Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a540ef25-1d79-3a92-844a-be1f68837ed5.roa
File:                     a540ef25-1d79-3a92-844a-be1f68837ed5.roa (raw, json)
Hash identifier:          +4LZdAjfJZN4ngRL/ZQb7WO7VuIknUPMCbCSUT64BdQ=
Subject key identifier:   4F:8F:26:A0:A0:8A:CF:15:A2:3E:99:7A:B5:9A:50:95:24:19:73:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CB00B61ACBC9EDBC988200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a540ef25-1d79-3a92-844a-be1f68837ed5.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     397199
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:00:b6:1a:cb:c9:ed:bc:98:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=f5cbedb1-918d-4fd9-bb38-f83a9df1ab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:93:c6:77:bb:ec:28:e9:4b:64:aa:a8:ba:a1:
                    78:4a:7f:32:e1:0d:91:80:cd:9c:d5:89:b4:90:35:
                    ee:1a:e7:4c:72:4f:d7:4c:e8:38:68:dc:60:c4:b4:
                    86:2c:05:3b:a9:d7:58:5b:f5:6a:e7:80:6a:c2:d8:
                    b2:08:c5:03:0b:01:09:ed:ea:31:1e:73:c5:68:a0:
                    b6:b4:b3:fe:c2:e0:dd:04:2d:43:34:7e:a4:93:b4:
                    6b:08:92:fa:0c:d6:b8:e5:ec:b1:29:5b:13:39:0e:
                    c2:54:a7:04:a8:2c:2a:ad:3e:d3:7b:ab:32:c5:d2:
                    9e:6c:95:5a:24:86:79:66:ef:ed:73:eb:11:7f:fa:
                    1a:89:af:e4:9c:96:d3:74:77:ca:66:35:84:73:b6:
                    97:7e:78:88:12:5f:bb:01:b3:9c:5f:d1:40:e2:2a:
                    bb:7a:2d:e3:b4:19:96:d8:f9:ff:0a:f0:e3:e9:9a:
                    ce:bb:1c:e2:67:6b:2e:33:5a:61:06:13:00:64:40:
                    29:7d:bb:bf:45:91:b6:84:28:76:78:2f:fb:74:ce:
                    80:73:c2:69:db:2a:92:fd:9f:bb:9f:f5:b2:33:9f:
                    94:6a:2e:3f:e8:0b:ce:46:ad:8c:ed:97:93:6f:89:
                    73:9e:1c:ea:07:44:9c:ed:f6:67:72:d5:87:88:70:
                    f0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8F:26:A0:A0:8A:CF:15:A2:3E:99:7A:B5:9A:50:95:24:19:73:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a540ef25-1d79-3a92-844a-be1f68837ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:33:cc:a0:3a:dd:b2:f9:ad:f4:aa:ec:34:74:07:c3:e0:05:
         ba:e2:81:1f:0a:28:70:2a:fe:de:b3:56:e3:4b:e0:cc:df:b9:
         5d:b6:18:b5:3c:87:b7:db:c0:bf:65:36:82:2a:1d:02:bc:27:
         46:14:62:87:7b:9a:3c:20:8d:76:ac:fa:89:1d:52:c9:ff:e3:
         06:2a:ec:ac:0b:0b:c7:fc:9c:af:d9:99:34:21:56:46:d8:6c:
         96:f5:e8:cd:af:e2:ff:f0:6d:b7:fd:35:f0:1b:24:56:ed:2d:
         f1:8a:70:2c:be:fc:27:6c:3f:27:22:0c:fa:bc:ed:63:89:d2:
         db:b4:da:bb:da:40:5f:19:fb:29:e7:d2:62:0b:8d:86:ca:43:
         ea:43:4e:14:c1:ce:86:34:bb:86:9f:d9:b8:8a:5d:21:75:d0:
         b0:9c:ac:02:22:75:0c:b4:af:94:48:d0:ff:be:75:0c:ac:5d:
         41:c1:cb:61:cb:39:0e:3b:3b:96:70:e3:53:41:53:63:13:31:
         cd:79:8b:00:61:25:d4:c7:88:dc:e3:9c:a5:31:0f:64:c7:06:
         19:8d:92:94:a3:58:ed:0a:7d:7b:78:0d:26:f5:82:b3:ce:9a:
         cc:9a:b9:6c:e6:a6:e1:75:2b:3f:bd:11:90:a8:70:5a:57:2a:
         c0:4d:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:47:35 2026 by rpki-client