Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b8a5625-ef4c-3b30-aef8-c3451dbb6ccd.roa
File:                     8b8a5625-ef4c-3b30-aef8-c3451dbb6ccd.roa (raw, json)
Hash identifier:          BmWvNQOvctg1+doblnjmApcHumeAw9Pb+j6KHI7+cRM=
Subject key identifier:   D8:7F:73:E9:8C:A7:EA:AB:EA:2D:15:BF:BE:28:89:89:62:78:33:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C7B84890E82A743783A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b8a5625-ef4c-3b30-aef8-c3451dbb6ccd.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396564
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:7b:84:89:0e:82:a7:43:78:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=6093823d-c12c-45e9-a67a-ff2103591abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:36:6d:43:da:e1:a0:f9:7d:74:05:0c:4e:
                    73:01:90:8b:65:48:e0:f8:4d:3f:02:38:36:a6:ab:
                    cc:56:51:24:8e:e3:a3:62:75:ef:c1:72:a4:17:48:
                    15:08:d7:bc:93:4e:0c:72:d7:a6:e1:04:90:fd:f0:
                    2a:cb:19:86:d7:ba:ba:fc:fc:0f:bd:53:e7:5c:92:
                    eb:0e:16:47:30:f8:dc:3c:6f:fc:11:93:0a:58:7c:
                    1f:c8:7b:f8:7f:9a:d8:ae:ee:c2:64:e4:46:70:95:
                    81:6b:d5:c9:a7:fb:49:ae:6d:67:1c:14:6c:6e:9e:
                    c8:e4:d5:bb:63:2f:a6:8d:5f:2d:db:f5:38:08:61:
                    cf:d8:5a:c1:31:ed:cd:47:c5:5d:2d:a1:2a:eb:44:
                    a6:57:6a:10:4e:8e:1f:31:b4:a5:dd:6d:f0:95:70:
                    eb:35:0d:f4:6d:d8:84:47:9b:2a:f0:5b:9b:5a:86:
                    b1:35:aa:e0:bd:8a:6c:7d:6f:8d:42:a1:ef:7b:4a:
                    9a:61:73:45:00:94:d6:19:4c:fb:35:ff:e3:67:b1:
                    19:6a:97:86:6e:96:7c:fe:e3:43:06:77:8f:08:04:
                    6b:01:a0:51:85:f5:10:db:bf:d9:4e:45:62:9a:75:
                    81:45:db:27:0d:0f:cc:9c:e3:02:5d:7a:9d:23:37:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7F:73:E9:8C:A7:EA:AB:EA:2D:15:BF:BE:28:89:89:62:78:33:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b8a5625-ef4c-3b30-aef8-c3451dbb6ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:7f:aa:4e:d8:ce:d5:51:79:66:d9:63:ca:b0:5d:6b:1d:05:
         fa:54:48:bf:97:1e:3b:87:ac:10:81:58:61:1e:29:2f:96:e7:
         69:3d:bf:16:7e:91:32:9f:a3:47:8b:ba:dc:71:90:d7:ed:78:
         70:eb:56:48:c5:71:6d:db:96:7a:51:4f:41:44:23:ad:b5:27:
         fe:d8:64:e3:ec:70:79:d0:54:aa:35:ca:ba:de:33:6d:5d:28:
         1c:53:ff:24:69:b7:41:df:ed:e1:43:97:e7:b0:fa:5e:d8:f1:
         46:01:c8:08:db:df:6f:85:bf:78:9a:ac:81:27:ff:5c:f8:c9:
         72:5a:f9:10:cf:72:a2:57:ca:d3:e4:06:0d:52:e0:4a:20:32:
         21:a9:a0:af:ae:c9:f3:79:c7:cf:69:c4:01:18:ef:e8:5f:7c:
         b6:40:91:e3:be:8c:8b:db:2b:48:05:40:5f:71:c4:b1:fa:b2:
         b9:05:19:36:c8:18:2f:bf:32:a0:16:b9:1d:95:c3:7b:8f:53:
         09:27:bd:d6:48:8b:97:b9:8a:cc:a2:ed:49:b4:8f:1a:25:9c:
         8b:70:77:b4:a0:25:5b:9d:be:24:4a:fe:82:68:92:4b:ab:5c:
         c0:7d:d0:fe:3f:53:67:52:2b:73:2c:7d:7c:df:67:8d:7e:40:
         68:9d:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:26 2026 by rpki-client