Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff6fe6d-686b-38f9-bbf0-337ac9184e19.roa
File:                     bff6fe6d-686b-38f9-bbf0-337ac9184e19.roa (raw, json)
Hash identifier:          3OAkqZfjWFsQtAzZHb0d1V+7WtZh/4R9JLGTU9Rumkk=
Subject key identifier:   4A:9A:6C:1F:A3:15:5E:B0:36:78:C2:D6:30:1D:15:F5:0F:89:E7:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA19A3BE52762C4085D9840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff6fe6d-686b-38f9-bbf0-337ac9184e19.roa
Signing time:             Tue 07 Apr 2026 14:30:18 +0000
ROA not before:           Tue 07 Apr 2026 14:30:18 +0000
ROA not after:            Mon 06 Jul 2026 14:30:18 +0000
asID:                     396553
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:9a:3b:e5:27:62:c4:08:5d:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:18 2026 GMT
            Not After : Jul  6 14:30:18 2026 GMT
        Subject: CN=d5675426-bb16-44e5-9aa4-3c76564c206a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:14:a3:92:f0:1d:2c:95:a4:3b:a7:3b:58:5f:
                    c0:15:49:ac:7f:50:37:55:17:ed:b5:7e:28:1f:a7:
                    e8:69:90:bb:35:21:7a:42:81:75:9c:9e:72:27:d7:
                    b0:ae:93:fe:06:fd:a2:cc:7b:0b:72:87:04:85:09:
                    b8:dc:6c:02:ca:34:0e:d6:7a:6d:a9:62:62:65:74:
                    73:39:6e:e0:26:b8:5b:f9:3d:42:d8:4c:89:34:42:
                    4d:65:87:41:ed:a5:f9:c6:90:7d:20:ec:67:a7:e9:
                    37:6d:d7:99:1f:c7:0a:84:84:09:d3:01:13:ad:3d:
                    e9:35:da:f4:bb:1d:99:48:c8:54:7c:cb:39:61:c1:
                    3d:37:06:b1:03:1e:80:f7:5e:68:1d:43:f0:96:54:
                    37:5e:45:14:89:03:46:65:01:78:03:91:af:06:ac:
                    c0:5d:ba:b8:26:e3:d8:f6:38:df:a3:7a:39:b9:ea:
                    35:e1:e3:85:2b:c5:99:6c:ef:cb:d2:61:59:1b:b3:
                    30:02:b4:6a:9e:f9:c0:ed:8e:85:cd:96:eb:8a:39:
                    ce:78:b7:f7:20:da:4e:10:cd:dd:84:9a:97:9a:30:
                    89:fb:31:88:fd:e8:83:83:cf:50:db:48:7d:43:aa:
                    40:65:e1:89:7a:03:77:ed:6b:9f:7f:35:4e:d9:6c:
                    1c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9A:6C:1F:A3:15:5E:B0:36:78:C2:D6:30:1D:15:F5:0F:89:E7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff6fe6d-686b-38f9-bbf0-337ac9184e19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f8:c3:4d:77:40:ac:6f:f2:7b:ab:a5:6c:f1:7f:56:79:c4:
         c6:d2:5c:e6:37:ec:1d:5f:c2:37:4c:db:ac:ce:ad:47:05:fe:
         c2:08:e1:64:40:4c:50:6c:68:01:55:76:ef:47:ea:40:85:7f:
         41:48:be:3a:1e:fc:50:c7:49:74:2d:39:eb:a9:88:ce:e0:42:
         5f:e3:c4:5f:6a:d6:a3:d0:9f:d4:fa:87:f5:6e:0f:87:24:52:
         d2:08:d4:11:53:0a:be:b4:95:19:ed:6b:7a:e7:82:8b:c3:36:
         86:6c:85:72:4f:07:9b:0f:eb:eb:f7:d5:1c:21:52:af:ff:d0:
         ea:75:3a:da:f2:ff:7d:c9:85:85:4c:32:5f:72:47:3c:60:29:
         39:54:93:f1:56:6d:27:61:06:78:6e:bb:95:85:c1:38:b9:82:
         fb:77:4e:1a:5d:f3:fa:fd:40:f7:5b:87:19:46:5c:1a:7c:9e:
         ff:6b:97:9e:66:9d:2f:9d:d0:8d:da:98:7b:cf:01:c9:9f:35:
         bb:46:27:1f:ed:5d:c7:dc:42:7f:4e:ef:c3:e2:29:96:59:37:
         d0:95:62:9d:f4:0b:14:81:03:f9:8d:ce:42:cb:d4:60:e9:4b:
         1f:e7:f3:ef:b7:22:b5:3c:35:87:38:e7:dd:da:ed:52:90:83:
         1f:ae:6f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:48 2026 by rpki-client