Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa
File:                     9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa (raw, json)
Hash identifier:          4Tn6wfLelH1hvTaKi8Ts2E2FBlIvzZ//jnU+HHXCLyc=
Subject key identifier:   A2:41:0B:83:39:0F:71:FC:DA:25:A8:39:A3:39:93:99:04:99:9E:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA788B06035BDA68458115700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36619
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:b0:60:35:bd:a6:84:58:11:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=85635fbc-a187-4324-9bf5-1734add94834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6f:71:c4:0f:51:78:d8:07:a6:ef:e3:ce:93:
                    c4:6a:a5:ab:be:bc:b2:64:e3:26:f5:4b:d3:07:b5:
                    77:99:27:ea:2d:f8:d6:d4:f4:ca:50:39:72:bf:be:
                    5d:84:0c:64:d8:96:8a:c2:d4:9c:9b:be:c5:20:87:
                    19:88:8f:42:3c:83:d0:7c:e9:1d:08:6d:c7:fc:26:
                    db:a9:6e:80:67:4c:bb:6d:f8:05:c1:74:04:2d:da:
                    51:05:5a:20:87:9f:22:d7:ef:25:c0:d2:c6:ab:90:
                    18:eb:5a:ad:08:9a:ec:a8:db:6a:c7:ae:b0:87:92:
                    e2:32:74:ee:cb:d8:b6:dc:31:38:d8:9d:cd:52:d2:
                    a3:35:6b:dc:c3:c1:02:ee:94:14:55:75:51:f4:9d:
                    fb:82:f8:56:5b:28:40:2c:6e:88:f6:ac:b9:5f:e5:
                    7c:25:38:75:21:bc:59:51:a2:0a:70:53:07:9d:66:
                    4a:22:10:e0:33:e2:b8:88:89:9a:4b:05:69:4f:c8:
                    14:bb:c8:d1:96:6d:88:b8:db:7a:dc:dc:5a:f6:d4:
                    f7:06:12:d0:40:fa:d1:7e:b7:f6:4d:a5:15:f3:a1:
                    04:0d:e4:3d:0c:90:fe:0d:70:ad:79:7c:09:1b:a7:
                    19:f3:a3:80:be:8d:ea:12:21:da:1b:ef:51:39:ff:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:41:0B:83:39:0F:71:FC:DA:25:A8:39:A3:39:93:99:04:99:9E:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc1a0f1-b0bd-39e5-bf24-4c2f9897d1d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7a:33:be:75:dc:4a:a3:b2:ea:ec:47:43:0f:65:4c:78:68:
         40:23:13:85:4c:df:14:14:c8:ab:4a:d4:37:9b:0a:2f:5d:37:
         34:52:78:b5:f0:21:c7:b5:d3:c1:10:3d:50:d3:83:cf:fb:ca:
         61:76:0b:b9:31:93:f9:7d:14:c4:13:e4:eb:e6:1a:6b:a3:8a:
         70:89:34:41:7c:9c:04:1c:8a:94:9e:1d:36:5f:fd:7f:a7:60:
         f8:8c:73:86:ad:a8:4d:e9:3e:e8:2b:a4:46:eb:27:f9:53:b8:
         a9:96:6a:7d:df:fa:af:c8:54:b1:85:9a:b0:8e:c5:de:fc:d7:
         94:74:bf:3a:09:5e:30:4f:cc:02:05:d4:5c:72:53:ec:13:5d:
         de:ea:2b:a4:0a:09:f6:fa:02:35:38:26:49:3e:e0:f1:d3:40:
         ac:e2:35:15:b6:8d:9e:79:7c:80:d8:d0:fc:69:42:dc:d9:7a:
         87:cd:34:a1:53:06:8d:dd:8c:74:b6:50:fe:11:59:01:6e:93:
         c5:72:44:24:69:05:67:c3:63:77:ee:c4:09:16:37:52:65:20:
         9c:96:4a:31:58:4c:c0:51:ce:da:dd:99:50:9a:07:04:a2:26:
         49:4d:cb:9c:2d:25:af:42:84:c5:99:e3:8f:9a:09:e9:63:ba:
         32:08:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:46:23 2026 by rpki-client