Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a06e7cbb-d1a5-35c6-b73d-da7c976584e5.roa
File:                     a06e7cbb-d1a5-35c6-b73d-da7c976584e5.roa (raw, json)
Hash identifier:          rbbjqq/Ap5Ue7YE7oxV0C6mX5wQr/rKRIX6ZnXZkTCM=
Subject key identifier:   C3:9B:E2:B8:BA:C0:F4:54:B1:34:C2:FE:41:8F:48:6B:35:E0:7C:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5FA87008B4795EB41850ACB0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a06e7cbb-d1a5-35c6-b73d-da7c976584e5.roa
Signing time:             Thu 02 Apr 2026 14:22:45 +0000
ROA not before:           Thu 02 Apr 2026 14:22:45 +0000
ROA not after:            Wed 01 Jul 2026 14:22:45 +0000
asID:                     396591
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a8:70:08:b4:79:5e:b4:18:50:ac:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 14:22:45 2026 GMT
            Not After : Jul  1 14:22:45 2026 GMT
        Subject: CN=ea40833b-ad4e-400b-838f-4f07207263cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:35:14:d3:f2:53:75:e8:82:6a:26:fb:2b:b4:
                    57:61:cc:2e:d6:94:15:c9:45:11:39:f7:17:b7:4e:
                    df:a5:35:1e:b3:dd:d0:1c:6d:98:c6:38:bf:ec:5a:
                    af:64:9c:bc:41:f6:16:dd:57:e8:a6:fa:96:2d:72:
                    62:97:7d:2d:d9:27:64:91:08:e7:3b:26:21:1b:dd:
                    0f:9a:bf:f1:a6:4f:f4:23:2d:02:47:76:9e:88:a7:
                    e6:1f:f8:98:65:b8:f7:23:75:1c:d1:ec:a1:79:08:
                    a5:bb:a3:ce:49:d2:be:ab:16:9d:df:bf:d2:28:5a:
                    0c:9c:bb:23:68:45:2b:fd:40:a2:2a:57:52:a8:0b:
                    ae:56:4b:10:f1:3b:07:f2:2f:cf:2f:12:90:33:8b:
                    cd:96:a8:87:86:04:8f:97:b3:41:a8:1b:3e:f0:36:
                    d7:3b:4e:fb:50:bc:82:58:02:98:af:d7:95:7b:1e:
                    e2:2b:53:8e:29:c6:86:ca:f5:23:50:97:a1:d5:2b:
                    3f:cf:70:57:49:00:1c:a7:8e:a0:cd:57:dc:01:d8:
                    55:61:6e:dd:8b:46:db:9d:46:9d:4d:36:c4:2e:f2:
                    f0:0b:e6:ed:a3:c3:36:99:bc:68:b3:59:b4:93:1d:
                    b9:3e:c4:ba:c8:98:ff:f2:9a:67:8a:21:4a:17:73:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9B:E2:B8:BA:C0:F4:54:B1:34:C2:FE:41:8F:48:6B:35:E0:7C:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a06e7cbb-d1a5-35c6-b73d-da7c976584e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:c2:07:b3:24:4d:06:a5:8b:0e:16:33:75:59:eb:1a:05:1a:
         c0:11:9f:95:23:9a:0b:31:0e:3e:8c:df:a1:7e:47:71:4a:1c:
         aa:0a:31:00:a9:cf:30:94:03:9a:8e:5c:d4:2c:78:2e:ba:be:
         2d:34:7b:ea:3c:de:f4:a7:d4:81:1b:67:38:04:bf:f3:35:5a:
         7f:84:30:6f:26:2a:2c:4b:8a:34:c3:2b:c9:23:9c:14:61:00:
         39:89:34:26:f9:d9:6a:e2:b4:bd:22:be:bd:b6:c6:bf:bf:20:
         0f:a1:fc:ae:11:e9:23:8c:e0:80:3f:3e:42:69:dc:63:99:4d:
         ce:89:5a:8b:a3:1c:e6:86:37:22:97:50:69:3e:e7:80:d5:63:
         92:a0:40:e2:59:31:91:02:f1:f7:72:c4:c1:19:25:c5:9f:2b:
         fa:d4:a9:38:1d:94:82:0f:4d:de:46:a5:44:dd:52:ca:ba:30:
         19:13:e9:e3:fe:a2:9e:00:28:89:ee:04:d9:1f:e2:8d:e6:54:
         e1:e5:da:ed:7c:a6:c1:19:43:18:b1:c2:f9:69:5b:d7:0d:a1:
         0b:c3:cf:c4:54:2c:16:a9:f4:89:4c:13:cd:47:b4:e4:55:da:
         b7:b0:a7:1d:89:15:2f:1c:9a:52:7e:6d:c0:b8:a8:5d:ec:4a:
         2a:b2:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:15 2026 by rpki-client