Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0695460-8e45-33dc-81eb-d4c8944e7a9a.roa
File:                     b0695460-8e45-33dc-81eb-d4c8944e7a9a.roa (raw, json)
Hash identifier:          ugym6mtp81FcO4L3vKXRJOwjrPxGA3X6drRYnan3aqU=
Subject key identifier:   7B:BC:11:9A:28:8F:CF:FE:E1:73:F5:6E:76:82:1F:66:41:39:C7:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FB377CA4D6B687C8A5E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0695460-8e45-33dc-81eb-d4c8944e7a9a.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     10515
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:b3:77:ca:4d:6b:68:7c:8a:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=eac2b2d2-e601-4f85-b4e7-cc5f45a9a1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:86:a7:ee:e0:cb:6d:4a:03:af:5f:cb:cf:
                    53:06:a2:43:c9:4f:2e:ae:ef:99:e4:a4:4f:e9:0c:
                    56:1c:26:09:71:22:12:57:9b:46:c6:0d:be:af:a6:
                    34:f7:bb:49:65:c8:a8:41:31:41:4e:2b:84:b2:2c:
                    ff:db:05:6a:6d:aa:cc:1e:40:78:35:8d:83:34:fb:
                    93:b6:6f:25:10:4d:46:c9:a0:d6:3c:76:0f:c5:7f:
                    c4:05:ce:98:f9:a1:c3:64:9b:50:20:d2:17:50:0f:
                    e8:a7:c3:0f:0d:ad:ba:a6:9a:d0:22:b4:23:ae:2d:
                    24:3e:06:df:08:59:b5:ca:07:00:1e:02:9f:8e:78:
                    7b:e5:d7:45:17:99:7e:63:bc:da:24:08:6e:07:dc:
                    82:c6:25:e5:45:37:12:19:f0:f2:75:c8:d5:55:0f:
                    5f:36:02:1b:46:5a:85:c0:d3:8c:a2:0e:38:96:0c:
                    64:5d:75:53:65:8a:ca:9a:1b:cf:5d:1b:c0:f3:fa:
                    c2:03:a1:49:ba:fd:47:23:2e:25:48:33:f3:c4:b2:
                    bc:aa:00:b4:2c:15:c0:08:fd:65:81:66:cb:52:f2:
                    59:f3:c7:39:be:9b:0f:df:4b:23:df:f3:7d:bd:0c:
                    d6:68:c7:0e:66:a9:4b:6b:5b:e6:92:03:72:a9:e6:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BC:11:9A:28:8F:CF:FE:E1:73:F5:6E:76:82:1F:66:41:39:C7:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b0695460-8e45-33dc-81eb-d4c8944e7a9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:82:d5:56:fe:a2:d8:5f:c8:ea:de:e1:f8:97:36:1e:fc:1a:
         67:96:49:67:91:f4:b2:ea:15:f0:dd:5f:4c:32:11:2b:cb:a2:
         5a:a4:44:b4:3a:d4:52:8a:ed:aa:da:11:06:89:b4:73:c9:6e:
         5a:db:fc:5b:60:7e:d7:f0:fd:f1:f2:25:42:3e:8f:2e:67:ce:
         f6:54:c5:0d:8e:60:ec:19:05:1c:43:8d:9b:a4:ba:98:c6:fc:
         6b:b2:81:a6:fa:63:48:b5:90:21:08:c1:1c:d6:5e:21:db:3a:
         c7:f5:80:a8:78:46:ce:e6:5a:cf:c2:4e:da:60:0d:6d:a1:f7:
         38:49:ca:03:0b:ef:66:1c:8a:1c:06:4d:15:a2:12:70:0e:69:
         96:ab:d0:26:a0:74:d6:e2:0e:22:b9:54:89:df:74:8a:61:09:
         df:f7:90:9b:b7:1b:2d:a1:e4:b6:58:9d:da:51:f5:47:21:1e:
         d0:41:0d:74:54:99:62:0a:21:6e:89:82:8c:b2:5d:7f:b3:24:
         d0:55:92:66:91:f0:26:46:24:65:cc:ac:2e:93:5b:13:39:d7:
         c3:1c:aa:c8:56:1b:d2:b2:6f:4e:ae:0e:e2:64:91:b6:5f:7b:
         1b:d4:a6:c1:9e:5e:fb:6c:56:c2:06:87:64:81:97:34:88:c9:
         5d:17:d9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:02:09 2026 by rpki-client