Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56e422a-4345-38f3-8b36-6078ac2d148b.roa
File:                     d56e422a-4345-38f3-8b36-6078ac2d148b.roa (raw, json)
Hash identifier:          jgh2gnFfT0/mYxn7902qJBICu3upTKtMfrzsppV18d8=
Subject key identifier:   B4:CA:EE:AA:6D:0D:87:BD:3A:B6:AD:5A:F1:AA:C1:4C:E7:56:B7:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E5A4A1B4CA6B2677446DF4500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56e422a-4345-38f3-8b36-6078ac2d148b.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     396593
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:1b:4c:a6:b2:67:74:46:df:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=64d1e724-921f-4d2e-9c07-7729b594b686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:9e:7b:8e:9e:f2:84:91:c9:06:13:2f:5d:
                    c8:2f:77:37:f6:7a:5f:2c:cd:e2:5d:a7:53:5e:78:
                    7d:90:b6:9e:ce:8d:de:e8:0a:17:69:7b:f4:dd:c6:
                    48:de:2a:a2:38:09:a3:e8:11:69:9c:9c:4d:3a:1d:
                    b5:69:d1:c0:99:8e:ff:1f:86:12:fc:70:3b:ce:c8:
                    eb:c9:55:8c:68:f9:25:e0:70:24:3f:61:f7:b0:ef:
                    4c:d3:93:c2:e6:fa:a4:9e:da:89:04:dd:1d:86:9b:
                    b3:6d:4f:10:73:d1:c1:78:e7:8e:54:ca:6d:04:d7:
                    88:8d:c4:e0:0c:c8:e3:3d:46:93:83:ee:11:c3:6e:
                    9a:27:96:0d:b6:ea:c6:65:c2:da:84:c6:78:f4:70:
                    f2:0e:e5:9d:26:6e:3e:93:3a:fd:ca:03:3e:35:12:
                    15:88:02:27:3a:15:53:98:5e:e1:71:ed:10:d7:75:
                    71:b0:8d:37:b7:f3:78:65:34:a7:75:2c:fb:85:b4:
                    5e:a7:25:98:ee:aa:ec:82:9b:4d:c1:47:c5:35:95:
                    df:14:06:9c:f4:2d:c6:6f:98:96:0d:87:14:d6:a7:
                    95:d8:56:3a:ee:b5:8d:01:4c:4d:d6:55:40:ad:3d:
                    a0:66:71:dc:3a:ba:2d:af:78:70:e9:ea:81:7e:37:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CA:EE:AA:6D:0D:87:BD:3A:B6:AD:5A:F1:AA:C1:4C:E7:56:B7:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d56e422a-4345-38f3-8b36-6078ac2d148b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:e0:7a:2e:48:a4:58:75:ef:19:39:fa:de:91:b9:68:a0:
         50:86:c1:1b:3c:5b:93:4a:a9:1d:53:e1:1a:d7:e1:21:e3:66:
         13:9d:20:39:e3:9a:a4:e2:b3:90:0f:3c:bd:5d:ac:d1:e6:4f:
         e8:0d:ac:93:b7:eb:ef:1e:d6:dc:bf:bc:46:28:f9:ee:e5:11:
         16:8d:3a:49:29:5e:3f:e6:ea:75:9d:39:09:2e:35:b4:4b:35:
         82:90:51:11:ee:dd:ef:68:0d:ba:a8:12:3d:2d:76:01:d3:e4:
         c5:0b:e0:89:01:6c:05:08:36:13:11:86:f7:0c:64:a5:83:62:
         91:3d:e9:7c:83:2a:45:d3:0e:fc:ee:63:71:26:20:a5:e4:a7:
         98:e2:80:19:d9:be:dd:29:a5:5c:1b:81:e6:ea:9f:38:4d:bb:
         99:15:23:19:6e:7a:e9:6a:ea:e9:8a:41:66:be:03:ea:e4:04:
         ee:2a:d8:bb:33:fb:e2:42:b0:fd:9d:d8:8b:69:54:62:e0:83:
         7e:5a:df:ad:f8:5f:d5:d2:fe:5a:d8:59:46:9d:9d:e2:d0:c6:
         e8:75:ae:0d:75:58:eb:e8:78:90:2a:87:a1:11:5b:71:3f:31:
         b5:30:26:f0:4f:86:fb:5e:84:05:5c:33:66:c1:e6:64:1e:1c:
         c3:e2:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:12:29 2026 by rpki-client