Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/034310fe-0312-30b6-ba85-33ab41c8d9c8.roa
File:                     034310fe-0312-30b6-ba85-33ab41c8d9c8.roa (raw, json)
Hash identifier:          ApUJg0jD8N4sv9ztq2ltqWb99iw/m/WIVEFUWHgVd68=
Subject key identifier:   93:24:CD:AD:BA:BE:4E:01:D2:D1:71:25:6A:8F:17:7B:AB:4C:D8:17
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79A38CD22657C3BC3646000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/034310fe-0312-30b6-ba85-33ab41c8d9c8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396545
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:38:cd:22:65:7c:3b:c3:64:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a773bdd3-66fd-4dfe-a041-bc935fb46bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dc:15:b4:aa:ed:c8:8a:81:57:53:44:92:34:
                    8e:74:a8:42:81:87:e8:36:b7:f5:42:41:f7:58:8d:
                    6c:2c:32:35:7f:52:fa:2f:2f:19:b9:fe:63:09:a5:
                    26:a8:0e:a6:01:53:b3:60:91:88:b9:71:ca:03:f8:
                    43:68:7d:d0:e8:9f:3b:4b:72:d8:7f:6b:5e:d5:04:
                    d1:ba:c5:26:bd:53:e1:ac:06:26:16:0a:cf:6f:95:
                    47:6a:8a:ed:04:dc:69:61:56:30:89:b1:5a:46:2b:
                    90:91:2a:df:b0:eb:37:08:2b:c7:2f:d0:15:d7:42:
                    cf:9c:6e:19:86:34:a2:54:0e:3b:38:89:af:e9:42:
                    ea:22:5f:f2:f2:c0:89:3a:c8:fc:d2:e6:2a:d3:67:
                    c6:62:22:1c:4a:73:56:84:71:a5:28:09:21:85:85:
                    f1:db:a1:b8:6a:83:e9:04:b5:b3:2d:7c:f5:08:e4:
                    3f:5e:b8:bd:ac:6c:d9:04:5e:69:1f:05:d4:4c:13:
                    7c:de:0c:db:f2:19:b7:79:6b:71:84:8b:cc:c8:0b:
                    1e:41:a0:eb:24:b0:2a:19:d4:85:82:fd:ec:9e:df:
                    4a:73:8e:27:c9:d7:7f:7e:29:d8:31:60:de:1c:a6:
                    9b:42:ba:0d:e7:99:95:a1:d3:a4:4e:9f:a7:4a:65:
                    97:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:24:CD:AD:BA:BE:4E:01:D2:D1:71:25:6A:8F:17:7B:AB:4C:D8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/034310fe-0312-30b6-ba85-33ab41c8d9c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:45:53:42:91:28:10:4c:31:58:f0:d9:72:e7:b0:70:5b:70:
         9c:47:82:b0:bc:a3:6a:dc:bc:64:9e:5c:d9:bf:94:3c:3d:80:
         a7:08:0e:5e:0e:35:9e:5d:c7:ae:d9:8e:61:ca:29:3a:20:9a:
         95:c6:ff:f9:1e:8c:39:4a:10:b3:16:62:e8:1a:96:84:dd:f0:
         62:82:b8:fd:62:9a:56:84:55:7c:a3:75:83:a5:05:e7:dd:16:
         dc:2e:a0:32:78:b6:6d:15:ac:67:59:74:a6:64:eb:22:34:24:
         71:05:e0:ef:7d:10:dc:0f:dd:4f:b6:94:86:23:8a:67:2b:7f:
         a4:ce:b0:ec:ca:1b:4d:88:65:14:ad:31:47:05:a5:0f:f8:63:
         ea:b5:eb:05:99:ab:79:0d:c2:3a:28:fa:d6:a9:ad:23:6e:4b:
         34:f6:5c:0a:d2:85:3f:92:72:d7:7f:6e:ff:2d:71:34:c1:9e:
         b1:38:f4:96:85:37:ea:06:7a:ec:1f:f0:1d:ea:1f:99:b6:6b:
         b5:b1:68:e6:12:37:b0:43:25:83:1a:1f:be:e1:96:b0:79:df:
         bc:04:b4:4d:c7:8b:cb:0c:15:3b:46:ba:6c:fa:47:af:e6:3e:
         b5:e2:72:ee:49:25:b8:33:08:17:75:6a:3e:a7:c1:2e:1f:a9:
         a8:04:db:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:53:36 2026 by rpki-client