Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/412e26ae-deec-3967-9eb9-1efd6a45fb8b.roa
File:                     412e26ae-deec-3967-9eb9-1efd6a45fb8b.roa (raw, json)
Hash identifier:          qyCRbiJiGusPsThUHNcMC/YoWRJIiJ0T4WaSrVcUPZQ=
Subject key identifier:   62:E5:56:56:E7:EE:3C:65:83:A9:F2:A4:78:C0:46:E8:09:14:5D:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D7A0545CEE5990132A7389600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/412e26ae-deec-3967-9eb9-1efd6a45fb8b.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     36622
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:45:ce:e5:99:01:32:a7:38:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=73b5cc24-8d0a-4482-be39-0f8e27123f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:ad:7c:84:3d:dc:f5:79:07:e2:3e:dc:7d:
                    3c:97:6b:a6:37:9c:92:6c:07:8e:5c:d7:99:98:29:
                    97:b4:88:16:4f:47:e7:9b:dc:25:f3:fc:44:15:ad:
                    04:f7:76:54:96:80:99:72:fb:ce:74:0b:a9:b7:67:
                    76:1c:75:74:a7:09:e1:2e:22:2d:74:04:7b:17:d5:
                    ed:62:e7:29:2a:29:c7:a2:22:20:f9:44:53:27:62:
                    23:8e:9a:f6:39:2d:93:f1:c7:38:be:6d:10:22:4b:
                    bb:0a:df:a1:f7:97:04:0c:68:ca:76:1d:51:0d:73:
                    90:cd:ea:8c:b4:82:a3:49:b3:42:9d:ae:0b:7f:3c:
                    8f:27:71:cc:73:30:2d:f0:4a:84:84:6b:55:29:b9:
                    2f:05:e0:1a:15:06:22:1e:6b:18:61:27:40:bd:a2:
                    da:93:69:dc:01:aa:72:c5:d1:ab:3a:19:cf:70:58:
                    30:84:25:75:aa:2a:b9:40:09:ca:14:98:9e:08:1a:
                    ce:e6:11:76:b8:83:ac:30:95:d7:59:39:89:09:3b:
                    88:50:e4:ed:d5:7d:75:4d:cb:4b:8b:79:fa:af:4e:
                    ff:54:c7:e1:07:5f:f1:8a:6e:29:3b:37:60:86:d7:
                    04:85:de:21:17:f4:97:6f:43:52:97:9b:a4:d6:73:
                    a9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E5:56:56:E7:EE:3C:65:83:A9:F2:A4:78:C0:46:E8:09:14:5D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/412e26ae-deec-3967-9eb9-1efd6a45fb8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:77:72:f5:3a:1b:30:6d:bb:78:d8:86:92:61:d0:d3:92:a0:
         4c:cf:80:9d:86:7e:8f:e1:d2:b6:02:30:95:ea:c8:c5:77:76:
         c5:6e:a9:89:a8:81:06:6b:45:94:64:b4:1a:5c:39:a3:fa:e6:
         a1:5e:09:ab:51:96:a2:36:bb:e7:82:af:aa:a8:b4:6a:73:85:
         e3:3f:e3:3a:ae:62:22:dd:c6:03:23:19:ba:c8:c6:82:e1:52:
         64:ec:20:60:21:d7:90:72:f9:57:e4:b6:8a:d5:ae:ae:1a:a1:
         02:10:73:10:c2:c2:da:e6:14:67:1e:ec:66:0e:0f:25:86:b8:
         04:6e:73:84:ce:62:cd:05:c8:42:5d:c0:f4:77:20:54:aa:73:
         d1:1c:b3:19:b5:20:51:4c:b5:e4:1a:9e:9b:a9:07:07:c9:26:
         ba:be:ea:de:d8:1a:90:9c:35:2f:9e:14:62:1d:5f:77:62:5b:
         1b:f7:bd:30:82:0a:57:aa:39:43:7c:e8:5a:45:af:f8:5b:26:
         a3:33:54:3f:9d:e3:86:83:3d:57:25:5a:dc:38:02:a2:37:09:
         86:24:cb:a1:90:ff:87:eb:af:b2:34:62:52:7e:b6:1a:ff:7c:
         eb:6b:63:43:40:e5:97:d1:c9:92:6f:ca:60:23:63:4f:02:7e:
         bf:97:99:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:57 2026 by rpki-client