Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea699035-fd1f-3b9c-be57-758cbdb50a65.roa
File:                     ea699035-fd1f-3b9c-be57-758cbdb50a65.roa (raw, json)
Hash identifier:          XmnsJhjF4g9AP5Cf8EroQXoFBo7ML4TtGgLRaKyYXI4=
Subject key identifier:   17:4A:1A:6C:20:3B:C2:BD:42:12:8E:33:84:01:AA:EB:62:B5:14:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D32F5A86E2D76EDAADC5A6500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea699035-fd1f-3b9c-be57-758cbdb50a65.roa
Signing time:             Tue 17 Mar 2026 14:06:58 +0000
ROA not before:           Tue 17 Mar 2026 14:06:58 +0000
ROA not after:            Mon 15 Jun 2026 14:06:58 +0000
asID:                     20431
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:a8:6e:2d:76:ed:aa:dc:5a:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 17 14:06:58 2026 GMT
            Not After : Jun 15 14:06:58 2026 GMT
        Subject: CN=cf765a49-8583-4270-8a8f-2dc2623357de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:b2:c7:c6:2d:d4:43:ec:f9:6d:78:c7:61:
                    6b:c3:fa:8a:fd:95:a9:2d:86:8c:10:b2:a1:14:68:
                    7b:2b:60:3c:a3:97:01:d6:68:d9:f5:9f:b0:19:26:
                    3b:15:a6:5b:79:a8:e1:e8:62:3b:0f:89:80:b9:7d:
                    72:cd:6f:d9:85:24:08:9f:5b:c6:c6:63:b3:7e:cf:
                    b0:05:81:ea:77:ba:a2:cc:61:8b:f7:3e:c4:df:f5:
                    1d:ca:2b:80:fa:3f:2e:69:ff:1f:49:b7:83:3e:dc:
                    f2:28:86:b8:21:bc:1d:74:44:9b:a9:67:11:43:76:
                    38:6e:28:4d:85:a7:42:d4:a6:fe:39:9d:1d:f6:4e:
                    ca:f7:83:5d:c4:d2:4e:ee:2c:d0:e8:e8:9b:d6:dd:
                    25:84:82:a8:ca:b9:36:eb:ba:7e:c2:7c:e3:06:ca:
                    41:f2:ec:b0:a1:ab:ef:91:63:6c:1d:6d:59:bb:8f:
                    5f:11:5f:55:2c:12:a7:da:c9:d2:d3:1f:94:81:91:
                    d4:98:10:68:34:b1:b3:ec:d3:64:30:d0:b6:1d:c9:
                    ff:fa:a0:9d:24:e9:f5:d4:f3:26:85:44:cb:88:b5:
                    2d:b9:a3:18:ec:1b:d4:35:70:07:31:c7:d2:d7:57:
                    1c:9c:e7:28:15:b7:ce:94:37:c2:49:cd:b2:a1:52:
                    67:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4A:1A:6C:20:3B:C2:BD:42:12:8E:33:84:01:AA:EB:62:B5:14:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea699035-fd1f-3b9c-be57-758cbdb50a65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:e2:e0:80:0c:03:28:ad:27:bc:89:ed:d4:99:74:d5:39:82:
         8d:f4:c4:9d:6b:91:c2:c6:21:40:1f:88:1c:a4:ab:8e:a9:1a:
         1f:6c:af:b5:8d:2e:54:7f:8e:4e:ea:02:8b:59:44:76:8a:f0:
         03:21:8c:1b:99:72:6c:72:13:78:be:45:85:88:5b:0a:92:18:
         85:4a:4a:7b:04:3c:86:76:8d:28:e4:e2:45:cf:49:6a:30:0a:
         bc:bc:02:23:88:55:97:69:f0:9d:2e:2a:20:7c:97:d5:ee:1b:
         22:7a:13:3d:44:52:a3:35:08:50:f2:61:d1:02:50:5d:3e:2a:
         e3:d4:4e:fd:c3:2a:d4:04:03:ad:9b:c3:1c:6c:46:95:eb:61:
         01:52:0d:50:02:40:b6:c8:81:3f:1f:95:f6:f4:4e:28:71:29:
         09:d8:94:e0:7e:1e:9c:f8:f8:42:23:ec:86:39:8d:7e:bc:2b:
         c8:07:4c:f9:36:7c:73:19:36:ef:dc:1d:01:45:65:7a:c4:ea:
         cd:c2:c3:04:99:74:ad:75:5d:60:c6:62:43:8a:dd:4c:27:da:
         b0:71:91:e2:cd:f1:f7:87:4c:57:a5:c6:11:bb:5b:0a:84:da:
         db:16:76:00:ff:d4:30:08:7c:8a:f5:96:b5:e5:fa:64:19:9d:
         a0:fd:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:39 2026 by rpki-client