Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7377bb9-35b1-3509-a53b-73c98b2037ba.roa
File:                     c7377bb9-35b1-3509-a53b-73c98b2037ba.roa (raw, json)
Hash identifier:          ToPmV0uKfgfdAWgxNuZ/yJp8Sk9qXMwSWOHsF3Ysgwc=
Subject key identifier:   74:03:D7:03:6E:4B:93:3C:A2:FB:D3:1D:8D:09:9B:FE:E4:9D:1D:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DCDC5CA44C8FE2D4706C0F740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7377bb9-35b1-3509-a53b-73c98b2037ba.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     396541
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:ca:44:c8:fe:2d:47:06:c0:f7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=8801c7f0-e60b-46d1-b088-eecbcd0bc262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:a4:2e:50:71:65:a9:d7:9f:52:fb:b4:59:
                    26:20:4a:b5:bd:ad:78:d4:9c:c2:1d:80:95:99:8c:
                    b9:92:60:ca:e8:fd:b3:7c:c8:f1:6f:8d:8e:03:a3:
                    12:73:ef:1d:4d:b4:5c:7a:86:dc:36:f6:13:e0:6a:
                    34:f5:82:3a:38:e1:48:c3:37:d4:c2:14:a1:8d:b6:
                    4c:5e:97:dd:ca:53:8c:9a:3d:d8:3e:fa:d8:1d:cd:
                    75:51:e7:60:99:e4:be:35:73:d2:25:74:c8:06:ee:
                    b6:e2:51:2c:18:43:77:df:1b:f2:f3:4d:e7:0b:e5:
                    aa:1c:19:9f:30:7e:91:53:08:7d:76:ed:9d:e7:27:
                    82:62:d1:3e:94:86:ad:57:04:1b:ba:3c:3c:a5:90:
                    ea:fc:88:27:f8:39:7e:89:0f:1d:2f:c6:e2:09:b3:
                    ca:e4:a8:f9:06:81:bb:be:f7:15:ba:63:7b:04:b3:
                    fe:43:74:91:1d:1d:8d:28:70:7f:45:c9:ef:db:a7:
                    e2:8b:85:89:dd:26:e0:f3:d8:be:ca:a8:28:e8:54:
                    ed:56:38:d9:79:ec:89:05:2d:80:d3:de:c2:fa:77:
                    2d:f1:8e:79:ec:5d:c7:b2:bd:2a:c4:d5:77:c9:4f:
                    b2:cb:e3:8a:94:eb:91:df:84:5c:1c:24:e9:a3:f1:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:03:D7:03:6E:4B:93:3C:A2:FB:D3:1D:8D:09:9B:FE:E4:9D:1D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7377bb9-35b1-3509-a53b-73c98b2037ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:43:c9:2f:3c:69:70:72:89:e2:72:b0:fd:19:30:9b:1a:74:
         9f:b7:af:4e:00:6f:ad:7a:5b:42:61:b8:8b:e7:07:29:9b:f8:
         07:56:f3:da:10:39:6f:c8:55:28:a3:06:1b:0e:53:67:e0:aa:
         d7:92:cf:fb:f0:16:11:d3:c0:ee:d6:7f:39:9e:7f:85:99:c3:
         4c:94:80:0d:a4:e4:81:d4:75:7a:55:e1:8b:56:89:fc:11:a0:
         ff:3a:f2:b8:ad:ab:66:4d:85:0e:a6:62:ab:77:22:a2:c5:b7:
         37:0e:cc:60:db:8c:71:6e:07:68:c4:45:11:5d:23:91:bc:98:
         7f:fd:e8:03:9f:da:87:e5:98:1c:d8:79:c2:9a:ae:c6:f4:bd:
         8c:87:52:93:27:b3:f3:49:36:40:2c:2c:c8:1b:54:21:bd:d7:
         e6:61:ce:4b:14:46:81:74:16:73:37:74:83:ea:a0:d1:bf:e5:
         3f:18:bb:68:34:da:ff:a5:52:30:bb:e3:7d:c4:74:89:d7:41:
         c4:3c:fe:bf:b0:f9:21:c9:53:ff:5a:7b:29:25:98:ee:89:18:
         48:db:f4:2b:d7:e2:bf:b1:17:16:fd:e7:a4:bc:cb:db:0e:32:
         6a:99:33:0b:8c:d1:05:3a:c9:86:46:3f:b9:48:b4:cc:c3:c9:
         97:49:77:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:11:23 2026 by rpki-client