Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3499c525-c467-3c1b-9def-349e395b94d3.roa
File:                     3499c525-c467-3c1b-9def-349e395b94d3.roa (raw, json)
Hash identifier:          RHqwYKCePJUmF7YC3ZD3RE4UtRRK/KLHzdHsltkryuw=
Subject key identifier:   D8:D2:8A:6A:79:74:A5:C4:32:FD:77:0A:0F:55:11:FF:22:2C:D9:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5FA86B4C9D0DB42C067D4000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3499c525-c467-3c1b-9def-349e395b94d3.roa
Signing time:             Thu 02 Apr 2026 14:22:43 +0000
ROA not before:           Thu 02 Apr 2026 14:22:43 +0000
ROA not after:            Wed 01 Jul 2026 14:22:43 +0000
asID:                     396552
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a8:6b:4c:9d:0d:b4:2c:06:7d:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 14:22:43 2026 GMT
            Not After : Jul  1 14:22:43 2026 GMT
        Subject: CN=b232a26f-a49d-4880-9e45-f880e4d54cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:03:b2:90:e3:f9:88:34:6b:02:81:ae:f7:48:
                    63:b5:74:01:d6:c7:c7:cf:eb:3d:d5:65:1f:48:86:
                    62:c2:a7:3b:d5:f5:09:f1:ef:28:54:38:ac:e6:17:
                    fb:0a:51:59:85:00:0e:47:43:1f:3e:14:62:38:6e:
                    dd:a3:51:e8:ca:8b:65:64:f3:79:28:3f:18:79:38:
                    de:87:a9:e6:a5:e5:8a:a2:e1:39:ae:8e:fa:b0:42:
                    de:37:16:6d:76:2f:5c:88:6b:c5:49:1f:6c:05:34:
                    16:0e:f3:a2:e3:b1:6a:af:c3:f7:81:09:50:43:d0:
                    f3:a0:6f:de:54:60:08:ed:dd:8e:77:44:49:45:54:
                    ff:40:7d:b6:cd:60:1a:23:9d:6b:db:70:2e:d4:48:
                    31:3c:b1:ad:e2:6c:4f:b0:93:f8:01:a3:62:92:11:
                    38:d0:a8:10:10:3c:bd:e0:da:07:b1:c4:4d:53:89:
                    f0:b1:e1:cf:fc:a4:5a:7a:a9:aa:fa:b0:14:b6:b1:
                    40:95:9c:2a:21:bb:0f:37:0f:b8:08:78:aa:57:67:
                    57:02:8d:b5:65:72:28:d5:d5:fa:8d:0a:4a:f7:d0:
                    ae:84:5b:3a:3a:67:a0:66:9f:b4:00:cb:a8:47:9a:
                    fa:7f:b2:72:c4:a6:60:8e:ee:9b:bd:2a:d0:c5:18:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D2:8A:6A:79:74:A5:C4:32:FD:77:0A:0F:55:11:FF:22:2C:D9:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3499c525-c467-3c1b-9def-349e395b94d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ef:44:37:4d:eb:76:d6:0b:0a:63:9b:ed:62:8c:df:00:19:
         2e:06:8c:25:3c:4e:31:74:89:d1:cb:76:ad:3a:8a:e9:d8:8d:
         b2:ea:0b:b4:79:38:bf:2d:f1:27:41:cd:96:e3:37:85:44:e4:
         df:64:e7:2a:fc:59:52:6a:1f:0e:25:d3:a7:d8:c1:bc:cb:93:
         5a:e5:0d:62:03:5d:e9:20:ab:c9:a7:63:38:8b:0b:21:32:7c:
         fb:06:f6:78:02:a5:39:b2:89:cd:d4:63:03:af:bc:81:06:20:
         87:02:3a:68:a9:2c:83:d2:69:92:1c:c7:1e:8c:30:8e:32:b8:
         fb:f4:03:8a:99:fa:c7:ee:72:bb:31:43:7d:08:bc:03:1a:81:
         29:19:9f:d8:2d:97:6d:0d:94:22:8e:09:11:46:7d:b5:9d:0e:
         26:9d:3b:e3:30:c1:ab:2f:52:7d:f8:b6:1c:73:f7:3c:af:a7:
         19:cd:39:30:b8:2e:b3:c1:15:bc:6c:ff:51:94:88:ae:91:cb:
         a9:21:b9:3c:32:73:31:96:9f:3c:4b:f1:05:ae:5f:a2:ac:da:
         2c:08:7f:34:42:0f:2a:93:8b:92:61:01:eb:f9:40:32:89:7b:
         05:e0:d4:80:e3:52:23:94:46:4d:99:14:30:79:f1:97:c0:6f:
         02:19:44:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:34:10 2026 by rpki-client