Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d09eadaf-6908-3744-96ca-f99cdd7cf6b5.roa
File:                     d09eadaf-6908-3744-96ca-f99cdd7cf6b5.roa (raw, json)
Hash identifier:          hLlnevV+YMK41vgOG0TUYRFyxOf7sGwmJapybvhwIus=
Subject key identifier:   9A:05:76:DA:0C:B7:33:33:16:86:91:D1:B4:04:12:A0:AA:48:B5:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79A0A7F87C48113F0AF1D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d09eadaf-6908-3744-96ca-f99cdd7cf6b5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396562
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:0a:7f:87:c4:81:13:f0:af:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d5b8870b-e844-4727-84cb-6835d3917d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:7f:51:da:5b:1c:fd:7e:dd:c8:e2:0e:2d:f9:
                    f4:8b:6d:ed:5b:da:11:b2:93:83:7c:71:79:ca:35:
                    11:f1:94:ad:0f:3d:bb:b3:38:e7:1e:96:64:52:45:
                    de:7c:4b:3b:3f:23:0c:b9:1e:bc:08:21:07:7c:39:
                    06:8f:ae:58:49:93:4f:96:28:e8:15:04:db:50:86:
                    f1:8a:f9:4a:5e:fa:0d:36:f0:b1:b2:be:10:ea:61:
                    d0:b9:f7:66:a5:a2:52:77:bf:21:f8:d5:ae:76:7d:
                    25:7c:47:bd:42:14:dd:83:c9:ef:38:6e:1e:8a:17:
                    18:32:f7:51:71:d8:bf:55:31:8c:de:e8:19:61:87:
                    18:96:60:e1:35:b1:0a:18:f5:be:45:07:af:de:e9:
                    28:8f:d0:9a:6e:43:bc:93:a2:8a:c4:93:02:ad:11:
                    0b:41:a2:d8:41:43:bc:22:f9:2b:6f:82:cf:59:17:
                    d3:d0:06:c7:2f:25:78:e3:ff:72:ee:19:13:b2:2f:
                    82:f2:05:25:6d:81:6c:e4:2f:f4:41:e2:f4:9e:4f:
                    77:93:c2:7e:79:12:f0:42:8e:1c:08:aa:d8:0a:ac:
                    2d:4a:ac:92:77:18:63:d4:c9:f6:20:99:88:ca:83:
                    3a:c4:b1:a8:b4:b5:8f:92:36:24:df:64:55:b9:72:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:76:DA:0C:B7:33:33:16:86:91:D1:B4:04:12:A0:AA:48:B5:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d09eadaf-6908-3744-96ca-f99cdd7cf6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:32:89:3c:ff:65:19:3d:03:b6:e4:fb:89:9d:4b:aa:e5:cd:
         bf:0d:15:bd:a2:2b:13:31:f7:66:cc:73:4b:09:9c:c0:bd:6b:
         0c:d5:78:89:c4:52:3f:a0:19:8f:0f:54:cd:71:27:b9:5a:7b:
         d8:ac:c5:b6:85:10:bd:63:d8:06:c7:99:a5:22:40:8f:bb:8e:
         28:21:02:c7:bb:f5:d5:7b:24:31:bb:a1:48:0a:1e:0e:b9:d2:
         8b:2d:5d:d9:8a:5b:ea:bd:45:65:6d:5a:be:cd:2f:0e:fd:48:
         dc:e7:42:00:e1:a1:f1:4a:3c:05:db:f1:8a:f9:05:3f:d1:63:
         ae:bb:52:d1:28:69:ff:82:f4:0d:dd:04:ea:77:ff:3c:82:d9:
         43:c1:fd:8e:c7:23:ae:e9:0e:78:4c:80:46:65:40:23:81:d7:
         62:42:3a:32:3c:21:38:55:b7:ea:29:6b:f5:fa:43:f7:14:04:
         55:11:90:cf:b5:a9:d0:22:de:81:8d:ca:20:94:3f:80:9e:80:
         f1:f9:dc:aa:29:fe:cd:bb:e2:2a:54:15:39:dd:8f:ab:a0:d6:
         6c:fc:41:1c:0e:29:47:9b:37:6b:28:7f:4c:b2:0f:0b:15:2c:
         8e:ee:ce:b9:2e:97:36:01:02:46:5e:81:11:12:0f:ac:a3:a8:
         d2:0f:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:14:32 2026 by rpki-client