Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa
File:                     f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa (raw, json)
Hash identifier:          Smu0ZkXpOWK2W/0q3YDhE4uA6gNK0hV/WohMWmUssGU=
Subject key identifier:   DB:7D:4B:82:E8:C5:30:54:BC:33:46:5A:1F:3F:3D:F0:92:F5:FA:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD0904F25E6421989921A9680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     20431
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:4f:25:e6:42:19:89:92:1a:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=bc477d25-2d5b-41f5-a6bf-be34ca3be07f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:28:0d:84:4d:df:ff:88:1f:4f:d1:c0:ff:7c:
                    3c:ee:85:d0:5a:31:81:ff:ed:f3:42:01:01:69:c3:
                    32:a8:9c:d8:88:f9:c8:b1:39:f6:92:60:63:85:a7:
                    ff:cd:0b:1a:59:14:48:ea:b2:28:c5:88:75:32:49:
                    84:ac:bb:5d:c4:be:2f:75:8d:b4:7f:89:8d:56:e1:
                    f8:20:3e:14:35:c3:60:2c:5c:86:c0:79:07:5e:72:
                    40:61:bd:ea:b3:52:8e:b2:97:88:42:df:78:58:fd:
                    b7:4e:b1:47:54:04:a3:49:13:ec:26:18:58:2a:34:
                    61:d3:85:1a:44:b4:1f:20:4f:bc:21:bb:8d:0e:d1:
                    1e:b7:98:2f:b3:22:34:02:78:7c:bf:2c:70:a3:37:
                    04:d6:49:ee:67:c0:cb:55:25:7d:aa:0a:1d:4d:ca:
                    a9:0f:4e:f0:1e:cb:b3:2f:4b:ee:73:e5:df:16:d0:
                    02:21:01:0e:d2:a5:63:a5:ce:44:01:49:19:ec:a1:
                    47:1a:08:1c:6a:8d:f6:64:dd:40:bd:ed:77:44:3d:
                    61:34:ba:e3:c2:c5:ee:ca:f7:4f:60:5b:73:54:c1:
                    61:15:95:86:48:d6:73:47:b9:8c:0a:a9:e1:f3:4c:
                    4f:23:85:d8:d5:2f:40:bb:61:c3:25:cb:04:e3:6e:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:7D:4B:82:E8:C5:30:54:BC:33:46:5A:1F:3F:3D:F0:92:F5:FA:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f020f9a6-b48e-305f-a7a9-1a5bc7cf8a2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b0:0c:ff:f4:00:ae:1a:f1:5b:26:80:8a:e3:ba:30:ab:31:
         bb:cb:10:cf:82:16:70:5a:19:22:e9:7e:cc:e1:26:ac:f0:ab:
         88:6f:85:e5:48:95:e9:fa:52:7c:c3:8d:e0:58:e0:45:76:3e:
         82:5e:04:2a:15:5d:ab:20:d8:a3:b6:32:de:70:52:13:74:95:
         2d:ab:7d:36:3d:f2:dc:b0:b9:17:76:2a:1c:61:f1:5a:1e:61:
         d8:fe:d0:b7:e2:1a:f3:72:d9:8a:90:05:38:d0:a2:e9:70:da:
         2f:c0:86:c5:c7:a5:4f:6e:a4:e2:c1:15:ab:9b:ba:0c:08:99:
         e0:b0:35:09:d3:2f:67:d7:2e:07:bc:c4:b2:3e:ed:c4:c3:e5:
         7d:27:ab:30:37:36:8c:7d:f4:f6:ea:db:e7:a5:3a:85:ae:f8:
         71:5e:c3:38:58:c2:0b:63:f0:bb:f1:9c:96:87:4b:9e:f0:b9:
         0f:08:66:26:27:1b:eb:78:ce:7f:a9:26:73:63:13:f9:50:4d:
         53:09:32:57:c7:9a:09:11:4d:e9:7f:69:18:47:b4:ba:ab:93:
         18:bf:47:a4:8c:36:75:6a:0e:14:21:f3:df:52:82:a0:42:58:
         ee:15:59:0d:1e:bb:53:3c:fe:75:70:98:05:20:aa:a7:98:73:
         d1:ac:d4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:10 2026 by rpki-client