Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da3e6cad-e013-33e4-8d6d-49c8a181832f.roa
File:                     da3e6cad-e013-33e4-8d6d-49c8a181832f.roa (raw, json)
Hash identifier:          bWd2sg2XVwwHbR19yCcJ02DZyjB9vx6Mx8fUWO4lLVU=
Subject key identifier:   BD:9A:FE:06:B3:A4:46:CC:07:4B:90:CF:EB:C6:65:96:39:26:38:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D87FA9480CDA8792D10EC6080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da3e6cad-e013-33e4-8d6d-49c8a181832f.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     396611
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:94:80:cd:a8:79:2d:10:ec:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=60d6f642-3179-4d9d-b0c7-c04af2faa895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:b9:e8:03:2a:f3:9a:2b:f2:c9:bb:90:56:
                    34:25:e4:4e:59:4d:eb:6b:0c:79:aa:08:95:db:33:
                    bd:fb:d2:ed:90:94:3b:52:74:b0:e1:0f:b3:3b:bb:
                    0d:97:c1:74:ae:58:04:3a:94:0d:21:ad:66:47:c6:
                    22:02:bf:6a:5e:07:c1:b1:6a:aa:ea:f7:ac:12:da:
                    2d:c1:6b:99:31:a0:e9:4c:6a:db:a1:50:a1:d0:c2:
                    43:b2:9d:8d:f8:b6:b2:56:24:d7:ae:15:b0:88:aa:
                    f6:29:71:b8:6f:9a:92:ea:df:3b:75:31:14:66:5c:
                    ce:52:84:7e:25:73:a9:f2:f3:1f:dc:71:fe:90:45:
                    bf:28:a4:40:f0:db:e0:c4:59:64:cb:eb:d1:27:61:
                    77:e5:bb:3a:d1:a3:a5:c1:5b:24:23:fe:ba:da:28:
                    d1:28:25:2d:90:d1:a9:a2:bd:1e:ce:26:e7:f7:e6:
                    77:1f:f9:b5:a2:cb:37:b7:0d:67:e2:c2:ef:7d:55:
                    e8:12:df:ac:2a:2a:db:8c:26:69:2b:a6:06:fe:4c:
                    52:27:47:d5:28:c0:ea:5f:22:b8:c8:23:eb:e9:6a:
                    1b:e4:95:85:d7:14:4c:ce:47:d6:16:0e:b8:ab:c5:
                    d0:83:92:67:36:52:50:81:39:dd:df:cf:a4:8d:95:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:9A:FE:06:B3:A4:46:CC:07:4B:90:CF:EB:C6:65:96:39:26:38:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da3e6cad-e013-33e4-8d6d-49c8a181832f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:a2:8e:b8:9a:12:e9:9a:dd:87:bb:76:0d:a3:38:52:68:
         72:f3:a3:50:f8:df:18:8b:76:1f:5a:32:ad:26:7f:d5:cf:6d:
         32:3b:d3:cb:5b:0b:0e:5f:ce:b0:43:f2:58:3b:7a:03:1e:48:
         ee:9e:e5:d9:64:b9:29:53:4b:59:00:8c:36:0e:37:35:af:df:
         b0:79:be:a5:f9:99:3b:e4:21:14:0d:1a:8d:47:c2:9a:1b:ed:
         83:63:50:8e:26:fd:0d:c3:d1:3c:7e:b6:68:10:c8:7e:f5:5e:
         a8:d9:ba:f0:c4:ed:4b:98:c1:51:2e:56:be:1b:71:dd:3d:c8:
         38:99:4c:11:99:46:79:9d:b0:40:bc:d3:89:c1:1a:07:dd:fe:
         8d:8f:c3:57:46:cb:f3:4c:ab:fa:80:34:a0:fb:e4:a8:63:9a:
         b4:2d:62:cb:eb:2a:38:f3:3c:89:b6:9b:ba:da:c3:5e:c0:34:
         fe:0e:6f:fc:1d:ca:59:e0:83:8e:19:8c:bb:eb:c0:7d:c9:c8:
         4d:22:cc:00:59:a2:89:e8:e2:66:12:79:0e:64:dc:a6:47:79:
         17:e6:06:1c:51:a0:b5:f3:95:5b:4a:9f:5e:9a:21:7d:9f:2a:
         5a:4f:6a:cc:d2:b0:d1:56:e1:4c:ae:c6:77:d0:f8:e0:c7:9f:
         16:2c:7a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:35:56 2026 by rpki-client