Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc739e4-40a7-3c37-8dc9-243d52f2ac21.roa
File:                     9fc739e4-40a7-3c37-8dc9-243d52f2ac21.roa (raw, json)
Hash identifier:          Y46xX6YlaKYvqQtInXxY3nmzEn7gWSBrDF86t1TBhM4=
Subject key identifier:   4D:C7:61:3C:2C:FA:AE:02:08:2B:5F:25:DC:8A:05:83:29:6B:AB:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE85C80CFA857A59CE052D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc739e4-40a7-3c37-8dc9-243d52f2ac21.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     396605
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:c8:0c:fa:85:7a:59:ce:05:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=ab813d40-fce2-4cf5-af9e-109529120e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:54:b2:56:83:db:d0:67:fc:ce:ea:0d:da:57:
                    7d:fe:a3:0a:4e:39:7a:a1:3b:46:d1:e1:d7:9a:aa:
                    91:9b:2e:ce:02:51:63:a8:1a:ad:f2:6d:b4:77:ad:
                    2d:40:4e:e5:26:3d:c5:20:52:11:8c:59:22:47:d0:
                    38:81:95:71:b6:b9:b5:18:0a:57:0c:c9:d2:0d:17:
                    24:87:30:82:10:18:8d:21:37:a4:5a:5b:f1:13:78:
                    2e:af:2e:06:85:50:6e:76:5a:c9:82:5d:3c:56:43:
                    67:8d:a8:29:8b:bf:09:41:ae:36:89:f5:ae:59:ee:
                    1c:2a:fc:e7:99:58:fc:13:0d:bb:4f:15:a6:d9:ba:
                    c3:a0:a8:62:ee:3b:ec:5b:c9:db:c8:ca:91:78:03:
                    a8:c7:31:f4:70:1c:c1:0c:4a:2b:da:00:70:d8:79:
                    b5:4e:ab:3a:bb:04:50:c8:b2:6d:bf:1e:33:21:ff:
                    76:08:bf:1c:ce:cd:9f:a0:4b:bc:48:ee:ad:a5:91:
                    f7:dc:4f:5f:8e:9f:99:a1:fb:39:e0:7f:58:42:29:
                    1e:01:25:c2:50:9a:bf:f5:3f:13:4f:86:15:e9:79:
                    43:9f:9c:e3:5a:76:a0:60:06:bf:ab:38:69:ee:20:
                    50:25:b3:4d:21:07:61:c1:fa:d5:67:47:42:4a:67:
                    dc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C7:61:3C:2C:FA:AE:02:08:2B:5F:25:DC:8A:05:83:29:6B:AB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fc739e4-40a7-3c37-8dc9-243d52f2ac21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:8a:93:14:4d:47:82:69:9e:79:f5:99:04:ad:c0:85:1d:8e:
         ed:6a:ba:39:a0:1c:c3:c1:fe:4d:b2:82:86:66:11:b4:04:f0:
         a3:f5:91:50:3b:9e:da:d7:7b:7e:5e:f7:0d:e6:65:2f:64:b9:
         3d:ef:51:4b:04:e1:52:c0:92:ff:30:4a:18:df:e1:83:6c:0d:
         48:4e:80:03:96:dc:d2:cf:1f:64:f5:0f:05:99:5e:31:6c:77:
         d0:4c:3c:75:14:42:68:c9:8d:31:ed:2b:a8:32:72:08:26:d6:
         a1:25:fb:21:09:99:4d:8e:89:f6:e5:ab:ea:7a:85:4b:3c:fa:
         71:b8:2b:19:83:ed:b9:40:24:93:c8:2c:9f:39:c2:ea:af:e7:
         0c:c8:48:d3:4b:f2:ff:19:66:0e:ee:21:12:f8:4d:2e:f4:47:
         be:9a:6e:e4:11:59:73:5a:5e:f1:a8:a1:bf:27:2c:92:70:08:
         78:6d:88:85:40:a1:b3:8e:8c:39:f6:ee:12:9f:3a:65:7d:fe:
         89:2c:13:9a:7d:70:c6:3f:31:fd:ba:e4:62:61:f0:9f:e9:a2:
         43:06:17:a8:83:57:67:d0:af:35:4a:53:be:af:3b:16:e8:58:
         11:6e:2b:ca:83:69:f6:be:44:3f:22:fa:74:a2:21:85:d7:54:
         6d:87:0c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:57:15 2026 by rpki-client