Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3e8ddf-5b2e-3182-8db0-abbc24661d9e.roa
File:                     bf3e8ddf-5b2e-3182-8db0-abbc24661d9e.roa (raw, json)
Hash identifier:          XiOoZzP42n7ulvoNt+1ImD5G0zUdKveHVwCYXBnZdEE=
Subject key identifier:   7E:9A:38:73:C7:BB:EB:C6:F0:AC:79:60:CE:01:BC:D5:9D:7E:3C:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C7B2152C3FF3C48F76B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3e8ddf-5b2e-3182-8db0-abbc24661d9e.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396582
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:7b:21:52:c3:ff:3c:48:f7:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=6102a78d-5739-4e71-9bb5-fe5f077e8b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3c:cf:5d:30:3f:f6:43:6f:12:f9:63:6e:a8:
                    a0:07:3d:f9:6c:f5:de:e4:06:80:d8:03:99:ec:aa:
                    b4:dd:d8:4a:ef:5e:41:7b:04:05:3b:24:bd:a7:6b:
                    a0:33:09:57:43:34:cd:f9:fd:50:a5:ec:4f:81:f2:
                    cb:6c:7c:d5:e4:c8:98:8c:a5:a1:09:c6:51:11:74:
                    4d:90:cc:db:02:96:e0:37:49:13:f1:d1:85:15:b7:
                    41:36:36:c3:1d:5f:61:f8:2f:f6:4e:d1:72:18:11:
                    31:c1:e9:6a:ab:6b:77:15:9f:4b:c5:ae:70:1c:1d:
                    a4:0c:06:87:82:17:02:03:c7:4b:6f:db:e5:c4:ae:
                    c7:47:bb:46:39:fd:af:fb:06:33:1c:d1:98:88:10:
                    48:ad:25:57:da:82:33:d3:59:c5:fc:1f:cc:ea:69:
                    5c:8c:7a:f9:25:54:16:5d:e1:29:d1:88:e3:5c:c3:
                    34:6b:7c:e1:9d:13:f7:57:62:04:1d:63:2b:8b:39:
                    b8:77:a5:68:d7:16:1c:a5:53:49:ef:6c:d8:21:36:
                    49:55:79:be:7e:82:6c:da:6a:b0:d9:aa:cf:39:3e:
                    f0:32:5b:11:ec:d3:e9:86:57:91:44:ee:d8:a1:7c:
                    de:83:82:c3:7c:55:7f:31:24:50:4e:1c:84:24:a4:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9A:38:73:C7:BB:EB:C6:F0:AC:79:60:CE:01:BC:D5:9D:7E:3C:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf3e8ddf-5b2e-3182-8db0-abbc24661d9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:12:89:af:0c:4f:8b:0b:b6:be:2e:60:26:da:60:eb:0d:f6:
         27:88:41:7f:7e:2e:e3:5a:92:da:e8:97:c8:71:c6:e1:2d:06:
         1b:a8:4c:7e:51:92:e7:10:a7:a9:14:38:11:f4:49:32:15:04:
         49:44:53:c4:01:43:16:28:85:0d:43:e1:04:69:1f:82:3b:7d:
         d5:44:c1:85:4d:96:c7:b6:7f:2b:00:4d:7e:32:16:4c:9d:41:
         8a:01:97:18:f6:45:eb:9b:01:f5:9e:3f:a6:a7:ca:8d:6d:fe:
         bf:a2:df:94:8e:7b:d1:83:cd:9c:f4:cb:7f:b8:02:02:68:d4:
         6f:64:ee:92:c0:50:66:b2:f7:d6:b7:c8:09:5e:97:44:3b:10:
         e2:a4:2c:f8:28:86:eb:e0:ca:9f:ab:70:90:56:36:40:16:2e:
         c2:31:f0:ab:c5:e7:ac:9a:d7:0b:6a:eb:c7:ca:ee:1c:73:a5:
         47:76:34:56:e8:5e:9f:4b:9b:2d:5a:57:26:b9:d5:e9:b5:1b:
         8e:f2:3f:f8:05:9a:34:ac:d5:10:cb:45:4f:6c:03:78:5a:b2:
         5d:2e:90:81:a8:74:26:19:32:53:8e:53:ac:14:45:66:7f:4a:
         b3:fc:8b:46:07:87:bc:d5:d5:31:1f:3c:81:79:61:5c:0d:16:
         ea:0c:59:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:59:08 2026 by rpki-client