Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a006ccf-3a13-390b-9bd8-64636770e47f.roa
File:                     9a006ccf-3a13-390b-9bd8-64636770e47f.roa (raw, json)
Hash identifier:          OQxNtI82A0IygHu2r1dppTLSdazYNdIk6seACVdFCnw=
Subject key identifier:   8E:26:F3:B5:8B:A2:B1:B3:99:E3:0D:4D:19:F4:0D:28:22:79:E4:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA878A243CDD08549FC840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a006ccf-3a13-390b-9bd8-64636770e47f.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     396617
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:87:8a:24:3c:dd:08:54:9f:c8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=fa2b4c26-3fa6-46d5-9f6d-ae382a209b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fc:1e:c1:c9:ab:e5:c2:3e:7f:c6:df:d3:3b:
                    66:26:a8:5c:e4:d1:8b:51:eb:58:1a:d2:92:4c:45:
                    d4:89:aa:54:c7:3a:4e:09:05:9a:e6:b1:75:1c:47:
                    35:2b:94:d3:d6:f0:0d:0f:c2:e8:a6:0f:4f:47:6b:
                    65:61:87:60:19:51:47:56:0e:c2:9a:85:4b:c6:74:
                    6b:83:4b:44:59:9d:d5:b8:f5:6a:75:f2:b6:30:24:
                    92:bd:53:22:c8:b0:51:8f:84:9a:a0:18:1f:20:b3:
                    36:ec:e9:53:99:5f:f4:9b:45:2b:bc:78:11:92:1c:
                    bf:29:20:2e:7f:0d:1e:14:1d:8d:ee:33:4e:bd:5e:
                    39:ca:1c:cf:5e:54:1b:36:46:35:50:30:97:0d:bf:
                    93:34:93:0e:46:51:4d:aa:bc:f7:51:11:ba:a6:69:
                    8d:3c:aa:14:71:d9:f5:dd:08:d8:93:5e:c2:bf:fa:
                    2c:34:fd:5a:b3:8b:cb:88:1c:69:f3:11:83:03:42:
                    d5:f0:a1:85:63:be:c0:0b:49:80:f6:de:39:8e:f5:
                    73:f6:b5:73:ad:d3:ce:6b:e8:23:d6:9e:58:75:f0:
                    79:b8:27:34:9d:b2:66:8f:c3:4c:14:78:a5:e8:98:
                    91:bb:0a:c4:b8:a3:e0:d9:29:6c:ce:ba:67:db:4d:
                    79:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:26:F3:B5:8B:A2:B1:B3:99:E3:0D:4D:19:F4:0D:28:22:79:E4:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9a006ccf-3a13-390b-9bd8-64636770e47f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:3b:2b:6b:68:e0:20:81:bc:e5:e6:d0:d8:f3:4a:96:08:83:
         11:32:0b:50:83:c9:ac:8f:f0:6e:0a:59:61:7b:52:f5:b7:d0:
         a1:11:25:24:68:6f:20:34:8e:99:c2:ed:48:f9:f0:a7:4d:6e:
         b4:c0:c2:9c:4c:f4:86:65:01:0f:2e:32:3d:fc:23:a0:e4:f3:
         d3:0e:e5:3d:df:4d:1a:00:f3:53:d3:8d:ba:58:f2:fb:0d:92:
         7d:92:33:c8:d0:76:93:5b:63:5a:e0:bd:f0:7d:9d:bf:b3:03:
         83:59:16:ee:a4:46:20:74:2f:42:60:75:9f:75:48:1d:53:e2:
         ee:65:ca:30:b9:3f:e9:1b:af:bc:b1:e6:92:c5:0b:0a:40:1d:
         9a:94:d1:e5:bf:de:84:47:99:4e:1e:e1:de:70:0a:4d:30:c0:
         95:76:be:72:ce:36:cb:88:d1:2e:e2:84:7e:36:94:a9:85:f8:
         77:86:81:76:59:3e:51:06:e0:80:73:f3:48:06:e9:22:bd:c5:
         7f:4a:f6:84:63:96:97:f6:3a:70:0d:2a:c8:18:03:13:23:18:
         1b:66:59:84:f3:74:b0:db:ac:9a:24:fb:6b:65:96:1b:23:d0:
         ba:c2:be:3e:4b:33:b0:bb:72:65:9b:a7:3e:79:2b:39:be:7c:
         95:80:4d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:50 2026 by rpki-client