Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa
File:                     6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa (raw, json)
Hash identifier:          duptXlqK/6Mj6Y2ZuEQ4y4As+1ybVPtR6yh5uxRb0e8=
Subject key identifier:   4B:7B:3F:58:C6:68:78:F3:63:FF:D9:B0:57:82:B3:4C:8E:91:DF:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF09EA87D7203B769AD80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396596
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f0:9e:a8:7d:72:03:b7:69:ad:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=d5b655a9-080f-451f-846a-b8418343399d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e2:93:ee:8d:54:6d:15:9b:12:74:5d:3d:bd:
                    4f:b3:12:ef:20:fa:36:b0:e3:47:76:fa:05:e2:9d:
                    eb:7d:90:19:2c:fc:cc:f5:cd:99:d8:a9:ca:4e:4f:
                    bb:52:2b:7c:09:0f:62:a2:16:17:73:21:5f:ea:b1:
                    5e:6e:b8:b8:5b:26:eb:da:de:f8:a5:2b:85:7e:83:
                    6e:2f:90:0f:d2:b6:20:94:94:20:d9:b0:a3:9e:bc:
                    67:da:f9:4c:ef:0d:5c:0f:25:4b:62:66:2a:6a:ee:
                    6c:90:e7:98:ee:d8:d4:3f:5d:a4:79:bd:03:6f:58:
                    1b:5b:ed:65:ee:72:14:d0:66:4a:dd:9f:ac:97:ab:
                    e9:f9:a9:88:d7:a1:73:53:6a:b4:8b:4c:81:71:72:
                    01:e4:0f:3f:33:57:32:b3:d9:82:6e:dd:8e:d2:a0:
                    67:65:a4:9f:f3:1c:83:c9:72:fa:dd:bf:73:89:56:
                    1e:9a:53:de:1e:05:1b:a7:c5:db:ce:cd:db:69:71:
                    28:17:78:df:ba:bc:bb:ad:26:5a:a3:c1:6a:aa:00:
                    94:9d:24:e7:ba:8a:7e:73:a3:2b:de:0f:7e:36:cc:
                    35:d5:31:df:a0:aa:3c:9e:a2:5b:78:78:2a:80:2c:
                    fe:6c:d9:f7:58:fe:27:c7:7e:47:0e:fa:0c:68:36:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7B:3F:58:C6:68:78:F3:63:FF:D9:B0:57:82:B3:4C:8E:91:DF:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:de:6f:f0:96:cc:81:73:74:f3:e5:62:a2:df:ed:44:38:af:
         10:f2:20:06:97:f7:2f:9d:66:eb:ef:c0:1e:77:ce:f0:aa:b7:
         98:68:71:3c:10:06:6e:b9:2f:08:12:8c:77:93:e5:ba:71:52:
         5a:d0:d6:bb:55:a3:c0:47:f2:68:b8:1f:be:11:a1:2d:ba:bb:
         69:df:d7:53:4c:f7:24:e3:9a:ed:37:20:d0:eb:c3:c7:8a:ac:
         eb:e4:75:95:34:b6:00:2d:14:32:13:49:d3:a7:bc:2e:b7:34:
         16:e6:a4:58:93:6a:bb:cc:44:3d:36:ac:bc:35:de:a5:a7:0c:
         52:c7:25:47:94:c8:9b:1d:22:35:0b:c9:f9:06:3d:98:9a:f7:
         16:b8:e0:10:50:a3:4b:06:42:22:e9:f8:e9:e7:f1:42:13:38:
         8c:bf:e9:7b:14:84:81:b9:2f:32:29:35:b4:68:5a:e3:41:d7:
         04:11:ef:fd:79:f0:3c:cc:d9:c0:66:fa:7b:99:0b:f1:f7:23:
         36:26:5b:8b:53:af:58:48:36:52:0a:47:42:16:fe:28:7c:5d:
         2d:3c:3c:3a:7b:e6:62:0e:52:c3:7b:32:05:fd:ba:ae:75:32:
         e7:61:77:9d:7f:4c:7e:8a:01:c8:8c:31:1d:b7:71:43:f3:a2:
         ce:29:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:50:23 2026 by rpki-client