Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a93a86c-2f97-3fc8-91c6-bdd6d351e3e8.roa
File:                     7a93a86c-2f97-3fc8-91c6-bdd6d351e3e8.roa (raw, json)
Hash identifier:          +RC+mm+hn6CegLP5Cm8HGPeAWRMwn+G5NFHZbOFErUM=
Subject key identifier:   A1:C8:E1:BE:0F:3F:EC:15:D4:BA:25:3F:B7:BD:9E:04:FF:C2:01:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE8C8DB8369EE35AEFF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a93a86c-2f97-3fc8-91c6-bdd6d351e3e8.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396610
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e8:c8:db:83:69:ee:35:ae:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=a368e72c-973a-486a-abf7-44bb856f80a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e9:b4:3d:b5:86:cf:25:5b:cc:46:d9:d6:a9:
                    67:09:c5:07:57:0a:04:dd:8b:e4:74:38:78:d6:4f:
                    e2:f3:8d:cd:47:95:78:66:38:9b:5d:dc:e1:7b:47:
                    79:e7:10:e7:ea:69:af:0b:bf:64:3e:f2:3b:61:0c:
                    ac:32:4d:7b:3c:80:ff:e4:34:29:f9:18:3c:c2:d1:
                    82:98:f2:93:c3:85:3c:68:c8:76:9d:78:28:04:e4:
                    64:d3:80:6b:ce:d0:b1:6d:37:0d:5f:05:2e:f4:45:
                    8a:d1:df:a6:c1:f5:dd:7f:e8:81:8a:bd:bb:df:ba:
                    fd:61:d1:20:55:94:06:a1:0b:48:5d:70:61:bf:32:
                    69:f9:d6:34:45:c4:32:ff:6b:a7:3e:f9:cc:1a:9d:
                    9a:00:67:b1:63:96:9b:31:99:66:39:9a:d9:69:1e:
                    cd:f4:0b:b6:e0:6c:75:d9:6a:e7:5f:c2:34:d0:94:
                    0c:87:c9:63:1c:fe:99:2a:9f:f6:27:20:88:5c:9b:
                    6a:ed:72:98:39:ba:86:db:95:55:52:0c:64:f3:0d:
                    ba:1c:2f:c8:97:53:e1:5a:f7:2c:29:ac:0c:70:51:
                    ae:1d:e6:e5:8e:e5:1b:99:ca:a1:43:93:0f:bf:81:
                    07:a5:01:49:cf:41:44:d4:2f:a9:f7:e7:ca:2b:67:
                    3a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C8:E1:BE:0F:3F:EC:15:D4:BA:25:3F:B7:BD:9E:04:FF:C2:01:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a93a86c-2f97-3fc8-91c6-bdd6d351e3e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4b:8b:67:2a:fe:80:bc:ad:14:fd:cb:d0:20:88:03:e0:d7:
         c1:f6:ec:60:67:ed:00:67:7b:01:c1:2e:60:35:78:3d:ec:fd:
         12:52:2f:38:5b:0f:c5:0e:91:ae:5a:c0:c7:cc:dc:cc:6b:2b:
         53:31:72:e9:59:d8:dd:e2:cd:8d:18:c9:f5:b5:b1:a5:79:26:
         8c:f3:e5:76:74:b2:da:e5:80:18:99:ab:8f:97:4c:23:0d:65:
         ab:d4:d5:c3:97:d7:b5:29:0f:be:a6:ee:c0:b0:96:5c:58:ea:
         34:f5:d4:b1:1a:eb:38:25:35:af:10:c6:9a:c2:b6:95:15:ba:
         93:5f:46:90:f3:7b:ce:c2:74:e5:bb:ae:8a:85:91:70:45:e1:
         31:5a:48:88:e0:ae:b4:9f:d1:ff:a1:35:7e:b5:86:3e:b2:de:
         9c:5d:40:dd:5b:75:0a:f7:8e:d9:af:24:51:5d:07:ff:65:cd:
         01:e6:85:07:77:02:77:f5:0a:de:f7:33:b7:14:09:e1:45:b5:
         8b:f1:97:59:ee:11:66:16:cb:e9:2f:ce:3e:54:09:ab:02:8b:
         fa:23:13:bc:70:9a:07:9d:d2:1e:51:9b:bc:47:80:99:0f:aa:
         d9:be:f0:68:88:17:97:b5:b1:6e:dd:ae:8a:6d:5c:25:d8:71:
         39:a7:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:19:47 2026 by rpki-client