Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5d76d2a-0af4-3d29-bb5a-1cc6e970a497.roa
File:                     c5d76d2a-0af4-3d29-bb5a-1cc6e970a497.roa (raw, json)
Hash identifier:          5ecwFti7znLpdgC29g+XUPCwqRVEGK8jmQLyJ+cUK5A=
Subject key identifier:   C9:36:3B:83:EF:E7:2D:87:74:34:D7:5E:8B:91:F0:5F:21:20:E8:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4BBA8E0233BFEFC20872C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5d76d2a-0af4-3d29-bb5a-1cc6e970a497.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     396589
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:bb:a8:e0:23:3b:fe:fc:20:87:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=ffb4eeb7-e1cc-4c7d-8185-4ad110e84864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:ee:26:40:4c:1e:da:7d:1f:97:83:8f:a4:
                    7b:e0:07:30:64:17:d2:db:ac:46:94:50:7d:6d:02:
                    36:df:64:4e:dd:17:ae:f2:73:38:62:aa:13:6a:e8:
                    3f:d9:4c:5e:2e:07:bb:29:12:fa:a5:94:76:3d:0c:
                    9a:df:a6:e3:38:bc:f9:dc:03:59:22:a1:d4:03:96:
                    14:47:31:13:38:08:eb:d1:99:4b:ac:fb:f9:7e:f5:
                    a8:46:b2:48:fa:e8:27:3e:ae:b3:7f:ac:8b:bd:39:
                    9b:bd:a9:fa:f1:d6:f8:22:96:5f:23:ae:53:6f:53:
                    a7:7e:a2:b0:80:5f:ee:af:7f:4c:65:00:38:46:46:
                    eb:7c:69:2d:cb:8a:a5:97:66:50:36:f4:d3:5a:b0:
                    d4:0f:bd:bf:e5:22:2e:73:6d:25:08:75:05:79:57:
                    c1:9e:9f:c5:fb:7c:ac:d9:bc:ce:f8:06:b1:cf:ee:
                    bc:e6:6d:b9:d5:8d:80:48:b2:84:aa:ed:2a:42:a2:
                    10:19:ec:23:e5:d2:d5:9d:4a:5c:45:fa:83:dd:20:
                    fb:da:25:d1:34:0a:98:91:e9:83:73:1d:95:d4:ec:
                    c3:af:c3:75:20:33:21:22:7e:f0:5d:2c:08:72:95:
                    2a:80:cf:c9:78:6c:23:05:8e:04:b1:f7:e5:53:31:
                    3b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:36:3B:83:EF:E7:2D:87:74:34:D7:5E:8B:91:F0:5F:21:20:E8:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5d76d2a-0af4-3d29-bb5a-1cc6e970a497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ef:ed:8a:96:a1:95:dc:4b:65:ff:7f:c7:42:ef:48:89:45:
         f1:09:0b:57:a2:61:5f:ba:d8:f5:1a:2f:15:44:70:81:5d:d4:
         55:58:f3:66:69:66:f1:d1:57:64:cd:a5:99:13:7d:12:cb:c5:
         ae:8b:18:94:c8:08:2b:38:44:11:98:58:c1:ef:c4:7c:38:0f:
         3f:95:b0:d5:58:bf:30:12:b8:bd:9d:ab:b0:c2:26:97:fd:fc:
         80:45:f3:9a:51:38:27:52:1b:a2:88:fb:8c:69:26:98:3c:2b:
         94:15:c0:58:f5:e3:a4:e1:e2:0b:a0:19:ae:3c:4e:43:11:28:
         a4:5e:fb:35:b1:e5:88:9b:4d:be:16:2b:3f:bc:ef:3e:3c:22:
         aa:e2:f8:2f:a6:d4:b7:63:26:dc:17:48:c6:87:e2:97:4e:b0:
         1c:76:09:d3:3b:a2:3d:0f:73:80:42:f5:72:c3:16:7e:d3:77:
         30:17:7a:46:bc:17:1a:06:e1:bd:9b:8a:19:8c:6c:88:0d:d8:
         98:4f:e9:2c:79:f6:5e:9b:28:07:a6:dd:78:ad:25:2d:94:84:
         ad:04:19:21:7b:21:7a:a7:9a:d1:bb:8b:8e:88:dd:3f:85:4f:
         82:c1:62:35:59:f5:d5:1c:d6:f6:d4:74:f7:9e:4f:5d:fa:18:
         06:99:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:00 2026 by rpki-client