Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e2291b-5d4b-3a81-b2de-1ed05e61680f.roa
File:                     b7e2291b-5d4b-3a81-b2de-1ed05e61680f.roa (raw, json)
Hash identifier:          PKUcNZBRmaFcXXFbfWlb8j41qHiMyYXnnHfISYhZG9Q=
Subject key identifier:   FC:3C:A9:72:1D:6D:10:1C:71:A5:17:ED:FA:C2:B8:86:D5:A7:00:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78F57D1761FB357147B8260
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e2291b-5d4b-3a81-b2de-1ed05e61680f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396826
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:57:d1:76:1f:b3:57:14:7b:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=faef1d45-c78b-4d1b-8256-80914a6d1b76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:30:6a:03:45:5f:87:e7:25:75:87:f5:91:1b:
                    c0:5e:5a:58:c4:16:6d:a2:32:2f:13:8a:f1:1d:d2:
                    3a:10:40:65:81:53:6e:53:a2:62:bf:0e:fb:6e:0a:
                    89:7a:94:53:ea:cd:87:8d:e9:a3:b7:35:5f:34:97:
                    5f:b4:52:a6:2d:a8:2f:59:a7:ae:17:2a:36:70:46:
                    a3:4d:d1:77:1d:32:8c:90:41:46:84:de:52:f4:eb:
                    f1:d1:4a:e7:a5:a6:46:b4:d3:0a:4f:5c:16:26:58:
                    3c:07:b1:10:08:a6:56:31:67:c2:d7:53:34:e6:ba:
                    8b:f0:4e:53:0a:92:61:56:56:ba:f5:43:66:b7:cb:
                    e5:c7:d0:0b:3c:4c:66:78:7c:f8:e4:e0:fe:4a:23:
                    cf:a1:4d:bc:ca:e1:54:2e:f8:22:4f:cc:9a:27:c0:
                    90:62:7e:ec:ba:4a:00:86:0f:46:cb:7a:14:a6:29:
                    04:f6:35:f7:e4:9e:11:b8:d6:53:8d:0b:41:f7:4f:
                    a1:7b:bb:fa:cb:f2:bb:22:79:42:70:40:4b:17:d9:
                    2a:a7:5b:7f:60:56:77:0b:cc:2f:1e:be:95:9c:2f:
                    43:2c:db:17:7e:0a:b1:76:88:59:df:92:a6:5e:58:
                    72:96:e2:4f:6f:ad:9b:a3:f6:ac:50:fb:7e:d1:49:
                    26:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3C:A9:72:1D:6D:10:1C:71:A5:17:ED:FA:C2:B8:86:D5:A7:00:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7e2291b-5d4b-3a81-b2de-1ed05e61680f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e9:10:3a:21:33:6a:ff:81:fd:1d:93:f5:16:ed:ab:1e:90:
         b0:5a:cf:d2:d8:11:ca:3c:8c:b6:f8:5e:21:c6:01:c3:fc:7d:
         a7:88:3e:7e:28:20:5b:2a:89:b8:bf:6c:a6:3b:66:ab:c8:fb:
         9a:0d:2e:8f:97:59:e1:51:2d:0f:2a:42:a2:2f:30:3d:e1:45:
         70:0e:b5:5a:ad:23:a6:79:a1:88:ea:94:5e:97:5b:9a:d2:c5:
         37:99:ed:7d:e4:b0:b2:e9:3a:fe:3d:33:8e:ec:cc:19:c2:54:
         89:8d:6d:9d:32:8f:e7:a5:8f:b4:82:a7:55:c0:d3:50:de:e7:
         04:66:ed:d7:b4:e5:54:83:2c:db:13:a2:8d:48:3f:5b:2f:64:
         99:17:01:27:ce:eb:54:8a:61:a8:ee:89:15:23:09:c1:98:fd:
         97:11:4a:0b:01:51:75:8e:2f:72:47:29:c3:62:1f:78:f2:5f:
         42:39:e6:5f:ad:02:76:20:af:18:be:df:68:94:03:8f:42:73:
         aa:42:d9:a6:13:5d:7e:43:20:63:e2:df:fb:0d:58:65:4e:75:
         91:40:7a:46:e7:b8:a0:ea:06:db:cd:41:2a:57:f6:a3:63:b5:
         aa:49:46:9a:f1:17:1d:fa:7c:6b:ea:d3:4e:cb:ab:93:52:29:
         f1:49:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:40:03 2026 by rpki-client