Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09b42162-5959-37a9-97a3-a126b0038492.roa
File:                     09b42162-5959-37a9-97a3-a126b0038492.roa (raw, json)
Hash identifier:          OMOMZzELOzNTL3Ay9Wg7/UciBj16sqB6VWwVsvMWgMc=
Subject key identifier:   2F:08:50:72:E5:E2:62:23:B9:E1:22:A0:F1:E8:13:5D:0E:9C:AE:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C82F82AE4B442F33765C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09b42162-5959-37a9-97a3-a126b0038492.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     36621
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:82:f8:2a:e4:b4:42:f3:37:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=b1e16e2e-76d4-4d13-a251-ffbd1ef2e18b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:3d:ea:1f:8d:5f:a5:08:7b:8f:af:5b:f5:
                    d9:9c:05:20:21:4d:90:86:72:34:53:06:b0:09:86:
                    e6:a6:c9:db:51:60:10:37:29:1b:61:14:eb:37:ad:
                    8b:a9:6c:10:2c:6a:3a:fb:00:94:92:0c:5b:dd:97:
                    49:eb:a1:cd:f5:d5:3b:51:d1:1b:fd:75:be:44:54:
                    72:30:63:12:13:df:8e:ac:05:e7:8b:78:23:89:29:
                    61:32:6e:44:c2:05:51:95:64:9c:a1:c0:07:11:e4:
                    b5:44:0c:cc:e0:c4:1f:82:22:86:6f:9b:70:21:36:
                    df:0d:a3:be:d5:02:99:96:2a:36:77:02:fa:a5:66:
                    cc:1c:d1:c7:41:fa:53:7d:69:dd:41:fc:dc:ef:c1:
                    16:47:49:85:7a:a1:84:cf:8d:07:40:7f:99:e3:94:
                    4a:e2:25:76:05:d8:ad:14:df:2e:5d:2e:f1:07:bf:
                    de:59:ce:d6:17:53:f1:e3:c6:8d:7e:90:5e:8c:ce:
                    eb:d8:a6:47:80:24:74:d4:d4:96:29:70:5b:53:96:
                    78:a7:19:95:12:e8:88:82:b5:45:34:8f:d3:06:94:
                    1f:cc:74:fb:e3:c3:c3:b7:62:22:c5:76:d6:5c:cb:
                    fb:d3:72:db:58:92:e4:6e:80:77:28:48:1f:64:19:
                    a5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:08:50:72:E5:E2:62:23:B9:E1:22:A0:F1:E8:13:5D:0E:9C:AE:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09b42162-5959-37a9-97a3-a126b0038492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c8:ff:2c:06:e2:f5:20:76:b7:e3:3f:49:eb:df:2a:cc:18:
         2f:8e:5c:ab:e4:5f:2f:ba:c7:6e:cf:52:f1:8f:30:78:ce:be:
         fe:55:00:bc:e5:0c:c3:93:67:5f:8f:b1:f2:12:bf:bf:19:c9:
         6b:2d:f7:10:a4:5e:ab:f1:88:a2:a1:13:78:3c:f4:45:a4:d3:
         97:5f:fd:0a:9b:5a:67:5c:dd:a3:dc:98:47:70:2c:2a:50:70:
         74:d7:df:a5:ae:f5:60:89:ce:37:32:2d:2e:1d:9b:53:76:fa:
         82:9e:a9:1d:f5:8c:3b:bb:d8:50:03:21:ef:ce:fa:6c:e0:00:
         ae:9a:7f:68:95:5b:b0:93:b4:fd:4f:03:a2:92:60:36:67:45:
         52:79:4b:9a:7f:32:7f:85:04:f9:ee:59:96:67:cc:a8:db:ef:
         42:a3:f3:06:31:26:37:1f:1f:75:03:10:b5:b8:2a:12:24:34:
         8e:54:21:80:2f:88:ae:f4:19:a5:72:16:30:a0:2d:c5:45:57:
         4a:bd:59:45:48:a6:a8:0b:f4:f2:38:48:80:2f:82:39:db:32:
         bd:90:b9:7b:40:35:e0:80:11:91:86:77:f8:d4:d0:d0:31:f9:
         e2:42:ea:b3:b4:c6:77:8e:b0:b2:6e:38:13:ff:d8:1f:ff:8e:
         ad:b6:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:49:13 2026 by rpki-client