Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f7cf2b9-ab89-3317-8641-b8ea50cede49.roa
File:                     4f7cf2b9-ab89-3317-8641-b8ea50cede49.roa (raw, json)
Hash identifier:          ctRi5WPiLaD8JQIlaRizqy9EMq+Mlz/Er1zp5n63c58=
Subject key identifier:   82:1A:A6:85:56:9A:F5:97:2A:CC:97:5A:FE:36:A1:F9:0F:A1:1D:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BD3F8B65A24E85EBC6580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f7cf2b9-ab89-3317-8641-b8ea50cede49.roa
Signing time:             Thu 09 Apr 2026 14:07:51 +0000
ROA not before:           Thu 09 Apr 2026 14:07:51 +0000
ROA not after:            Wed 08 Jul 2026 14:07:51 +0000
asID:                     397206
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:d3:f8:b6:5a:24:e8:5e:bc:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:51 2026 GMT
            Not After : Jul  8 14:07:51 2026 GMT
        Subject: CN=02d92752-a662-4bca-bdde-bce1c669d2ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a2:e7:c8:6f:72:34:27:d3:8d:58:95:79:de:
                    7f:82:da:89:2c:3d:58:d0:a7:bf:18:71:c3:ab:68:
                    05:bd:01:52:3c:e6:8d:3e:bb:36:b1:32:3f:5c:59:
                    90:23:b1:9d:9c:00:30:fe:34:28:81:ce:94:d4:e8:
                    08:31:59:0f:45:57:5f:98:d8:98:c6:6b:00:46:b1:
                    55:4f:ba:5a:04:b5:6b:e2:15:6c:28:f1:65:15:c3:
                    cb:96:31:7c:fc:33:c1:7a:1e:ad:ae:8b:49:38:b6:
                    71:e1:28:c7:85:10:5e:0d:aa:41:e8:f2:6c:5d:62:
                    0f:41:25:f8:4e:dc:0a:ad:8f:71:be:f2:84:ca:17:
                    3d:b5:8b:0a:d6:dd:62:fb:32:3e:f3:f5:a0:e4:f2:
                    09:65:1b:60:85:38:29:8e:9d:c8:30:09:9e:ac:90:
                    76:6d:6f:1c:0a:39:3d:ed:1c:2c:c9:c4:ea:77:4e:
                    4f:79:92:09:a5:b7:da:03:9a:1b:99:56:91:94:7e:
                    d0:b1:be:aa:21:2d:2e:e8:7b:8d:df:90:06:5f:fa:
                    91:66:24:05:ed:58:ad:22:26:6b:ec:92:80:b8:20:
                    f1:d6:55:8c:6a:76:39:22:e6:33:55:a3:cc:aa:93:
                    00:68:09:d1:cc:e5:61:3a:ea:54:6f:85:38:be:fb:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1A:A6:85:56:9A:F5:97:2A:CC:97:5A:FE:36:A1:F9:0F:A1:1D:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f7cf2b9-ab89-3317-8641-b8ea50cede49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:16:d0:99:a7:27:70:d2:0c:47:fd:fb:b6:70:bb:d8:07:95:
         bd:43:5f:78:c8:22:9b:be:63:83:34:f6:01:8a:46:8b:4d:69:
         0a:93:8d:2c:ff:31:60:31:88:af:f1:00:f0:b6:a5:fe:5b:4e:
         9c:4a:36:ac:53:7d:a5:65:3f:56:7a:05:ec:bb:95:a2:a9:16:
         df:64:22:0e:30:d2:b1:82:32:02:e6:f6:38:2f:f4:6e:80:f4:
         6e:c1:7e:29:f1:36:34:b9:c5:3f:b8:f1:3b:f9:ad:fe:75:f2:
         13:ef:68:c4:6f:4e:48:e7:fb:d7:57:43:9a:9e:76:5e:e4:3a:
         de:7c:25:70:45:8e:1f:f0:37:29:e9:3a:d1:b5:50:27:21:64:
         1e:50:b7:10:8d:8b:06:45:3d:cf:91:a7:c3:97:1f:1c:cb:66:
         59:df:d7:b0:8e:16:a7:71:04:83:ab:b0:86:96:d1:fb:51:f0:
         5f:97:b2:d4:74:a9:fb:8f:54:98:8e:e2:6f:5c:b4:5a:3e:82:
         87:57:f5:ca:0c:d8:f2:9a:05:a7:f7:d5:0e:47:c8:fa:13:4b:
         4e:17:42:4c:81:a9:3b:fd:8c:59:48:e8:03:5c:a2:c1:23:27:
         80:4e:c1:84:77:56:2f:6a:7a:30:64:9d:82:7a:d4:30:32:9b:
         7d:5e:07:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:23 2026 by rpki-client