Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1d5574-16a1-3235-abfc-f3d832bc5707.roa
File:                     ac1d5574-16a1-3235-abfc-f3d832bc5707.roa (raw, json)
Hash identifier:          bRxRFQqcPmVGGTRV7loYJLZ33VUgwxQvKqDe/uKoStQ=
Subject key identifier:   CC:34:E2:A8:F6:D6:63:8B:29:E9:21:5C:2B:51:C0:84:59:6A:FF:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7878FF007D95E98480FE334
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1d5574-16a1-3235-abfc-f3d832bc5707.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397209
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:8f:f0:07:d9:5e:98:48:0f:e3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c3e0ad9d-e733-42c3-98ae-18472531f6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:77:f7:ac:6b:26:76:c8:3b:f1:c1:d1:aa:
                    90:40:94:19:99:a7:60:8b:22:54:dd:1b:80:cb:bf:
                    9d:32:a0:34:e9:ec:7c:52:fe:29:88:ee:7a:dc:e7:
                    bb:9f:8a:31:99:e7:d9:db:c9:d7:db:3d:0a:4e:63:
                    25:78:44:2a:b4:39:b7:b1:53:d8:94:63:af:29:57:
                    2e:77:83:df:31:e2:ef:4a:86:c2:00:49:be:c2:e5:
                    95:bc:23:7f:23:99:5c:13:79:90:5b:d3:5b:0c:c6:
                    5c:17:33:a7:8b:5b:2c:65:c4:dc:5f:63:af:a7:25:
                    2d:3f:65:8f:d0:bf:db:c9:9e:c6:53:18:db:ad:0c:
                    45:2e:bb:a7:76:9b:a5:88:1f:a6:3c:8e:a3:25:ae:
                    8e:37:ee:4c:6c:64:11:03:4d:38:c9:ee:fb:fd:61:
                    5a:98:e2:6b:1b:09:ea:f6:c8:0e:27:5e:0f:9d:00:
                    12:b2:6c:de:62:7e:57:05:fd:2e:e6:61:d1:2c:a0:
                    73:da:be:34:ac:3f:56:34:16:ff:87:80:4a:c5:d0:
                    1c:ba:f6:0a:cf:70:24:ee:67:00:b1:19:62:51:a3:
                    83:83:76:88:ea:4f:e4:ea:95:49:d0:d9:15:75:7e:
                    6b:82:5c:c8:41:24:ee:db:03:01:b6:c9:81:be:6a:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:34:E2:A8:F6:D6:63:8B:29:E9:21:5C:2B:51:C0:84:59:6A:FF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1d5574-16a1-3235-abfc-f3d832bc5707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ba:f8:e4:1e:2b:f5:25:91:15:ac:72:73:b2:40:17:f7:74:
         17:65:e8:38:db:63:c3:96:15:62:7f:23:06:f3:5b:c3:8c:ba:
         c6:7f:60:1d:3f:c2:54:af:1c:75:cc:d4:46:f6:72:ab:a5:28:
         65:07:b6:97:db:79:29:1e:bf:2a:ca:d6:45:67:3d:19:aa:9a:
         f2:ce:d5:a8:96:fb:90:d3:3a:d7:d3:37:5e:aa:b4:ed:34:55:
         ec:09:7a:cb:26:c5:3f:2d:57:e0:f9:8b:27:60:c5:1b:64:e2:
         39:a7:a3:16:14:00:1c:da:95:85:73:44:b4:ba:19:0b:95:d2:
         aa:b1:dd:79:66:74:4c:8a:2c:1b:0d:c3:66:dd:db:7e:20:ef:
         50:ad:86:16:9c:65:38:95:34:16:04:bb:89:fa:02:93:c0:96:
         35:e9:cf:1a:be:40:2e:a8:8d:dd:89:a3:39:12:3c:49:ed:b6:
         40:eb:23:57:24:8d:c8:73:86:54:10:39:e4:5d:fc:95:78:17:
         2d:b4:40:35:f2:a0:f8:3f:00:b0:6c:56:4a:e8:9f:be:ec:5c:
         ce:c8:de:ea:4a:c6:2d:9d:8f:0a:ba:43:96:02:43:74:63:d8:
         67:b0:5d:83:f1:cf:51:36:50:1a:34:b5:8f:18:e1:53:85:4f:
         ac:9a:69:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:00:15 2026 by rpki-client