Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f2f4a7e-0ed7-3feb-9870-ccf5a34cc19d.roa
File:                     5f2f4a7e-0ed7-3feb-9870-ccf5a34cc19d.roa (raw, json)
Hash identifier:          dA4qN1YnvxoS5KvxE/Ila3weB/7f71I2ONlTcNOYatg=
Subject key identifier:   09:B4:01:E1:65:2F:E2:1B:D9:8D:4A:58:C6:58:6B:5A:7E:3F:70:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE41B1AB8CE51B328D7AA1D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f2f4a7e-0ed7-3feb-9870-ccf5a34cc19d.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     396555
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:1a:b8:ce:51:b3:28:d7:aa:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=048fefd2-73a4-44c5-b61d-d712ed6b9c18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:03:1a:79:f5:8a:7b:88:63:63:07:98:29:e2:
                    cf:c0:f3:cb:68:0a:9f:99:56:ec:59:24:94:a9:98:
                    67:d8:93:7a:ff:b6:ed:c9:76:78:3d:2f:96:39:95:
                    2c:02:10:aa:68:60:15:71:40:ac:1a:9a:69:bd:ba:
                    70:e1:5b:dd:3c:f5:81:e3:15:e1:8a:10:06:e8:be:
                    3c:2d:48:6b:85:ca:28:bc:90:da:c9:bf:5f:ff:64:
                    6b:8d:0c:21:c9:40:49:fe:85:20:69:24:76:b6:5e:
                    b7:24:f0:75:51:42:7a:1b:17:0f:67:a2:81:46:02:
                    1e:6d:78:0c:94:89:f8:de:75:91:d2:5e:39:77:40:
                    fa:8a:b6:46:4b:f4:34:61:b8:89:18:f0:2f:7a:98:
                    c4:6a:82:7b:43:50:12:ab:60:0b:21:18:0c:c7:15:
                    90:2a:0e:33:a8:7f:8f:26:a7:42:1f:af:75:8a:96:
                    ce:05:8b:1e:59:ef:b6:69:10:a7:24:14:cf:e0:67:
                    30:1a:ef:3a:f1:4b:2f:e8:49:c7:5c:af:47:c4:d2:
                    7c:f6:12:94:b5:39:c2:48:f9:31:5c:2a:3c:36:66:
                    31:8e:8a:64:cf:86:8b:fa:c8:b8:4e:18:1e:d7:a8:
                    03:f5:ed:dd:fd:94:47:75:59:d4:6f:06:f5:82:16:
                    13:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B4:01:E1:65:2F:E2:1B:D9:8D:4A:58:C6:58:6B:5A:7E:3F:70:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f2f4a7e-0ed7-3feb-9870-ccf5a34cc19d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a3:db:4e:2f:4c:e0:c5:82:83:45:30:b5:ee:4e:26:38:91:
         83:2c:0e:d3:a6:48:6c:dc:e8:8b:ef:ef:15:c0:18:38:42:f2:
         48:65:d9:96:9c:58:61:c3:9e:12:95:ba:87:83:85:d6:22:01:
         0e:e7:f5:58:05:31:53:e4:de:02:e6:72:bb:02:04:58:fb:ff:
         2a:5d:bd:9d:74:cd:ff:82:3e:31:95:da:79:45:12:f2:68:34:
         ae:6c:91:ca:39:90:05:8a:77:d7:bc:77:1e:2d:98:c6:6f:34:
         ee:d1:93:d3:4f:1b:34:cc:4e:01:9f:12:7e:4a:f2:ce:a1:f4:
         f7:11:63:62:e5:1c:e0:70:67:df:e7:20:e4:c1:30:11:fc:68:
         ea:ed:37:d5:eb:03:33:3e:40:b5:6f:e5:63:b4:f3:91:cd:c5:
         09:d7:70:53:62:55:01:bd:e7:66:d2:4a:7f:fa:cf:11:4d:e0:
         07:53:51:12:87:eb:d8:01:32:e9:01:39:67:a8:82:5c:00:65:
         84:d4:e2:18:f7:23:1e:65:82:cf:33:1d:ef:ee:20:ff:ba:3a:
         b8:da:d3:94:92:56:ef:e3:64:9c:76:3a:16:22:55:5e:16:4b:
         aa:5a:3b:bc:b8:44:bd:3c:8f:d2:ed:6d:65:93:ce:45:3d:73:
         3e:21:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:59:09 2026 by rpki-client