:          s7HkZYsA7o9ywjOK2Rl2M1OJAxyst/kJ2Eq/b7YmtgU=
Subject key identifier:   A3:25:FA:DE:B4:24:2F:07:8E:CC:BE:33:34:1F:AB:98:52:A9:D2:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D93255ACDB4898AEECD000F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab7ef872-8227-33b0-bf36-7ba7b426c2c9.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     32651
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:5a:cd:b4:89:8a:ee:cd:00:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=45ad3849-e7ac-45b2-9227-bc3e7d136cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f0:86:5f:36:7f:92:60:f0:f2:7b:43:5f:3d:
                    68:31:a5:db:1b:d3:41:15:49:3c:57:80:fb:ef:34:
                    a4:be:be:5d:20:30:00:27:20:6f:47:e0:0e:48:35:
                    90:ca:dc:89:76:44:21:65:ff:60:4b:63:6b:51:e1:
                    61:7a:24:c6:11:11:ca:f6:b2:ed:06:02:63:09:fd:
                    16:f3:53:d3:68:12:09:67:3b:bd:d2:fc:76:02:35:
                    ad:2c:c1:d5:17:ab:9b:8d:36:b2:81:bb:58:b3:88:
                    9a:22:8f:ee:20:ec:e7:33:2c:b3:58:c1:66:45:e6:
                    53:a4:99:27:57:85:cc:4a:5e:28:7e:9c:c6:fb:b7:
                    b1:bf:92:8f:4f:6e:98:3d:16:0a:ed:67:0b:0c:f5:
                    df:6a:d6:31:77:44:e0:5e:da:d5:62:26:e9:dc:b2:
                    e1:14:7b:12:3d:dd:c5:15:36:3c:ad:e2:83:fc:47:
                    20:64:2f:c5:d0:b6:2b:f0:f9:81:60:31:0b:6c:6f:
                    36:ef:82:9c:0c:57:28:b6:8b:09:b3:6d:97:38:52:
                    17:ae:6b:55:5c:d7:53:d5:8b:bc:4a:ae:51:92:02:
                    94:e1:a6:f1:7e:6c:6c:52:ea:4b:ca:8f:83:d4:46:
                    bf:5c:f8:d9:c5:3d:d1:a3:29:c6:92:c6:ef:b9:e2:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:25:FA:DE:B4:24:2F:07:8E:CC:BE:33:34:1F:AB:98:52:A9:D2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab7ef872-8227-33b0-bf36-7ba7b426c2c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:40:1e:c6:55:4c:4a:05:20:50:4b:8f:d8:a7:65:7c:81:20:
         95:4c:33:2a:c3:bd:ff:db:65:74:0e:33:66:6d:59:cd:b2:02:
         5f:76:fb:aa:6e:a3:4b:b7:64:39:1c:ff:db:73:b0:6f:ee:84:
         ff:c0:91:a8:ef:40:bf:16:d9:1e:f1:02:7d:5b:d6:26:b9:97:
         b0:36:4f:98:e7:a6:dd:62:19:a2:4a:0e:64:f1:ad:50:a8:de:
         96:ca:ac:17:60:2b:62:fd:fd:1e:37:61:86:b3:83:31:7c:bb:
         8e:97:c5:07:93:3f:bb:3f:b6:1a:87:b2:f8:f1:55:c0:f6:63:
         44:90:59:e2:49:17:56:95:68:5c:c6:23:21:18:f0:bb:8c:71:
         87:5b:c1:f1:06:f5:8a:f1:5d:04:d6:c1:3e:70:83:42:07:40:
         93:2f:51:7c:82:99:45:0e:66:b0:b7:59:13:e6:a3:6b:54:15:
         72:a1:77:37:e3:1d:b6:97:39:4d:33:ac:db:b5:52:c4:3b:50:
         8f:a8:a1:2b:f2:0d:9c:52:b9:b4:3c:1e:5e:9a:8f:df:dd:9c:
         f0:fe:ae:a3:ec:31:31:44:6d:65:d5:99:90:40:69:79:f6:bc:
         1e:b7:57:e3:cd:ac:1d:51:83:f9:a9:ad:05:c3:eb:8d:5f:58:
         cf:7c:bc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:57:39 2026 by rpki-client