Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3daca530-b995-3e04-a662-28d4ac2a64e7.roa
File:                     3daca530-b995-3e04-a662-28d4ac2a64e7.roa (raw, json)
Hash identifier:          GyvRWpouILA1+84VwOC8M/u0nPPqfBkSBZt6T7+BCtY=
Subject key identifier:   A3:E5:DE:43:76:B0:AB:12:CF:89:01:C3:E2:CF:E2:2C:49:69:8E:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BDBD61057191A28719D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3daca530-b995-3e04-a662-28d4ac2a64e7.roa
Signing time:             Thu 09 Apr 2026 14:07:54 +0000
ROA not before:           Thu 09 Apr 2026 14:07:54 +0000
ROA not after:            Wed 08 Jul 2026 14:07:54 +0000
asID:                     396550
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:db:d6:10:57:19:1a:28:71:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:54 2026 GMT
            Not After : Jul  8 14:07:54 2026 GMT
        Subject: CN=f564309f-e06b-4661-b730-e74b07259fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a0:17:fb:3d:27:9d:bb:18:9f:46:00:fd:a0:
                    9d:72:a7:13:3c:7b:73:97:38:42:be:7d:40:af:d8:
                    3b:66:5e:63:1e:c0:45:a3:a5:bd:51:b0:13:b3:42:
                    e9:46:2f:4d:e6:55:fd:90:0f:94:7f:1b:54:dd:99:
                    a1:db:aa:ff:63:74:0d:b5:fb:04:9e:c8:b5:e4:8d:
                    fe:a8:c6:b5:6c:7f:eb:b0:bc:e5:79:f3:cf:a2:48:
                    65:58:07:c9:7c:65:f7:e4:ca:31:91:3e:6c:ee:c2:
                    96:20:7d:a0:70:62:f9:04:cf:73:c5:1a:f7:1b:9d:
                    de:fc:96:81:40:d2:cd:92:56:b0:4d:c9:a0:c6:38:
                    d3:3b:0e:69:75:f6:b6:f4:e9:51:65:53:37:83:31:
                    cb:8b:2a:1a:91:2f:5a:65:0b:b8:3d:e9:35:65:97:
                    40:60:3f:50:b8:f6:d7:e7:19:39:64:e2:c7:c3:8c:
                    ed:06:77:9f:d3:52:64:0c:6e:4a:78:f6:b1:cb:dd:
                    0f:20:07:92:ef:8f:1a:79:b0:4e:b0:4b:bb:19:89:
                    27:83:08:37:16:72:46:6a:49:58:fe:dd:50:62:fa:
                    ba:11:37:ec:89:04:b0:02:cd:9a:e6:13:f1:e5:0e:
                    d4:c0:fc:9f:4c:be:96:7f:e7:3c:10:ef:2b:f1:b8:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E5:DE:43:76:B0:AB:12:CF:89:01:C3:E2:CF:E2:2C:49:69:8E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3daca530-b995-3e04-a662-28d4ac2a64e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:72:65:6e:48:2a:2f:c4:e0:1f:b9:62:b5:3c:d3:eb:92:e7:
         86:fa:85:cf:2b:9f:b8:d8:be:db:02:76:91:e8:47:57:66:e4:
         7f:a6:10:a1:9d:ea:bb:04:e2:fc:6e:c8:f9:89:7d:2d:90:cd:
         a0:ef:19:2f:bd:0f:05:df:3a:28:72:36:cf:1e:42:24:81:ec:
         0c:dc:0e:d6:41:0a:28:86:a8:98:a7:81:b6:12:d1:07:c6:55:
         c4:05:c5:3d:1a:02:6c:26:86:14:c4:4d:85:72:e5:1e:cf:77:
         8b:ca:03:de:dd:55:91:55:f8:64:c3:68:92:e1:a1:2c:de:20:
         5d:d3:7b:f0:49:b7:8c:1b:19:a0:07:c4:18:71:1d:f2:64:d9:
         e9:1f:dc:b7:e6:0f:66:d2:02:4b:53:6b:b0:af:81:da:b2:91:
         50:bf:39:27:cb:b9:f3:69:f1:c3:0f:5d:c8:7f:b3:6f:a6:ee:
         57:9f:89:98:28:7a:47:01:13:78:03:d9:11:f9:5b:97:3c:97:
         8d:d8:0e:80:c0:c6:e9:19:50:c5:2d:7b:5e:23:55:a9:e7:5d:
         31:97:83:ba:1d:ae:17:7c:a0:6a:2f:cc:ae:e9:bf:86:5c:10:
         ba:b5:7e:81:1b:83:56:46:e7:58:ea:71:1c:b5:2c:07:c8:91:
         f9:2a:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:15 2026 by rpki-client