Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa
File:                     c8968285-2cba-3390-8083-233c982b8c35.roa (raw, json)
Hash identifier:          MiCrFG5Qj7havJa9WzXyXzQdSalQIxUBGaZS0QR89fE=
Subject key identifier:   A9:39:E6:6F:5B:26:50:79:EA:69:C7:D1:8D:48:07:BC:F4:F8:D0:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A64EE05EA9052DFD74D6000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     396588
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:64:ee:05:ea:90:52:df:d7:4d:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=72504b05-74eb-4b3b-aac7-bff94f535f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:da:4b:3d:7d:61:1b:a8:0b:3f:12:82:f4:eb:
                    10:31:a4:21:81:fc:e6:d6:f2:9f:43:2d:dd:24:59:
                    fd:33:f3:0f:f4:a4:69:43:9d:c8:3f:02:df:19:db:
                    86:dd:17:02:23:6b:6d:db:8f:a4:2b:68:4e:62:38:
                    d9:13:e4:a7:28:10:0e:7d:55:1d:73:66:c2:44:f5:
                    dd:7e:9d:e1:8a:9d:4e:f3:b7:62:e7:ee:9f:de:8a:
                    53:78:8f:41:c2:8a:3e:1e:20:a7:58:0b:c9:39:82:
                    cb:f6:fb:ad:c4:a1:8c:99:fd:11:7f:ad:b6:ef:16:
                    2b:26:6f:38:a6:f1:32:fc:8a:05:2e:08:1f:75:0f:
                    43:50:90:e8:f5:5d:a0:93:3b:f3:1b:02:92:f3:5c:
                    b1:eb:b9:a3:49:0b:47:88:ff:9b:6c:ca:1b:33:c2:
                    7c:cf:59:e3:90:f9:35:9b:08:8c:6f:ce:30:b7:16:
                    b8:fc:cd:70:b0:8f:7d:b2:c4:f2:6c:59:5e:f8:a0:
                    7f:4c:b1:8a:f4:32:fd:df:39:14:6e:36:1f:73:d2:
                    fe:47:80:fb:47:2a:e5:14:0b:6c:01:3e:46:0b:34:
                    ab:2a:d9:96:8a:4d:d4:a7:6d:de:93:83:2a:6d:6c:
                    90:76:48:1d:2b:52:07:53:27:a2:b9:ae:2c:c6:f2:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:39:E6:6F:5B:26:50:79:EA:69:C7:D1:8D:48:07:BC:F4:F8:D0:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8968285-2cba-3390-8083-233c982b8c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:bf:ca:29:83:d9:a8:81:7e:76:40:ee:cf:8e:16:1d:27:
         ae:55:2f:31:3d:98:cb:00:cc:51:f9:4e:7c:e5:78:06:bd:d4:
         68:c4:92:93:88:be:f8:70:62:80:0e:2f:bf:ad:2b:dc:8c:19:
         27:98:4d:c1:55:61:81:3f:49:7c:52:94:f0:61:e3:58:3d:2d:
         e7:13:c6:db:36:79:63:4e:4e:53:46:e2:dc:05:fe:51:dd:95:
         b2:d6:5c:f4:e0:9c:6c:e2:d8:0e:c3:9b:e4:14:af:cb:aa:af:
         43:0a:2a:b6:de:6d:90:d9:f1:fa:3b:ab:b2:d2:d8:ac:39:9c:
         5c:bb:b8:fc:6a:22:33:ba:ad:2d:6d:c8:df:40:fc:3a:09:65:
         f2:2c:60:19:fe:4d:6f:e0:ae:7e:2d:22:98:02:f2:b0:2e:2e:
         35:b1:c4:0b:64:0d:6d:4b:d0:b9:32:0b:10:9d:c4:3b:95:ac:
         30:84:a2:96:96:dd:a2:2b:b8:28:d8:51:ed:e7:9d:03:bb:b4:
         58:72:1c:bb:2b:db:a0:e0:04:af:97:5c:f1:80:10:04:70:3d:
         c3:69:d5:58:0c:70:19:0a:4f:38:98:bb:97:6b:4a:ea:71:92:
         13:bd:84:a6:b4:c7:50:60:fc:3c:4e:52:4e:de:19:91:ec:24:
         4f:db:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:29:04 2026 by rpki-client