Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ed16a7-45d5-3232-80e3-ebd14dba89db.roa
File:                     87ed16a7-45d5-3232-80e3-ebd14dba89db.roa (raw, json)
Hash identifier:          DuwUFgY5QaYN0ruQlJUEsTHmB8EB5ffEe+152Aks92M=
Subject key identifier:   9C:06:0C:5C:7C:24:B5:35:7B:70:22:31:D7:4F:50:5E:96:17:AD:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059B40596E6CB4641DD54B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ed16a7-45d5-3232-80e3-ebd14dba89db.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396560
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:40:59:6e:6c:b4:64:1d:d5:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=5b142e19-d0fa-4b91-a1ff-46af0a7b5195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4f:4a:5d:67:e6:38:61:2e:4e:e6:67:07:62:
                    b0:28:cd:d7:1e:3b:f7:e6:bb:2f:74:17:19:5c:eb:
                    45:dc:da:d7:8e:ac:74:be:fe:7f:41:3c:b9:f0:89:
                    72:05:f8:18:56:81:7a:73:85:55:2a:6f:cc:9c:26:
                    cf:9e:ba:70:2e:6c:17:77:9d:f4:f3:7c:41:f3:97:
                    20:90:08:1f:9a:be:1e:70:88:d3:1b:89:53:6c:8a:
                    22:1a:e5:d0:e0:e4:72:aa:ac:fd:ab:12:f4:8e:a4:
                    79:20:91:53:f7:dc:9e:25:cb:e0:ef:96:f4:08:0d:
                    85:aa:cd:9d:d1:6c:3a:17:cc:58:f0:87:b3:1e:82:
                    63:cd:63:e5:df:a0:83:86:9b:ea:9c:74:65:57:8c:
                    8b:8f:37:06:c6:59:1e:86:21:4a:36:bd:39:93:a2:
                    74:08:ed:4d:47:bb:08:18:ee:1c:2f:3c:57:58:25:
                    66:fe:2f:80:45:de:52:23:52:4c:f8:ff:aa:f4:d2:
                    c9:37:bf:42:f5:06:99:da:a9:ff:43:ec:4d:a9:f2:
                    3e:f3:b0:0a:91:92:34:88:62:82:08:84:36:2e:3c:
                    a4:68:21:55:bf:3c:82:ec:79:72:f7:01:a0:e3:df:
                    6c:79:00:0e:36:18:80:92:98:fe:f8:9b:ce:86:d8:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:06:0C:5C:7C:24:B5:35:7B:70:22:31:D7:4F:50:5E:96:17:AD:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87ed16a7-45d5-3232-80e3-ebd14dba89db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:27:6d:c6:b0:5e:ae:c9:20:d7:06:1b:8a:40:64:a9:f4:bb:
         88:e1:db:e9:62:cc:07:c8:3a:9c:e6:5f:1b:0e:94:e4:fc:37:
         06:51:ac:04:9d:85:e9:dd:a7:47:8a:f6:e3:97:d6:cb:42:0e:
         f4:00:de:24:15:49:db:f5:98:f4:c0:ab:89:c8:c3:ed:a2:0d:
         1b:b5:d1:8b:6e:16:a5:63:94:0f:7b:11:84:b9:51:5c:d2:ee:
         e4:85:94:6e:e8:1a:13:00:41:b0:0f:ad:a5:00:61:d7:d4:2f:
         9c:30:54:19:f9:01:39:90:01:a8:cd:dc:e3:10:28:1c:95:a4:
         f2:0e:1a:72:13:d9:88:8f:81:58:94:fb:27:7c:2f:b4:ef:e0:
         e8:78:7a:ee:08:b7:20:98:75:91:f4:7f:49:3f:70:78:91:31:
         f4:b1:da:d3:83:5e:db:35:eb:63:52:2b:d7:4e:e1:2a:24:bd:
         16:aa:78:c3:dc:bd:2b:67:ef:51:85:9c:c4:11:f1:81:32:d4:
         a9:29:1d:cc:18:3c:7b:d9:60:54:01:64:af:55:63:3d:44:1c:
         e0:80:55:b6:07:59:5e:c2:6f:c9:07:30:fb:3c:32:ff:bc:51:
         ee:6a:63:bc:af:87:c7:33:31:a7:a1:1f:5d:a9:63:32:c1:58:
         8f:f6:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:20:20 2026 by rpki-client