Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c18d064-135c-3b82-9683-585c89d00abe.roa
File:                     4c18d064-135c-3b82-9683-585c89d00abe.roa (raw, json)
Hash identifier:          u2GiGy4DnHAVvf8lNgKSMbCFhhbMduqMMnuPkQjm61k=
Subject key identifier:   73:90:02:7D:5C:38:8C:0E:5C:0F:45:69:D6:22:74:D0:1C:1F:5C:51
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7A099C99A422DDFC826D000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c18d064-135c-3b82-9683-585c89d00abe.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396555
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:99:c9:9a:42:2d:df:c8:26:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c02be0f2-a250-4e10-adf2-9c3e095d9843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:47:27:ab:ab:4e:d5:5c:47:e8:d8:af:41:6d:
                    7c:5b:d2:1b:59:81:d0:47:04:c4:ef:28:85:44:23:
                    1d:e7:70:98:68:69:d3:f9:68:5c:39:38:70:9c:9a:
                    3b:cf:75:00:bc:c7:07:6e:2b:7b:a9:d2:ad:e2:e1:
                    bd:d4:b6:02:44:83:11:6b:e2:ec:a8:3d:cb:7f:f6:
                    f7:2b:18:a4:7f:05:a7:9a:f0:a3:ca:c4:c0:fc:bf:
                    0d:49:31:2d:54:9a:72:64:91:bb:ab:1c:31:7b:c7:
                    3b:ad:63:68:91:d1:f2:c1:fa:17:2d:b8:a4:72:55:
                    ad:ae:ee:b3:21:cd:6c:16:10:83:e4:05:f9:2f:a3:
                    8f:71:ea:00:bb:56:8f:12:77:bc:aa:79:53:26:3c:
                    35:b9:e5:ee:e9:0d:67:78:59:9b:6b:5a:25:d2:ad:
                    9d:f3:62:b7:f3:a7:d6:92:f9:e0:b8:74:7b:cb:ea:
                    f6:27:07:5e:71:de:7f:6b:d0:fe:3a:c9:b8:79:91:
                    df:99:a1:2a:46:fd:13:49:c1:01:fe:22:0c:98:3e:
                    9d:ea:97:11:2b:53:ed:4b:c8:bb:45:b6:c9:d4:5c:
                    d0:dc:02:56:3c:e0:b2:24:6a:1a:b8:88:60:6b:2d:
                    67:be:20:6d:d1:53:48:43:fa:16:26:5d:c5:f3:06:
                    b0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:90:02:7D:5C:38:8C:0E:5C:0F:45:69:D6:22:74:D0:1C:1F:5C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c18d064-135c-3b82-9683-585c89d00abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:07:a2:39:d1:ab:0c:b4:0a:98:8c:49:5b:28:23:37:ac:
         27:4f:e2:ec:26:c7:37:4c:d6:4e:34:72:33:fc:f7:ac:30:31:
         d0:03:98:33:a5:a8:21:24:67:f4:0e:47:68:e0:eb:34:b2:74:
         90:a0:5b:bd:4e:11:1a:7e:d6:4e:53:24:57:a3:ae:c0:4f:5f:
         b9:99:75:cf:fa:55:b1:52:2a:63:f3:d0:e8:ec:96:84:0a:c4:
         04:72:40:1a:b6:9e:45:ea:e5:49:29:98:75:c5:f5:8c:ec:cb:
         cc:6a:18:2e:c6:1b:ab:64:97:1f:be:f1:a0:2e:a0:b9:d4:91:
         8d:f7:4d:43:72:fa:0e:e3:d0:a4:9f:72:47:08:98:2c:cb:6f:
         1e:a7:cd:fd:8e:49:1c:4d:51:4a:95:78:26:db:40:83:56:f3:
         3a:c7:42:c4:49:47:2b:b9:5c:27:0f:4a:08:f7:39:4a:74:5a:
         0d:e1:df:4a:0a:78:70:b3:2d:9b:2a:64:31:8d:03:60:d4:a1:
         d9:f0:7b:36:9e:70:60:90:b8:df:0a:45:e2:f1:e3:0d:55:76:
         d9:23:02:6d:fe:57:91:d4:51:05:2d:87:80:3a:14:ea:bc:74:
         7d:86:81:4a:d4:6c:74:b5:20:17:b7:cd:a7:a6:9c:1f:a1:57:
         08:24:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:41:21 2026 by rpki-client