Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd8370be-7559-327e-b24e-3701ae63ac64.roa
File:                     bd8370be-7559-327e-b24e-3701ae63ac64.roa (raw, json)
Hash identifier:          QXsIgGDVy1/1X8zQNMqvXp11Twfn1cQVHOtTQDuu8pU=
Subject key identifier:   26:3F:5B:F1:A8:54:C2:3A:78:75:54:F2:81:B8:3E:C2:5E:72:38:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8695682F8ABEAB224C0326A8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd8370be-7559-327e-b24e-3701ae63ac64.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     21313
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:68:2f:8a:be:ab:22:4c:03:26:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=29e41216-c105-473a-b367-9718649248a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:f2:95:89:85:ba:ae:5e:c6:82:ad:02:79:
                    e3:fd:5e:10:49:b9:0f:09:f7:55:37:0d:9f:1a:40:
                    43:d5:1a:af:72:f4:4c:84:6b:16:01:93:a5:4c:80:
                    03:5d:47:a3:74:e8:13:b8:08:72:6f:f2:5a:e6:0d:
                    be:43:68:79:84:37:b5:a6:05:eb:96:28:cd:2c:72:
                    d1:d4:1c:e4:30:4c:ed:57:b9:83:9e:d4:e9:c2:37:
                    a6:25:a5:19:5b:97:05:99:70:ce:dd:d1:ac:76:df:
                    0b:94:b0:4e:b6:b0:1a:d3:92:c3:bb:bf:d0:c9:cb:
                    77:13:73:ca:d0:6d:24:88:3b:54:95:91:c4:ba:ae:
                    85:1b:7f:8d:55:4d:26:f5:7d:f0:80:5b:ca:bb:ef:
                    24:b4:c3:db:48:4e:0b:b9:a7:cb:5a:f0:0e:04:34:
                    6f:13:65:c0:69:e6:2e:5d:7f:8b:d4:37:75:7c:4b:
                    71:14:ce:99:a1:eb:58:cf:fd:cc:ec:6e:66:ea:74:
                    44:70:1c:c3:bc:71:b2:7c:de:f0:05:16:d9:87:b1:
                    5e:fb:19:36:57:47:a5:83:1e:40:07:5f:6a:2c:ce:
                    ee:5f:f0:fa:75:f5:2d:27:79:92:30:2d:5c:07:25:
                    d5:58:95:4a:80:e5:ef:af:79:d0:fd:62:c8:f0:a4:
                    4e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3F:5B:F1:A8:54:C2:3A:78:75:54:F2:81:B8:3E:C2:5E:72:38:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd8370be-7559-327e-b24e-3701ae63ac64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:b5:d8:5a:6d:97:4f:a5:05:a2:99:df:3a:f4:7d:6d:d2:2d:
         bf:a8:90:ea:e7:5b:78:72:3d:27:78:7b:0c:a3:64:fe:b3:e1:
         f3:47:0d:c0:51:da:5d:d9:3b:3e:4e:57:f4:4d:db:49:d2:ee:
         12:cc:54:e5:88:43:2b:5d:4a:9f:a5:24:60:d3:c3:f0:da:b8:
         bc:a0:1b:0d:d4:92:b2:47:53:d4:a9:46:ce:b9:6d:29:1d:a7:
         30:5d:17:95:fb:80:d6:11:38:9d:45:64:c1:ed:70:a4:54:ac:
         2a:be:a9:08:87:77:d6:9c:a0:ed:82:58:40:9a:28:e6:44:3c:
         b1:fc:e2:49:a2:c8:73:88:c8:79:72:8d:2a:b0:bb:17:3e:9c:
         11:0e:aa:3f:78:4c:91:79:6d:1b:83:47:f6:ef:34:5b:fc:5e:
         15:49:d5:76:77:8a:73:8f:c5:3b:db:36:df:7e:5c:05:7f:48:
         5f:87:99:4c:95:1e:76:d0:02:5a:aa:ff:36:5d:28:2e:06:46:
         04:6c:27:ce:c5:d8:70:65:8f:c3:01:c0:fb:47:b4:fd:b6:35:
         55:ad:01:23:ff:f8:58:22:8a:2e:36:47:30:f7:0e:d4:a0:5d:
         8d:df:c6:ec:14:98:5c:0d:52:09:35:48:2e:08:42:af:47:89:
         65:3c:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:43:02 2026 by rpki-client