Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69522b8-88a6-3604-999e-40690867ecc5.roa
File:                     b69522b8-88a6-3604-999e-40690867ecc5.roa (raw, json)
Hash identifier:          OKUDxn57UUVQfWK/vcSquAXlMAp878Kp9RahVIV687w=
Subject key identifier:   1D:AE:78:1A:5C:C0:B4:62:0C:E7:F9:B6:EC:1D:27:D7:DF:FE:35:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA3360FFA48FCC5F3D400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69522b8-88a6-3604-999e-40690867ecc5.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396826
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a3:36:0f:fa:48:fc:c5:f3:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=92f1ada2-19a7-4021-97a1-2327d0fb1177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:33:5a:de:17:71:89:e3:32:ec:3d:43:fa:52:
                    e0:a2:e8:e1:89:1e:ee:59:fa:f6:55:c7:c3:36:0c:
                    a4:95:b1:f5:15:fe:0e:1a:56:9b:18:cb:f9:e1:23:
                    db:0f:7c:da:fb:48:f1:f3:47:0e:24:c6:f7:29:a0:
                    95:e9:1e:d6:17:ce:f5:b3:b6:b7:d4:95:20:56:16:
                    41:ac:d8:cb:0a:d9:c4:1f:a6:e0:e6:7a:31:37:84:
                    a2:ac:1c:76:43:02:1a:05:6c:19:79:e1:bc:e0:52:
                    ad:dd:8f:18:67:2b:57:9f:5e:67:05:29:b2:c0:0a:
                    14:28:8f:78:88:bc:25:fe:af:b6:07:b7:a2:83:f9:
                    d9:92:99:c3:35:23:e3:7a:3e:4f:0c:69:b9:44:74:
                    16:a6:e6:b7:87:80:f2:f4:ac:24:14:12:e2:30:a4:
                    28:bd:a6:7b:3b:94:67:3d:81:28:6e:4d:ad:30:cc:
                    6e:8a:4e:37:1c:4c:68:82:8b:00:88:d7:03:48:42:
                    ef:de:a5:fb:ce:5e:3e:fd:c8:a9:0e:5e:6f:f8:52:
                    91:7c:71:03:aa:22:95:ed:e5:8a:ff:9b:30:2e:8f:
                    52:fb:8a:9c:64:2f:cd:8f:88:df:7a:c8:c1:e7:a3:
                    82:01:ea:c9:9b:b2:5a:23:b3:cd:d6:33:29:9e:e0:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AE:78:1A:5C:C0:B4:62:0C:E7:F9:B6:EC:1D:27:D7:DF:FE:35:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69522b8-88a6-3604-999e-40690867ecc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:bc:03:28:24:7e:ce:2e:80:6e:4b:59:58:9c:91:f5:ea:d3:
         3a:91:3d:a0:3d:bb:da:97:df:dd:ec:f6:ee:d2:06:d2:a7:f9:
         87:ff:4a:e5:e9:bf:a2:7f:db:c3:fa:94:f0:30:68:38:11:08:
         3a:a9:c2:64:a9:60:c8:f5:40:ba:59:08:eb:64:c4:7b:ff:0f:
         de:b8:48:fc:b8:57:b5:15:33:90:4d:50:7f:6a:03:f2:c4:12:
         a7:df:6b:a0:aa:7e:c5:0d:1e:00:b9:4e:f5:a0:02:86:65:ba:
         b3:7b:5d:75:79:cd:35:f6:83:3a:a5:17:90:27:03:97:2c:ea:
         7f:1b:11:be:30:d3:a5:36:fd:4d:eb:ae:d5:94:d3:dd:4b:31:
         aa:f1:7a:50:58:3d:aa:9a:b2:6a:35:36:92:e6:87:97:73:6c:
         17:e2:ea:98:00:15:49:01:a1:a0:d4:6f:59:a2:6d:7e:8a:3d:
         df:5c:ad:63:dd:46:ad:1c:c9:9d:a7:47:5c:a2:cb:77:21:37:
         d3:02:27:8b:d4:2c:8b:31:bc:6b:fa:35:66:cc:c4:97:e2:9e:
         06:cb:b9:d1:d1:0c:77:81:b9:71:fe:e8:6c:4e:11:d2:2a:e5:
         eb:1f:5b:05:78:bd:c3:0e:d0:22:e6:b0:db:a5:50:65:37:9e:
         61:28:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:08:58 2026 by rpki-client