Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec2e5312-bc59-3ca4-bbbb-8d77f2d5e730.roa
File:                     ec2e5312-bc59-3ca4-bbbb-8d77f2d5e730.roa (raw, json)
Hash identifier:          jQqOuIPs4RRXGayLfLUGYbhFyEeMH5GqH+ba1xE/MFI=
Subject key identifier:   74:2F:4B:F8:A1:55:C4:F9:AC:D2:D3:18:A9:F9:97:AB:D8:0E:BD:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA292DD4E569B2BC5D0080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec2e5312-bc59-3ca4-bbbb-8d77f2d5e730.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396573
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:29:2d:d4:e5:69:b2:bc:5d:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=101dbdf5-b83e-4c7e-9f10-bfc669f1573b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:c1:2d:0e:fd:3d:4f:7f:59:a3:51:0a:1b:
                    a9:29:83:ee:8e:ad:11:6a:99:7f:60:6b:5f:ef:b8:
                    c9:6c:81:0d:3a:32:9d:c8:44:98:ec:f2:ee:66:c4:
                    64:ef:48:be:29:dd:1e:43:14:7c:8f:1a:0d:74:71:
                    c6:2b:75:05:e8:f6:c1:54:97:ee:61:58:9e:3c:5a:
                    3e:85:a4:fa:6c:c4:d2:7e:52:0a:ca:70:db:2a:1b:
                    47:d2:ea:f3:82:37:e5:5f:56:99:ca:84:af:c3:79:
                    8f:3f:d0:36:8f:2e:99:6b:1c:0d:ef:a5:5b:d8:64:
                    eb:f8:e1:24:b8:26:0f:da:c3:52:b1:ff:dd:38:f7:
                    03:d4:72:0d:a0:15:75:7c:d1:bc:dd:c9:89:f7:e9:
                    e1:c5:d4:77:20:0d:dc:0d:3e:8d:02:9a:25:7e:32:
                    63:49:3e:74:ee:1d:f2:d6:a0:e8:c3:85:8d:7f:af:
                    d5:a1:a1:aa:a4:20:94:07:2b:c7:f3:77:f5:d7:37:
                    4a:a2:a1:a2:05:cc:31:67:23:8e:36:7e:68:b1:c2:
                    3c:48:b8:35:a9:e4:c3:86:a7:5a:85:43:c1:75:65:
                    f8:23:c6:1c:6a:24:11:e0:ed:1b:c1:fe:46:04:c3:
                    14:ec:ee:9d:6d:88:35:ed:f8:e5:1a:3c:39:45:3e:
                    f5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2F:4B:F8:A1:55:C4:F9:AC:D2:D3:18:A9:F9:97:AB:D8:0E:BD:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec2e5312-bc59-3ca4-bbbb-8d77f2d5e730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:8c:b0:9a:f6:aa:a9:3b:0b:db:b9:2d:40:ed:48:ff:93:29:
         9a:6e:88:4f:8c:c2:16:96:b8:08:f5:99:bb:96:e5:68:8d:50:
         37:61:55:fe:3c:81:03:b9:c0:2f:60:c8:e4:73:4d:d6:b8:39:
         d7:99:5c:f2:fa:d2:3d:83:8b:b3:88:49:c2:50:ce:74:42:57:
         ff:95:82:22:ae:a9:6a:58:00:5c:6b:6b:13:c8:f0:0b:c9:23:
         19:58:07:90:aa:71:02:76:7e:31:c7:3e:69:1a:0c:c1:05:2f:
         ad:cb:92:8f:46:c2:1a:92:27:60:74:fe:04:2e:68:ed:c8:16:
         4d:4a:6a:d3:71:2e:0e:7a:94:63:23:ab:05:75:67:c6:db:3b:
         31:ce:30:cc:1f:66:6e:22:47:81:e1:fb:e8:40:62:ff:6e:79:
         08:85:00:d8:4d:19:1c:c3:c3:11:20:ee:12:5f:68:61:34:09:
         e3:92:06:77:4a:10:c5:d7:d4:f5:86:94:32:c6:9b:da:4f:c4:
         88:d8:3a:eb:0e:23:1c:e8:79:95:c9:21:8b:93:c0:00:07:b0:
         52:2a:63:34:ae:13:de:c9:73:4c:39:db:4a:ce:c1:97:2a:81:
         ac:8c:12:2a:55:ce:a1:81:78:bc:5a:79:19:21:6e:7e:f7:00:
         22:45:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:58 2026 by rpki-client