Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35f5097c-b6d0-37ba-903f-70a31d4effac.roa
File:                     35f5097c-b6d0-37ba-903f-70a31d4effac.roa (raw, json)
Hash identifier:          aqtx7PZylX5SQmqWZNVT/Js39bS7LxhuYLEKsAe0z8s=
Subject key identifier:   4E:E9:66:23:D4:42:E8:B8:CF:8E:DF:22:76:B9:40:58:9F:41:D3:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D7A054723D530FE402CDE42B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35f5097c-b6d0-37ba-903f-70a31d4effac.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     396589
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:47:23:d5:30:fe:40:2c:de:42:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=8fbca54d-1331-4db3-aed5-fa26775ccfde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:62:1b:7f:39:ea:d2:05:b6:00:7b:cf:76:
                    8f:46:51:4d:1f:61:3e:0c:61:32:58:66:29:da:cd:
                    fc:a4:74:a2:86:1f:02:c6:05:cd:ac:65:4f:c6:2a:
                    45:84:c8:cb:ec:d2:ee:1c:33:08:45:0f:0e:5f:9f:
                    35:f2:54:c2:66:f4:4d:37:aa:3d:2b:c7:47:84:4c:
                    ec:76:90:a7:d3:6a:aa:f4:38:28:b7:59:2e:0e:23:
                    5f:5d:3c:80:9b:61:a1:0e:e4:ca:11:7d:46:be:81:
                    df:bb:c4:00:89:81:64:55:7a:a1:c9:ea:74:c1:0a:
                    f0:64:48:cc:38:70:08:e4:d5:5c:1a:7e:01:54:6b:
                    ef:b8:0f:d0:be:f3:b4:1f:3e:91:8d:b7:e6:65:90:
                    74:02:88:ca:e9:a8:bb:a1:d5:32:18:f3:ce:72:b9:
                    6d:7f:4d:17:45:3b:11:eb:ee:bd:8d:44:91:ca:e5:
                    97:b6:65:86:7d:6e:36:12:75:4d:a4:17:e5:0e:3d:
                    67:fc:be:c5:d2:80:bc:61:9c:52:fe:ec:ae:cd:e1:
                    ee:5f:77:a7:5f:e1:ec:a9:f2:26:9b:8f:1f:af:48:
                    8b:11:06:09:2e:a1:24:ca:b1:20:5c:3f:49:2a:4b:
                    a8:fa:3a:2e:ab:03:1c:70:c5:73:33:3a:e0:ee:c0:
                    81:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E9:66:23:D4:42:E8:B8:CF:8E:DF:22:76:B9:40:58:9F:41:D3:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35f5097c-b6d0-37ba-903f-70a31d4effac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:4d:10:80:b7:7e:94:c4:96:2e:37:12:b7:07:2a:3a:3e:
         1d:98:d3:51:bc:ed:92:2b:75:d0:3b:bc:97:21:e3:9a:26:3c:
         1a:7a:5d:dd:ed:46:92:27:14:64:ab:5e:5e:00:c7:21:3f:8c:
         de:ba:b8:01:4a:3f:ef:be:43:1f:41:4c:6f:51:0c:e6:19:a9:
         f8:d0:49:81:1a:d8:cb:a8:d4:f3:a1:68:d5:a2:e1:02:bf:5b:
         cc:02:5e:bb:f4:ad:b2:98:a0:d8:bb:84:30:16:44:15:d4:df:
         ce:f9:da:d2:4c:00:0b:b4:12:9d:1b:40:15:30:e4:16:ee:95:
         2a:eb:60:b0:7c:6e:25:94:0a:e9:6f:6d:52:58:27:e3:8c:ef:
         f4:6e:e4:7e:4f:45:e2:d1:db:fd:bc:7e:bc:3c:bf:df:59:c1:
         3d:45:eb:11:8e:ca:20:52:d1:80:de:ba:a0:5d:38:5d:7c:b0:
         eb:6e:05:66:5b:8c:1f:c0:f5:a4:8b:70:4c:31:ad:98:91:6e:
         ab:bd:58:5a:a2:1f:45:35:d0:9a:85:82:00:b6:0b:12:8c:7f:
         a0:e1:e4:45:12:15:3f:27:76:ba:44:3d:5e:93:2b:80:92:ab:
         08:fd:e4:00:3f:8a:47:97:49:7f:05:df:3b:59:32:99:5a:42:
         db:77:3f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:43 2026 by rpki-client