Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa
File:                     dbad8993-698d-3d02-aaee-faa7494f65d2.roa (raw, json)
Hash identifier:          mfvLniqcMTUsJ8JSNjQMUhzY2lpNBn4E7XXxZ5rl75w=
Subject key identifier:   C9:3E:8D:BA:19:F9:7E:DF:FD:5E:53:B4:CD:40:8E:3F:4C:56:96:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA411108ACA588F347EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396552
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a4:11:10:8a:ca:58:8f:34:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=6245f740-ac3e-4dc6-aa28-9640c38002b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d3:f4:9c:e1:d6:03:28:44:e9:e2:65:b3:60:
                    12:e0:c7:de:a0:66:d3:2f:42:8e:f8:fe:cd:86:e4:
                    f5:24:3e:7b:58:60:4e:e4:ff:c0:e4:88:ef:f7:c2:
                    99:1a:7a:9b:09:9f:c8:fb:69:99:4e:ae:41:ee:2e:
                    ff:39:b3:58:f1:c4:16:84:46:4d:2d:4b:2a:e4:fd:
                    13:98:76:f0:f9:08:8f:19:26:07:98:0b:59:32:ab:
                    70:64:4a:d4:ad:69:07:cd:65:ef:43:cf:b0:71:d3:
                    d6:12:86:95:14:35:b6:b8:66:8b:ac:a5:ee:4b:ad:
                    2c:75:0f:cb:cb:02:ef:8a:c3:35:4d:c4:cf:31:e7:
                    2c:99:97:9e:8e:4d:2f:99:bf:c5:10:e7:fe:89:e5:
                    56:88:e1:16:d9:ed:9d:fa:e3:fd:98:b6:40:21:6e:
                    b9:5a:84:1c:4b:b6:03:d7:3c:29:e2:aa:c4:7f:39:
                    4a:96:93:4a:d7:17:10:68:2c:46:8d:c4:5e:53:ff:
                    49:09:d1:5c:e6:c4:a9:b7:c5:75:70:f3:cc:f0:c0:
                    df:56:44:15:96:ee:2e:5f:a7:50:41:8d:8e:1e:f4:
                    b7:3c:86:14:db:4a:da:ce:36:67:2c:ca:88:3d:c3:
                    81:61:8a:f8:94:f9:ae:45:d4:1b:12:33:16:2e:7e:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3E:8D:BA:19:F9:7E:DF:FD:5E:53:B4:CD:40:8E:3F:4C:56:96:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbad8993-698d-3d02-aaee-faa7494f65d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:70:f7:76:b3:8d:ec:bb:3c:34:a3:54:d4:88:2c:47:8f:
         a2:93:6a:07:f9:c4:53:e2:76:e1:f4:2a:c6:c6:91:28:3d:dd:
         73:9d:fc:37:59:cc:22:b9:4b:18:39:1a:54:d9:0d:25:bf:b7:
         f9:82:45:c2:d1:48:01:c3:80:e1:05:c2:75:ac:be:0a:0f:66:
         59:d4:91:2f:3a:f1:ac:98:dc:0e:fd:19:6e:84:4d:32:b6:da:
         6f:7a:6c:bb:12:2d:24:a6:de:12:05:17:d2:e6:a5:46:19:62:
         77:97:c8:ab:d9:85:3a:20:fb:12:83:65:35:fa:3e:19:6c:34:
         c2:ae:eb:d1:bf:db:c5:6c:ec:f4:0c:f8:db:b9:b0:0f:4f:6f:
         a8:03:39:57:62:6e:d2:6a:1d:9a:02:97:61:0c:90:4c:1d:02:
         2d:bc:f2:2f:25:86:c8:cd:c7:14:1f:15:e8:de:16:d3:0a:e9:
         fb:22:17:4e:1d:a9:7b:bb:27:9d:71:ca:7b:14:32:c7:96:c7:
         04:48:cf:fb:9e:b7:ed:f5:74:1a:ef:58:88:f5:56:0c:87:d5:
         dd:bb:b5:5c:da:70:c1:8b:2e:11:65:88:01:f3:bd:a0:d3:ae:
         b6:a0:f2:bd:d9:aa:0a:cd:c9:fa:55:ac:6d:e9:d0:76:ae:e4:
         a8:1f:97:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:34:02 2026 by rpki-client