Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b90672f6-ee40-31c9-8a32-0cdfa5eac55b.roa
File:                     b90672f6-ee40-31c9-8a32-0cdfa5eac55b.roa (raw, json)
Hash identifier:          5M9otR/ELbKdFNEWIGBkFEO0fYsZHXZ2Tmi++vwrPro=
Subject key identifier:   9F:2F:1F:63:16:D4:13:4D:A3:19:2F:CE:46:15:FC:14:90:1D:4F:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA788AF5AE1CDD79494293B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b90672f6-ee40-31c9-8a32-0cdfa5eac55b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396602
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:af:5a:e1:cd:d7:94:94:29:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ae9592fc-ab11-402e-a129-00b3063c7cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0b:bb:4f:1d:af:29:d6:26:e0:24:fb:bf:60:
                    d9:3b:b9:aa:3b:5a:ea:98:d9:e9:49:da:c1:a8:c5:
                    7c:ab:e8:35:30:30:19:bc:be:c6:4f:94:ac:08:b3:
                    12:1d:c4:99:80:02:6b:d5:49:f5:ee:34:df:a6:93:
                    5d:46:86:9d:29:d7:d2:25:2f:40:c1:c3:9e:c8:c1:
                    b8:65:9b:13:65:f2:02:ec:49:fd:f8:1a:04:09:12:
                    af:19:f6:6a:7c:6d:ad:bc:d6:22:87:d3:62:5a:c9:
                    0c:ef:73:5b:d7:73:77:a8:bb:1d:c1:33:aa:25:45:
                    2a:0e:c3:ce:3e:a1:9c:4b:cf:f8:56:3a:0f:ba:f4:
                    b4:de:59:36:df:89:cf:85:c1:cb:93:56:54:5c:77:
                    50:75:36:82:8d:f8:80:44:65:3e:ee:8c:b0:95:32:
                    87:ce:e9:6c:82:8b:cc:fb:46:7f:50:9f:97:26:c8:
                    ef:86:06:68:d3:26:da:05:64:45:3c:a1:07:9b:c6:
                    06:2d:09:4f:09:a6:07:b4:17:06:7a:4c:7f:83:16:
                    9c:cf:5f:6b:a0:f7:79:e0:40:87:f6:cc:e6:37:29:
                    9b:1d:c6:ab:a2:d3:6f:26:bc:10:24:8b:ef:1b:4c:
                    a3:14:ab:1b:fc:a7:08:57:3b:a4:d1:90:6f:cc:19:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2F:1F:63:16:D4:13:4D:A3:19:2F:CE:46:15:FC:14:90:1D:4F:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b90672f6-ee40-31c9-8a32-0cdfa5eac55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d2:bb:6c:74:f1:c9:86:c6:5a:13:d4:ec:66:df:f0:8a:a2:
         8a:50:2f:ba:da:28:46:20:31:91:22:98:a6:f5:3f:b9:13:cb:
         7f:d3:ab:73:53:0b:64:16:94:cc:5d:5f:ff:94:75:31:b0:3f:
         8e:ca:73:62:2c:6a:20:92:8a:3b:de:5f:d1:e6:c5:b1:5d:92:
         5a:fb:ca:62:26:24:7c:f4:48:ce:a3:81:7e:ae:43:0c:01:92:
         c0:b7:80:b3:ed:5b:c8:a9:5b:05:77:66:66:c6:f3:fc:b2:6d:
         2f:2c:a8:ca:63:41:11:d2:5f:b7:70:a0:7c:53:3d:95:52:5d:
         12:56:67:8a:65:22:cb:f5:53:cf:a3:2a:ae:4d:1a:f3:74:a4:
         48:d9:a1:f8:7a:9b:fc:53:d4:b9:a0:16:34:f9:41:d8:26:8b:
         c6:0c:e2:39:42:2e:b4:bd:a7:48:18:26:61:97:d8:82:be:21:
         50:be:73:16:d4:53:a2:03:99:01:d1:4b:0e:0a:54:29:10:c4:
         bb:bb:bd:04:e9:e9:1d:76:ed:4d:36:44:97:de:89:4f:15:82:
         92:d2:a8:ca:1e:15:dd:36:e0:34:93:00:00:3d:4b:07:c3:5b:
         85:3c:45:37:5c:69:c0:cc:b1:72:f5:ec:69:35:5a:00:80:5a:
         b4:b0:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:46:25 2026 by rpki-client