Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a061b774-3ac6-34d2-a05e-9a8c2e8019a1.roa
File:                     a061b774-3ac6-34d2-a05e-9a8c2e8019a1.roa (raw, json)
Hash identifier:          gZBd54zyM8DhGlom1lmQlS/+Dr6AV/KIe6mi7EdZgtw=
Subject key identifier:   89:C6:18:11:21:65:DA:9D:C7:7F:E6:D3:29:CE:6D:99:7B:FD:12:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D732BD583EB8050765BD7F300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a061b774-3ac6-34d2-a05e-9a8c2e8019a1.roa
Signing time:             Thu 09 Apr 2026 14:07:51 +0000
ROA not before:           Thu 09 Apr 2026 14:07:51 +0000
ROA not after:            Wed 08 Jul 2026 14:07:51 +0000
asID:                     396615
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:2b:d5:83:eb:80:50:76:5b:d7:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  9 14:07:51 2026 GMT
            Not After : Jul  8 14:07:51 2026 GMT
        Subject: CN=a947b2c5-e7b2-42dd-9fca-b7757691cafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:55:53:8c:b4:76:7f:2b:e1:4c:71:8d:c0:
                    4e:8c:82:b3:3e:e9:7d:0a:47:68:ab:c7:76:c1:54:
                    7e:95:dd:7c:b6:ee:fe:ef:f7:15:e2:7d:87:4a:00:
                    df:34:01:d3:ca:23:34:3f:1f:10:bd:3e:cd:20:58:
                    85:50:26:57:1a:65:57:e8:38:a1:41:38:8b:c0:17:
                    d2:b5:3d:97:7b:aa:3e:47:b4:e9:d1:93:83:ae:4e:
                    f4:d9:ec:5c:e7:0e:ea:14:47:1b:49:32:ca:19:95:
                    38:bb:04:12:5c:65:e5:68:7e:dc:3e:de:f8:02:6a:
                    11:08:48:8d:5d:5f:44:fe:6d:7e:df:6f:c4:c9:88:
                    10:3d:c0:52:1c:e9:8c:21:d3:5f:e8:21:16:d8:9a:
                    41:5d:ab:0a:7d:05:98:44:27:53:67:75:71:42:c2:
                    39:b2:3b:e8:60:b3:0a:fc:06:06:0d:30:05:ce:db:
                    65:02:3d:55:81:b2:6c:6c:40:49:26:e2:a4:4b:1b:
                    61:53:57:6a:c7:ff:95:f3:a2:50:60:04:2e:f7:44:
                    14:80:aa:36:d9:29:4f:8d:87:83:e6:45:0f:42:58:
                    37:3d:e7:1e:d0:30:aa:da:57:40:c4:7f:b6:d5:6d:
                    19:1f:f3:8a:28:e2:12:c5:df:dd:4d:8e:22:1e:e5:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C6:18:11:21:65:DA:9D:C7:7F:E6:D3:29:CE:6D:99:7B:FD:12:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a061b774-3ac6-34d2-a05e-9a8c2e8019a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:44:cb:76:da:63:3a:a6:fd:db:e1:92:3f:b2:5b:78:3d:67:
         96:74:10:5f:c1:56:e5:5a:8d:5c:36:f6:87:91:ff:a3:d6:71:
         a4:09:fb:ce:31:14:2c:e1:26:54:fb:88:fa:9f:c8:67:c4:57:
         65:9d:3d:dd:62:ce:fa:40:57:f9:42:21:64:24:5c:06:dd:77:
         84:55:b1:f5:07:e8:f3:ce:6b:90:3f:c1:09:bf:4b:57:d7:35:
         16:9e:27:33:98:c9:59:73:f5:90:55:dd:9b:da:8a:2e:f3:1c:
         4a:b1:c7:33:74:0b:16:c1:ac:08:86:8c:90:de:93:f7:42:d9:
         ae:df:01:bf:dd:9f:6e:95:b8:d6:bd:ed:2c:a5:4d:63:0f:ad:
         43:b5:9e:7a:c7:a7:ac:73:35:2c:44:ae:ba:a8:ee:75:a3:16:
         6c:14:33:2e:c6:17:9c:5b:b4:6d:65:2c:35:da:de:75:b9:d2:
         58:c2:78:3c:01:14:66:7b:be:05:01:ad:85:62:4b:a0:7f:48:
         8f:86:a3:ba:60:23:cd:d7:ab:88:c9:43:28:46:0f:58:c8:6f:
         d0:ec:98:f3:cb:f7:dc:d8:43:eb:cc:92:c5:f0:52:64:db:1b:
         f7:8c:ac:a3:19:80:9f:17:90:b7:9d:be:a6:39:e0:0b:c7:f0:
         21:9f:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:31 2026 by rpki-client