Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988acccb-7a9f-3b9a-87e6-8a9a9be64fcb.roa
File:                     988acccb-7a9f-3b9a-87e6-8a9a9be64fcb.roa (raw, json)
Hash identifier:          8/ZSY4+JzZB2/kYKuhfDL77zB+nBp3ylehy6NjwRSAM=
Subject key identifier:   F4:E3:69:02:70:70:D6:B8:28:E3:DD:77:1C:94:72:05:A4:F5:DB:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD8F0819AA8E294BE59693100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988acccb-7a9f-3b9a-87e6-8a9a9be64fcb.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     396610
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:81:9a:a8:e2:94:be:59:69:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=0780baac-1cfb-42a5-ab9c-56e84eed2d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f0:dd:ce:57:6f:eb:00:06:05:7f:2b:16:6e:
                    15:8b:c2:a0:bc:ed:9a:ce:2b:32:52:59:4d:73:57:
                    fd:15:e8:b4:66:d4:5a:23:88:a9:91:ba:be:22:fd:
                    e0:fa:77:14:6e:dd:75:34:06:10:3b:32:50:d0:94:
                    ac:3f:ab:27:bc:d0:98:1d:18:cb:bc:3c:7d:7c:49:
                    a6:de:ef:84:eb:c2:e2:d0:8e:9e:2c:f7:c5:f2:6b:
                    15:77:75:0e:c2:02:e3:28:20:42:b8:b3:2e:c6:90:
                    a3:5c:1c:8b:b8:44:f0:0b:7b:f6:02:2a:85:4f:7b:
                    07:a9:b4:10:23:b7:dd:09:9f:25:9b:f8:f9:22:0f:
                    e8:dc:41:d7:2c:9e:f9:8b:a6:9d:1d:07:0e:09:3d:
                    a2:23:71:f3:c8:85:9e:f8:df:be:52:b9:1a:d9:ba:
                    e1:1a:6a:40:51:b6:83:f5:de:00:c7:23:11:c3:3a:
                    63:07:2b:2b:c9:0b:e9:29:b6:f0:94:24:ea:e5:ca:
                    8f:0b:e3:18:93:3f:49:57:96:bb:a5:50:39:89:af:
                    c6:be:5c:82:25:1a:69:08:6e:6a:f0:7d:37:40:0a:
                    a7:10:a9:82:4f:5c:4a:7a:70:8a:9f:21:31:e6:7b:
                    63:af:1f:47:51:9c:55:37:a1:af:5b:4e:76:57:62:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E3:69:02:70:70:D6:B8:28:E3:DD:77:1C:94:72:05:A4:F5:DB:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988acccb-7a9f-3b9a-87e6-8a9a9be64fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:81:9a:e2:f0:00:5d:a5:ac:a2:68:f1:00:2b:9c:40:f0:76:
         04:cf:21:f9:4e:3d:b3:2b:5c:94:36:f8:95:ec:71:48:f1:02:
         a9:c3:81:cc:13:5c:7a:cb:3c:cd:1f:1e:8d:90:0d:8c:f4:05:
         70:69:c1:28:9a:c5:1a:14:a2:e5:6f:27:17:1c:31:1e:ee:a1:
         f6:5b:f4:0e:fe:31:de:39:70:b6:9d:47:5a:79:e9:bd:3f:af:
         8f:73:34:85:69:0d:f9:84:5f:80:1f:01:c7:9b:d3:f0:da:9a:
         a5:57:e5:44:bb:12:c6:ed:5d:1d:23:1e:64:41:e7:26:ca:af:
         4b:a9:ec:ae:ad:f7:d6:7c:3a:ea:f1:cc:27:f6:ea:51:ad:05:
         a4:d9:28:b5:da:13:dc:0a:2b:0f:b4:ba:82:ca:de:74:26:65:
         43:f7:e1:35:90:c1:f9:62:20:5f:27:85:0f:8d:2f:44:bd:d6:
         98:9e:49:b9:64:e5:91:6a:eb:6a:19:e0:03:37:3c:db:df:28:
         b2:e2:bf:53:b8:18:da:82:01:b3:1a:e0:a9:c8:44:17:79:5e:
         f0:f0:95:1d:81:1f:d4:dc:5d:01:9b:f4:37:28:64:8c:9f:9f:
         a3:c8:8d:d3:2d:74:4c:f1:a5:2d:a9:8b:e7:d4:d2:76:25:b6:
         54:8d:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:24:35 2026 by rpki-client