Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953f9f50-447a-3f5a-8426-70452fb42edc.roa
File:                     953f9f50-447a-3f5a-8426-70452fb42edc.roa (raw, json)
Hash identifier:          ZXIyNHPu7EAinSp1n+lpGklFpF4qh7GYPKhQKAyZjFQ=
Subject key identifier:   5F:A4:6F:24:75:0C:46:56:F9:AF:2B:E3:06:0F:37:81:FE:6C:04:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAFAE9D1914FFEEC434800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953f9f50-447a-3f5a-8426-70452fb42edc.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396566
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:fa:e9:d1:91:4f:fe:ec:43:48:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=631ea46c-0b82-4566-a234-9f914bc1452c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:05:d3:83:f2:f2:c3:5e:24:df:d6:80:58:7c:
                    64:ab:b3:41:e2:f4:62:90:d0:ec:a1:3f:c0:e8:61:
                    02:a1:1c:b9:8a:39:3f:27:a1:65:fb:a0:09:34:f5:
                    bf:77:98:5c:18:48:be:e5:bb:c0:27:1d:3b:d2:d4:
                    17:8c:f5:3b:db:0e:21:06:c8:f8:2f:d1:8c:38:14:
                    64:9f:6a:4b:39:87:3e:44:54:75:e1:9d:c4:7d:16:
                    ce:09:61:1f:17:b5:d6:9d:eb:35:7a:de:0b:9b:bb:
                    82:59:1a:68:33:91:6b:c6:83:ab:47:63:e0:96:55:
                    fa:a7:6f:e8:06:9d:3c:28:f3:b5:11:fa:33:12:81:
                    7a:b9:54:35:ec:11:b2:73:e4:b3:ea:37:8c:31:8a:
                    cb:14:8e:13:b9:5d:18:f5:74:cc:d7:be:68:e4:0e:
                    8f:e6:03:0c:17:ef:48:08:af:94:54:c0:15:98:d8:
                    42:57:01:4b:af:e0:59:78:72:e3:31:4b:25:3c:8d:
                    1f:7f:a5:96:b5:7b:0b:f1:53:c1:7a:99:1e:d0:c2:
                    7b:78:c1:34:ff:bb:f9:28:11:ac:b4:5b:79:88:77:
                    3b:a9:cf:84:65:1b:cc:02:9c:ec:bd:02:f0:6d:0c:
                    df:8f:b9:fa:f0:fd:04:24:aa:a5:75:08:b2:00:2b:
                    ef:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A4:6F:24:75:0C:46:56:F9:AF:2B:E3:06:0F:37:81:FE:6C:04:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/953f9f50-447a-3f5a-8426-70452fb42edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:84:7c:96:bc:2c:c0:69:2f:97:f3:b1:3f:36:d6:4e:ad:50:
         c1:93:f4:5f:f9:9e:ce:45:a7:13:61:62:ad:88:0f:5d:39:87:
         34:4c:35:a4:09:6a:de:17:76:a8:11:07:52:1d:f6:0b:be:42:
         69:cc:0c:20:fc:a7:d8:b0:c4:c8:5d:02:ca:6e:dc:4b:a3:ff:
         eb:e4:52:f8:86:d3:73:86:b7:02:69:52:7f:a1:e9:ea:48:02:
         b2:80:c4:56:fb:c6:0c:76:6d:6b:f3:05:38:f9:90:d9:87:38:
         ad:78:b5:76:03:2a:11:8e:96:3c:a0:0f:61:ed:b7:84:e5:af:
         28:bc:77:a4:35:2c:f6:10:34:bf:5d:94:52:6f:4b:13:55:fb:
         0c:31:1e:af:5a:e6:b8:fe:c6:e1:dd:4f:d6:6d:d6:7f:47:9d:
         1e:eb:33:b1:8b:11:78:77:6b:0b:3f:1b:2d:d7:4b:2d:47:63:
         80:a2:51:7e:19:0d:7a:90:da:7f:6a:a0:48:b6:8d:b2:0b:0d:
         15:96:34:d4:a6:d9:85:e7:79:62:17:3d:65:38:67:27:fd:21:
         23:1c:05:11:90:e4:0b:ad:ef:39:de:be:00:9d:7a:4f:5d:9b:
         4c:e7:a3:00:74:ad:57:64:be:a0:26:f3:2d:32:f1:fc:92:78:
         c6:ee:5d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:59:17 2026 by rpki-client