Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a08e0085-ed68-30f5-a7f1-a84ac91369db.roa
File:                     a08e0085-ed68-30f5-a7f1-a84ac91369db.roa (raw, json)
Hash identifier:          Qx8xdlNi+DaPxN5Exwytu/JDP3U1iADqwhRjM5P0wys=
Subject key identifier:   86:7B:97:88:75:C6:1A:24:A1:B5:19:C7:3E:F0:59:30:A2:74:A3:5D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7888D9E2167EFBD59F98340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a08e0085-ed68-30f5-a7f1-a84ac91369db.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396589
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:8d:9e:21:67:ef:bd:59:f9:83:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6de2b02c-1171-4eba-bc6e-3f1123f9d149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c6:b4:37:96:e3:13:ed:14:5b:f1:d8:6a:c5:
                    27:82:b9:90:7f:05:ab:48:a5:bc:fe:66:4e:4d:9e:
                    c5:74:83:26:b1:f0:c9:30:5a:81:7a:16:6e:dd:7a:
                    11:34:71:b4:2e:06:59:01:18:ad:66:4d:91:84:2b:
                    a5:b4:c7:df:e9:49:3e:a6:ee:b5:bc:78:86:5e:e9:
                    95:10:b6:1b:7b:32:0d:d0:3d:81:70:9a:10:28:00:
                    5e:0a:3c:0a:ef:8b:c0:f2:db:ae:ab:f4:68:f9:22:
                    03:c1:b5:a1:9c:f7:da:6d:31:f5:a8:c8:7c:c2:7b:
                    64:d2:ba:76:02:ad:5e:64:a9:40:1e:56:16:44:52:
                    4b:27:5f:12:92:18:cf:2c:4b:4c:df:2b:7e:c7:40:
                    35:e5:ed:cb:56:a8:45:88:27:ca:f1:1c:f6:1b:52:
                    1a:96:18:5b:ee:92:97:01:68:6e:74:d8:26:59:b2:
                    94:db:41:05:19:72:52:ec:3b:3a:a2:d9:c9:f0:68:
                    ff:4a:bd:fc:51:eb:ef:94:2a:e1:85:c4:ab:b6:a6:
                    50:d1:2f:82:b7:21:48:b4:49:c7:f5:07:2a:77:90:
                    50:80:e6:93:0e:b2:16:95:a7:7a:cc:0c:ce:ef:9e:
                    69:24:4c:d5:67:9a:9b:e2:71:a6:94:3a:36:1c:e4:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:7B:97:88:75:C6:1A:24:A1:B5:19:C7:3E:F0:59:30:A2:74:A3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a08e0085-ed68-30f5-a7f1-a84ac91369db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:52:fb:ab:d6:3c:b8:bc:d5:3a:fe:9e:52:24:de:e3:b3:70:
         ff:c3:a0:69:80:bb:b1:fc:88:33:b9:dd:59:33:bc:17:21:02:
         9b:ab:c5:98:87:00:93:70:2b:15:37:31:1b:bb:6b:64:bb:9d:
         26:7a:31:fa:7d:c3:77:8d:44:21:fa:1d:38:38:4e:a7:7b:1b:
         30:74:dd:f1:2e:66:e9:a5:ed:33:78:34:e4:b9:17:51:04:b1:
         74:e8:32:c0:87:ec:ae:c7:be:fd:99:34:83:a3:29:9b:e5:05:
         47:56:bd:7d:1b:f9:42:18:ac:22:a4:85:0a:21:b5:7c:3f:1d:
         4e:e4:b8:7e:62:70:1f:fc:ff:06:62:35:6a:13:6b:14:e8:09:
         39:0b:d0:35:05:b3:2b:1c:ae:be:8f:0c:60:76:6c:18:47:fc:
         4d:c2:5e:8e:ff:1b:56:34:fe:50:92:a0:8d:b9:b5:8c:d1:ce:
         fc:84:d5:86:46:6f:5f:8b:83:69:21:03:b7:02:0d:61:c2:c6:
         6f:93:c8:5f:b9:72:93:24:fe:e1:b8:9c:95:9d:b0:d9:05:c2:
         65:a2:70:70:23:76:bc:75:8c:f8:a2:56:1f:d4:63:67:57:d1:
         52:84:7a:9a:9e:50:08:f8:ff:8d:43:ed:e9:e1:2f:15:17:16:
         20:87:e7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:55:42 2026 by rpki-client