Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4876adb-c5ca-3e0e-90ca-965989eaa373.roa
File:                     f4876adb-c5ca-3e0e-90ca-965989eaa373.roa (raw, json)
Hash identifier:          1gUUyexgNNxgK0/JKLHbUuYs/JA2X4HqQiXzPkhfH3w=
Subject key identifier:   DF:95:FF:4A:3C:89:E3:C3:87:EC:80:C0:F7:E3:58:4C:25:78:36:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E815FB94B190980A1433E1180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4876adb-c5ca-3e0e-90ca-965989eaa373.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     396616
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:b9:4b:19:09:80:a1:43:3e:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=73236f22-8bd6-4786-b6de-e3f029f80fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:03:37:b6:10:cc:85:77:74:da:76:3d:53:92:
                    21:b8:e4:35:cf:a5:aa:6c:8c:d9:af:aa:d9:6d:db:
                    c2:94:0a:76:71:3c:ac:98:00:80:8f:af:9c:80:8b:
                    70:0c:f1:31:f8:55:99:b8:12:8a:df:c6:a9:0d:54:
                    aa:e8:8d:88:25:bd:33:ea:67:93:f6:44:72:d2:52:
                    12:e8:5b:41:ae:99:ae:55:d3:a3:b2:f1:db:7c:f2:
                    4d:fa:b1:03:6b:d9:e9:0a:a6:d4:62:2c:c9:dd:5f:
                    19:ed:c4:aa:19:8c:e5:69:53:8b:58:a7:fc:62:71:
                    6a:d4:5e:ca:2d:7d:e9:67:bd:5d:c6:7f:90:db:21:
                    fb:d4:01:e0:18:1c:13:a3:5e:3b:fd:3b:d5:5d:8f:
                    db:88:89:64:33:0e:00:db:30:2c:a4:f1:d4:19:78:
                    24:ce:f3:32:97:63:4c:2a:2f:aa:4d:b3:12:8a:05:
                    4b:34:72:19:91:bb:af:0e:da:4b:24:a0:4f:f1:a9:
                    76:bd:c9:48:d3:6d:a6:27:9b:5d:eb:91:78:97:09:
                    99:51:d6:a5:e9:0c:86:d9:7f:9e:76:2d:09:a5:65:
                    6f:77:db:91:67:c7:45:88:94:ea:91:55:d0:ca:cc:
                    96:ff:e0:f3:52:2b:5b:bd:9e:ee:ff:44:fa:60:a5:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:95:FF:4A:3C:89:E3:C3:87:EC:80:C0:F7:E3:58:4C:25:78:36:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4876adb-c5ca-3e0e-90ca-965989eaa373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:fe:e3:5f:f9:ef:56:29:c2:d2:69:6e:e6:49:f4:55:6d:b7:
         c9:b0:e0:4d:3f:20:a7:11:49:08:e7:9e:90:f4:18:7e:75:23:
         bd:15:8a:00:3f:76:5b:6b:f4:f7:39:dc:68:fb:da:ef:5f:9a:
         57:15:c8:07:cd:4f:ce:ef:0f:7f:a6:29:24:e6:87:c1:c4:59:
         e0:69:20:34:0f:da:c5:68:17:59:11:65:4d:11:68:e3:9e:65:
         47:a1:f3:0a:ce:38:42:25:d4:42:d6:23:11:0d:39:80:39:e7:
         e7:b3:a9:90:01:74:3e:a0:90:cf:46:16:c4:91:ba:20:16:b0:
         1a:75:80:d4:b2:6c:26:e9:64:a6:57:93:64:bb:c0:f4:25:ab:
         1d:24:22:91:7d:6e:11:f3:0a:fa:0c:90:69:25:d9:0f:59:8c:
         65:6a:aa:ca:38:52:cd:fd:73:7f:0d:a0:a0:7e:17:fd:b2:64:
         4e:b4:3f:ff:95:32:31:5d:5b:7e:4f:43:ec:9f:5a:65:b6:16:
         13:94:2d:27:6e:a9:c0:18:bd:a1:9a:80:fa:a6:0b:c1:3d:ac:
         04:f5:3e:11:19:22:7b:29:b3:56:48:0e:1f:45:78:8d:3b:81:
         31:c7:cf:84:74:5d:fd:0c:23:4e:3f:36:3d:74:e5:cd:0a:d6:
         a4:d4:5a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:35:41 2026 by rpki-client