Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/638da6dc-0e84-358b-9d39-3e13b5c1d789.roa
File:                     638da6dc-0e84-358b-9d39-3e13b5c1d789.roa (raw, json)
Hash identifier:          cFha3Ve9j02dM40xF5RfAdOFJg1ph5c/wXx0GbBOPK4=
Subject key identifier:   8A:D3:87:07:15:5B:BC:A6:B5:9A:6F:A4:A8:63:9E:99:48:B3:A2:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA788CAED11C6D8CBC8A9F880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/638da6dc-0e84-358b-9d39-3e13b5c1d789.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36618
IP address blocks:        2001:503:83eb::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:ca:ed:11:c6:d8:cb:c8:a9:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9b425f37-b2f9-4ce7-b1ad-b3f783142006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:33:c8:93:5a:f4:bf:92:0b:0e:c0:fc:71:
                    fe:f7:46:6a:28:d5:fe:84:90:65:a4:34:ef:84:d4:
                    4c:20:de:30:ec:38:71:24:0f:77:25:e8:c2:98:d1:
                    c8:d6:1d:22:8b:43:df:61:1a:4d:ab:4d:33:6e:51:
                    23:c6:43:84:46:b7:38:af:db:0d:46:0d:4d:53:0f:
                    15:af:84:b1:a4:79:ef:1a:40:19:9d:ad:5a:d7:0f:
                    a8:f8:06:fb:ac:b8:6c:36:92:96:48:2a:f6:a0:18:
                    ad:20:87:05:8a:dd:f6:af:f0:a6:74:48:bd:16:56:
                    94:74:4f:a1:59:fa:f1:5a:4b:ab:c4:00:33:db:33:
                    3b:33:b4:1b:87:82:73:b7:4d:51:02:55:d4:a3:da:
                    e4:9e:8e:5d:f4:d1:5a:cb:8b:02:51:57:6c:2e:de:
                    af:13:67:72:c5:2e:c2:bf:14:fe:ed:bb:b8:ba:31:
                    ca:b0:73:ee:c6:f5:5a:41:1c:56:a1:4f:c1:57:61:
                    66:1b:ff:7d:e6:45:31:aa:54:fd:77:97:2a:a5:bf:
                    29:5c:41:d5:10:bc:09:ea:8f:31:71:06:e8:9b:60:
                    39:70:98:26:41:1c:fe:85:84:ac:c9:7e:c5:18:83:
                    fe:f5:ba:5a:49:9d:5d:1d:e9:98:30:3c:a3:41:01:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D3:87:07:15:5B:BC:A6:B5:9A:6F:A4:A8:63:9E:99:48:B3:A2:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/638da6dc-0e84-358b-9d39-3e13b5c1d789.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b9:cc:a6:8c:47:75:c0:f1:ef:9e:d2:05:5f:0d:9c:c1:88:
         cc:3c:8c:a3:22:6e:a0:ab:e2:6c:d6:ed:19:8d:f9:b8:f8:60:
         cb:f4:54:08:ed:bb:c9:be:41:02:24:d0:b9:2a:17:08:2f:97:
         90:ee:b5:96:82:1e:7a:46:c8:fa:9b:44:7e:48:7a:9f:4f:c7:
         10:8c:5d:9c:b9:f8:ec:9f:85:ae:30:3e:43:80:68:cb:72:3d:
         ae:52:01:31:04:bd:64:fe:01:4f:f8:59:21:2d:b3:a8:e4:41:
         07:c9:05:6a:25:fc:f9:c7:de:c0:dc:ac:f1:91:25:04:06:d0:
         bb:37:f0:e3:e7:70:66:54:c3:28:12:f2:15:08:e2:ad:7f:54:
         0f:96:15:ee:ca:3f:2a:90:34:cd:ed:60:55:7b:2b:c7:2f:2b:
         a3:f7:01:45:f5:94:7f:71:45:6e:1e:15:36:99:b0:60:5d:4f:
         b5:c0:14:8d:30:f6:74:98:4d:3b:3f:8d:17:32:76:c5:60:2a:
         9c:69:41:ef:f1:08:df:a3:66:af:a1:ff:4a:53:02:20:88:8e:
         3b:3c:18:a8:04:8c:5d:79:df:32:32:55:3f:57:84:ff:cc:da:
         bb:dc:a4:1e:8e:90:e6:24:e8:c7:dc:7f:51:66:da:9e:19:e8:
         29:7f:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:08:56 2026 by rpki-client