Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c5c893-d6fd-3716-b3a7-88306bbef125.roa
File:                     10c5c893-d6fd-3716-b3a7-88306bbef125.roa (raw, json)
Hash identifier:          X77pSVJk+52NAJRG9hMimggL/lSh0853HblyCf01FoU=
Subject key identifier:   86:39:68:51:D2:D7:13:B4:EB:3A:76:FF:D8:3A:21:6B:55:B7:C1:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86956A14BD39EE63FF7DB180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c5c893-d6fd-3716-b3a7-88306bbef125.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     10515
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:6a:14:bd:39:ee:63:ff:7d:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=ddc3e0da-dd5b-4197-b43a-60d1cbc22697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:12:85:14:d8:67:d6:09:cb:b9:19:8a:fb:
                    00:43:62:33:6d:5c:4d:be:0a:1d:b9:f8:20:18:25:
                    77:ce:25:8e:8c:5d:ee:74:98:60:3b:f5:32:e6:2b:
                    f8:14:21:8d:51:6c:39:d1:01:33:a1:d0:8f:1a:d9:
                    85:bc:38:c1:46:45:f0:89:69:e6:f6:1f:24:a4:a3:
                    58:94:47:da:20:f5:d5:ea:86:fb:67:12:84:7c:9d:
                    97:ff:c7:7b:0d:82:1b:86:75:01:41:34:79:63:3d:
                    13:00:b0:c2:6c:c3:7b:58:f6:c6:97:ab:8c:c3:74:
                    7b:9d:31:28:99:dd:43:4f:63:45:07:61:0e:42:fa:
                    72:61:9c:8d:56:ed:fe:14:bf:f3:ec:42:b8:f7:d4:
                    89:71:16:c5:f3:ea:42:f8:7c:89:5d:ad:d8:56:c5:
                    4c:39:ba:13:f4:5c:7d:2d:ba:65:eb:c7:ac:21:35:
                    e1:41:1d:e1:24:6e:65:57:c7:e0:9b:8e:51:ac:61:
                    e1:76:36:25:1a:28:d8:8c:46:31:7f:bb:88:ba:61:
                    b2:70:57:d6:2d:9f:5c:a1:2f:65:c8:73:ec:ac:97:
                    45:a5:ce:40:40:92:c4:59:0f:19:23:36:25:77:e6:
                    59:01:78:43:13:d9:b3:c4:ae:6b:a3:bc:db:d4:98:
                    11:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:39:68:51:D2:D7:13:B4:EB:3A:76:FF:D8:3A:21:6B:55:B7:C1:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10c5c893-d6fd-3716-b3a7-88306bbef125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:21:d2:75:13:dc:aa:0c:a5:06:33:a2:02:4d:2f:a1:13:3d:
         3c:fb:82:6a:e5:93:a1:83:d3:7c:3e:84:7d:fe:0a:b1:80:b7:
         4a:96:12:ad:d5:9b:60:87:75:26:cd:57:11:b4:cb:5a:f7:bd:
         56:d7:4b:ba:5a:af:23:3a:9b:72:45:52:d1:05:61:91:29:8a:
         9b:ff:88:61:02:e3:8d:82:1b:0c:bf:93:85:df:5c:b8:c3:b2:
         2a:bc:35:09:2a:95:ea:b4:91:d8:28:bf:82:d1:bb:a7:56:76:
         a5:eb:11:20:5d:a7:93:27:f6:b1:bb:02:a0:77:ab:d1:a2:46:
         3b:0a:58:72:d8:d8:58:75:1c:c5:18:4a:a8:c4:ac:df:c0:31:
         c5:2f:50:0b:27:c0:12:55:53:1a:e1:4e:8d:81:42:00:fb:db:
         fd:2b:db:b2:c2:62:5b:9f:71:3f:97:e4:b6:95:66:4f:75:e8:
         37:09:ba:f0:e4:ce:3f:02:bc:a5:72:0a:49:1d:1a:01:ba:5c:
         e3:84:1b:e6:c3:b3:d6:3f:57:33:c7:13:e8:39:ee:c4:10:78:
         f9:e3:a8:72:09:37:aa:bd:8d:db:c6:d2:62:77:df:2a:dc:9f:
         6c:85:23:02:36:a8:84:94:06:fc:3e:44:cd:0c:c9:71:ed:6f:
         f5:c9:68:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:43:35 2026 by rpki-client