Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aab89aba-d46e-3f74-80f9-466c3480b68a.roa
File:                     aab89aba-d46e-3f74-80f9-466c3480b68a.roa (raw, json)
Hash identifier:          8Ufin2PShRFhGvjTFzbI3yNio/nN9Oi/Oe54c5ZRG0s=
Subject key identifier:   3D:DC:DE:A3:A1:4A:CF:BB:86:58:BD:26:B6:38:0C:B6:DB:1D:30:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8695680BC5C4F8CC895AA240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aab89aba-d46e-3f74-80f9-466c3480b68a.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     396586
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:68:0b:c5:c4:f8:cc:89:5a:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=c53dc16e-8f1d-4a9e-941e-386365ee44e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3e:6a:99:2f:1e:81:bd:ee:00:8b:1b:78:74:
                    99:40:8e:fc:67:18:96:11:83:55:35:82:4a:70:26:
                    45:ce:c5:09:24:51:54:dc:4f:6b:0c:31:e9:f1:26:
                    bc:44:76:20:df:3e:d0:7f:0b:6a:e9:90:62:04:d1:
                    3f:61:54:c1:59:8d:af:1f:28:cb:f3:93:09:63:4a:
                    3b:86:a0:99:41:e8:07:72:d5:06:13:45:46:82:14:
                    b6:53:3a:b5:80:c6:57:c8:dc:6a:12:36:53:dd:7f:
                    31:34:f6:56:d9:f4:18:d9:a8:18:7e:f4:c9:59:70:
                    b7:62:cd:33:09:60:2f:d4:7f:fd:b8:20:7a:9b:c6:
                    a4:4c:3c:cb:84:ff:59:f4:8f:67:03:11:fe:bd:7a:
                    59:1c:cd:68:01:1d:e3:fc:7a:91:d1:19:09:f2:b5:
                    f5:19:75:e1:3a:4a:de:03:3d:e4:38:5a:e0:2a:70:
                    34:e5:1a:f9:01:df:34:a3:e1:66:97:65:30:da:db:
                    96:45:3b:72:55:ed:f1:9b:1c:4f:fb:87:1b:fb:92:
                    c6:2c:23:6c:f7:e3:ad:6c:4c:62:da:04:d5:14:e5:
                    6c:59:48:95:46:2b:a2:01:52:d8:86:91:d9:45:02:
                    13:cc:fc:ef:cb:5f:71:3b:e5:8b:b7:a5:b6:c5:0e:
                    c9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DC:DE:A3:A1:4A:CF:BB:86:58:BD:26:B6:38:0C:B6:DB:1D:30:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aab89aba-d46e-3f74-80f9-466c3480b68a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:a3:fd:83:86:b4:18:16:8a:0d:e9:1d:e9:16:23:22:f9:
         9f:e4:9e:5e:ad:e7:af:95:e8:9f:71:54:40:99:a4:d2:34:5f:
         bc:f5:8c:d9:cc:1f:a5:2b:2d:fa:a2:77:ae:31:b1:f1:d8:d7:
         85:6c:1d:f5:d1:7f:d4:59:6b:2e:0d:ac:9b:bb:87:5a:e3:d8:
         b6:29:c1:fe:5a:73:9c:4e:aa:a7:06:ce:37:ec:59:0b:47:c5:
         1f:33:99:f0:4e:4e:d6:cb:80:5f:a1:a3:0c:3b:05:47:b7:09:
         f4:35:0d:e3:5b:84:25:3d:61:7c:07:a3:a6:a3:bf:53:6d:a0:
         a0:ef:f2:88:62:ad:e0:b9:39:00:19:50:93:ee:59:b8:9e:a4:
         b5:eb:c6:fd:87:32:b8:79:41:41:79:28:fa:c4:dd:7b:30:2e:
         cd:21:04:e1:69:e7:e7:83:1f:b7:c1:a7:44:43:87:72:19:5e:
         79:f2:fd:86:40:ba:17:77:5c:de:2f:c3:2f:8f:82:1b:0d:89:
         6c:d7:73:2a:3a:ba:22:3d:fd:d6:dd:01:4a:62:c9:30:13:1b:
         b6:63:20:d0:73:a8:78:b3:a7:bc:99:33:7d:94:c2:af:80:37:
         c4:c8:4d:eb:1f:90:dc:ff:c2:c6:d6:81:7c:b9:29:d8:ea:33:
         e5:0a:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:25:06 2026 by rpki-client