Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4192bac3-bd5d-3aef-8b4b-10a8e0356d6d.roa
File:                     4192bac3-bd5d-3aef-8b4b-10a8e0356d6d.roa (raw, json)
Hash identifier:          jA3yGMqm6PXoavl+z4kxwmQJ+KDYdhEBb4kAuNhXffw=
Subject key identifier:   25:8E:3B:41:3C:5E:3B:BE:26:63:E1:C5:BB:66:0B:CF:8B:59:F3:52
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E13198A3CE631B47C69C726A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4192bac3-bd5d-3aef-8b4b-10a8e0356d6d.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     396576
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:8a:3c:e6:31:b4:7c:69:c7:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=eeebc919-3cea-40dd-af8a-07bb76237eaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:bf:ba:e5:92:ba:9b:39:73:4f:3d:2f:b0:
                    c3:2f:86:b1:75:34:f8:a9:76:4b:78:70:89:4b:9b:
                    0b:96:10:b3:09:3b:b1:5d:a9:86:04:f9:8b:3d:78:
                    e3:85:b6:d3:e5:9b:6a:8b:26:a7:30:86:f7:90:d5:
                    8a:a6:41:cd:8c:04:bd:4c:85:15:fe:20:40:c7:18:
                    59:bd:e2:a0:e5:db:e2:8a:66:1e:4b:4f:c4:e8:93:
                    be:f7:a4:c7:9e:15:8b:d1:be:fc:db:f8:18:2c:92:
                    45:16:09:8e:29:91:19:50:1d:8c:91:3c:29:17:27:
                    81:fa:d2:37:1d:ec:3d:8f:ae:a0:c5:38:a2:85:8f:
                    e6:ae:04:5e:a5:20:e3:6f:83:51:ce:54:13:3d:c3:
                    ca:f4:91:d4:aa:e6:53:e5:44:49:58:22:5e:8c:d1:
                    3d:a6:5d:15:29:95:57:fe:f9:34:0c:2f:ec:a4:fb:
                    f6:e2:a1:04:1f:1e:d6:58:fe:87:8a:80:ae:66:09:
                    9c:a4:2e:2e:cd:c2:c1:ff:41:5e:f6:6f:a3:29:3b:
                    41:a4:86:aa:8e:ce:b7:df:22:40:50:f5:d5:57:46:
                    65:94:f8:a7:2f:a6:0c:c3:f0:b0:1e:e0:25:c2:72:
                    16:f1:43:87:5b:38:90:80:21:11:e4:f7:a6:36:3d:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:8E:3B:41:3C:5E:3B:BE:26:63:E1:C5:BB:66:0B:CF:8B:59:F3:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4192bac3-bd5d-3aef-8b4b-10a8e0356d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:9e:9a:69:16:67:75:e6:53:ab:08:5c:43:e7:63:2b:0b:9c:
         51:ea:76:6e:83:0f:9d:b3:49:13:a6:4e:89:45:7b:03:9b:a9:
         09:58:68:08:da:6d:6f:f7:e8:ab:05:8c:6e:93:f7:30:cf:f1:
         97:a5:e7:1c:59:64:f5:0d:5b:12:78:46:c7:4e:ae:1c:e9:03:
         35:3f:1e:65:27:80:70:c4:30:ee:0a:4f:8d:c5:0b:3f:25:61:
         9d:6e:50:a7:fb:d2:a3:b2:8d:c9:63:bd:53:98:8f:53:00:3f:
         9c:a3:92:48:2e:88:70:75:d7:d8:79:5d:b1:47:d3:8b:97:70:
         ab:de:0e:b8:0e:7f:3d:9b:66:37:89:a2:05:76:7a:96:53:1c:
         a7:e4:f9:d7:79:0e:59:3f:cd:38:df:20:08:c7:33:c8:30:68:
         8a:db:30:b7:2a:ad:0a:86:b7:90:f1:7f:fb:47:6c:43:ba:02:
         3e:c4:4b:92:7a:93:f4:34:e9:31:65:c1:4c:03:34:5e:70:56:
         f3:f2:ba:ea:a2:08:8f:06:a1:96:53:d1:8e:2c:7e:f4:c7:16:
         00:5d:fa:75:78:54:5c:37:65:bc:2c:27:a4:1c:13:9b:c3:b9:
         d4:27:ea:0a:ae:1e:be:78:ba:90:49:a7:9b:99:8a:1f:f6:f1:
         89:58:ec:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:01:59 2026 by rpki-client