Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da66aa77-9d96-3cfc-ab2f-e6d38ea65219.roa
File:                     da66aa77-9d96-3cfc-ab2f-e6d38ea65219.roa (raw, json)
Hash identifier:          6vHuM64x0DMyExjgeYHi1L2WAAHlA07+0n5/yhxj4lc=
Subject key identifier:   C0:1E:73:A4:05:13:C5:6F:4A:15:E9:E1:71:4F:34:D8:0F:12:FC:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E13198D8EF086E7D444386F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da66aa77-9d96-3cfc-ab2f-e6d38ea65219.roa
Signing time:             Fri 05 Jun 2026 21:00:12 +0000
ROA not before:           Fri 05 Jun 2026 21:00:12 +0000
ROA not after:            Thu 03 Sep 2026 21:00:12 +0000
asID:                     396587
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:13:19:8d:8e:f0:86:e7:d4:44:38:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 21:00:12 2026 GMT
            Not After : Sep  3 21:00:12 2026 GMT
        Subject: CN=40417949-c5be-4eb0-86d5-d2067df61b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:56:a3:ad:90:93:53:49:da:55:2f:ff:59:09:
                    6e:0e:3a:a6:00:10:8d:69:27:e5:07:81:69:38:d4:
                    33:39:a0:d5:59:1f:f6:7b:a3:be:be:73:3d:ea:9d:
                    2d:ba:46:a5:ab:58:c7:b3:0b:53:42:78:32:e8:bd:
                    df:f2:33:81:f0:6f:85:8f:e7:96:c3:25:36:69:51:
                    56:d4:6d:41:97:1d:4a:41:70:92:ae:57:e1:e1:91:
                    ad:07:a0:d9:27:12:7a:fe:62:a9:47:aa:e7:f3:a9:
                    55:e7:10:5e:dd:57:c2:92:10:82:06:46:1f:b3:e9:
                    ad:91:e8:82:bf:26:1a:7a:ee:39:bb:1c:f0:e9:1e:
                    eb:e4:88:34:32:ac:62:74:29:db:43:df:72:78:2b:
                    3f:b8:89:74:ff:cc:41:9e:f2:00:ab:36:3b:dd:96:
                    74:d0:d2:27:1f:66:52:46:0c:d9:a3:81:ac:b8:6f:
                    1d:62:53:f3:d2:0b:87:ef:8c:cd:06:cb:4b:5d:85:
                    b7:2a:85:83:e4:71:af:58:fa:be:44:ca:27:ed:60:
                    d6:33:1c:9a:5b:52:15:7a:8e:86:38:3d:d4:7e:a1:
                    59:7c:b8:89:2e:b5:10:be:23:b6:14:06:f5:57:41:
                    1b:1c:e2:a9:5f:ca:97:08:8b:68:5e:f9:71:d1:0d:
                    a0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1E:73:A4:05:13:C5:6F:4A:15:E9:E1:71:4F:34:D8:0F:12:FC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da66aa77-9d96-3cfc-ab2f-e6d38ea65219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ef:82:e3:bb:c3:54:6c:68:57:73:3c:37:07:2c:fc:c9:d6:
         a4:8f:83:4f:d2:ea:eb:b0:91:f5:f9:bc:70:60:30:e1:32:7d:
         29:5c:17:a2:6a:68:2a:a6:1d:c2:3d:6c:21:ee:bc:31:9b:9f:
         20:2d:d7:42:72:79:39:3d:e9:96:0c:44:12:00:19:07:a9:e9:
         ed:2c:c4:e7:71:aa:09:a7:3b:a5:66:7c:31:18:52:0e:6d:b9:
         b7:4f:3f:f1:6b:75:b5:37:3d:3d:cb:6d:1d:69:f5:ec:ed:f2:
         0f:e2:0f:6c:67:c6:de:46:44:c7:de:bb:9c:bc:87:b8:cd:3c:
         cb:f0:fe:47:fb:b7:1d:00:18:20:89:88:3e:4e:5e:3b:76:d1:
         08:5d:13:6c:3f:9d:cf:83:68:26:e6:29:b2:3c:5a:9b:f4:d9:
         e9:82:3f:f2:a3:54:86:91:13:af:5e:cb:b1:68:fc:c3:14:62:
         1c:64:44:37:93:94:65:32:e3:e1:79:2d:15:ba:6e:2c:8c:95:
         cf:06:29:85:cb:47:e9:49:00:73:3b:f9:a8:2b:43:4d:c7:40:
         de:5e:44:0f:99:01:a2:8f:d8:17:1e:60:8d:bd:d5:19:99:84:
         42:22:fb:30:f3:a7:0c:a3:6b:a7:a4:c0:e9:05:6e:7a:62:ed:
         8a:62:0e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:20 2026 by rpki-client