Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d47128fd-5851-3db5-9520-1b816b7344c6.roa
File:                     d47128fd-5851-3db5-9520-1b816b7344c6.roa (raw, json)
Hash identifier:          9eJonufA3l08mFmJIbaY6C8nXIaGZViU4BPfb2EFZcY=
Subject key identifier:   A9:A0:E8:36:D0:6B:AC:1A:7E:D3:52:6A:DD:CD:8E:EF:BF:61:0B:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FFF182E79DF7B86CE6280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d47128fd-5851-3db5-9520-1b816b7344c6.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     397201
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:ff:18:2e:79:df:7b:86:ce:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=2767ba94-44d2-4b99-8c21-c71fcf3ce547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d1:a4:8e:86:91:fe:16:17:0a:0d:85:9f:f8:
                    11:46:02:61:56:44:21:c6:a7:6f:c2:7a:81:20:71:
                    a6:51:c9:9c:7b:1a:eb:e3:4d:30:51:3a:3f:85:a9:
                    d5:43:a5:e6:b0:54:05:dd:92:28:5f:78:c3:f7:ed:
                    0a:ce:a3:94:5c:1a:32:50:a2:17:88:d8:8c:d8:ba:
                    e5:cb:37:78:18:da:86:64:9b:21:86:f5:47:f1:91:
                    e0:4f:71:00:c1:ce:3b:b6:8f:8a:e1:5e:20:20:5b:
                    b4:f2:f9:8a:2c:83:54:57:d4:d4:99:35:51:13:32:
                    4f:f8:3f:3d:88:3b:59:dd:11:ae:8e:60:c0:a1:e1:
                    ca:e2:a1:3a:9b:47:cd:a2:bf:c1:06:78:7d:97:33:
                    ac:ae:6a:4e:3a:b1:7b:9a:bf:29:ae:9f:d5:79:98:
                    ec:09:25:3f:1f:d1:df:3e:29:4a:40:77:b8:55:5f:
                    bb:59:1f:52:3d:a7:30:14:44:00:33:6a:33:d0:b8:
                    f4:af:54:62:5f:3c:ce:ed:59:0b:42:ca:e9:7e:3f:
                    f4:ee:5d:2e:80:bb:f0:05:0f:51:ca:91:7b:34:84:
                    13:56:c3:7f:35:db:6c:89:60:64:f1:fb:61:1a:5c:
                    a1:db:44:a2:bc:0f:87:b9:46:98:70:b2:26:b8:b5:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:E8:36:D0:6B:AC:1A:7E:D3:52:6A:DD:CD:8E:EF:BF:61:0B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d47128fd-5851-3db5-9520-1b816b7344c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:ad:ac:c3:c9:f7:f7:9c:5c:16:c5:07:76:eb:21:25:ad:a4:
         76:40:cd:51:11:cd:b0:c0:72:ba:44:19:a8:97:1f:6c:3e:17:
         e3:c3:dc:f2:d7:b3:e4:26:d7:8e:3b:c8:16:a3:8e:03:8c:43:
         b8:cf:0e:73:2a:28:da:ab:77:76:cb:60:d3:54:54:dd:5c:af:
         91:e6:75:23:2d:a9:0b:9c:e1:97:15:e1:f1:0a:d6:36:bc:1b:
         23:e8:2f:d1:1a:27:c1:53:31:b4:f8:6f:5d:2e:02:3e:ec:29:
         29:68:f9:e2:15:06:06:fd:ee:4c:bd:15:1f:64:19:e1:63:07:
         05:1f:ac:f0:6e:93:e5:e1:ab:b4:dc:b4:4e:d3:59:00:5a:b1:
         9a:c7:82:5c:92:37:83:e5:6e:f9:2b:f5:17:65:c8:0c:12:72:
         7f:e8:6f:f3:01:31:84:99:06:68:99:50:af:ff:e8:e5:fa:89:
         5a:44:dc:e5:cc:1f:24:e9:fc:fc:da:eb:95:c8:06:94:6c:16:
         dd:52:ff:e8:5a:e9:66:d3:12:d0:30:b4:13:19:81:ba:80:2d:
         b7:f7:e9:5d:88:50:52:44:6b:6e:17:20:af:00:80:46:45:40:
         ce:b1:0e:75:6f:08:da:11:a2:e9:4a:95:f5:07:64:0a:a1:65:
         07:43:af:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:07:16 2026 by rpki-client