Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e09fa7e6-a416-3c4a-9571-b496a9189849.roa
File:                     e09fa7e6-a416-3c4a-9571-b496a9189849.roa (raw, json)
Hash identifier:          R1PbU7Hbsh+5oVrOiR61SpfU9lJBYqY+cAcRk0kmG/U=
Subject key identifier:   F3:03:4C:5F:24:59:16:B5:D6:FC:0A:B2:AE:FF:B6:56:94:4D:A6:E6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAF865CF1C7DEECE1B1D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e09fa7e6-a416-3c4a-9571-b496a9189849.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396580
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:f8:65:cf:1c:7d:ee:ce:1b:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=1ccff361-5e5c-4781-834e-c288e75f1d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:30:43:9d:5e:db:bf:24:3f:d7:11:59:2d:53:
                    14:1e:35:2b:f0:15:9b:86:ec:78:cd:f8:f3:c1:0d:
                    c4:29:bf:3d:59:8b:ed:18:6b:ec:f3:51:70:47:27:
                    f1:a1:a6:02:75:73:c0:cc:1f:95:32:5d:4c:9c:8f:
                    a7:ef:fd:d0:c0:94:8b:f5:fd:37:89:df:7c:32:82:
                    c4:40:89:01:56:5d:b6:3c:c6:0f:96:57:17:bb:d7:
                    19:c5:8b:58:a3:19:37:be:c5:35:e9:e5:89:19:20:
                    cf:15:3b:8e:68:cc:10:df:71:d7:42:62:e3:d8:48:
                    6b:a8:7a:46:14:6f:fe:fb:27:15:54:24:63:f3:fd:
                    83:f9:d5:00:1d:3d:7d:f5:ec:74:6f:fb:d6:73:e1:
                    46:18:73:47:21:50:f3:71:27:11:b3:66:13:28:35:
                    93:2f:ff:e7:47:bb:4f:c0:03:17:a3:72:7a:ce:31:
                    f7:e4:31:fc:f5:0b:f6:b4:b8:82:02:17:15:12:ff:
                    23:42:68:cc:4e:b4:4e:64:9a:2a:f7:5d:19:af:33:
                    5b:92:05:1b:85:22:a5:13:1f:d4:85:59:18:44:4b:
                    1d:b5:4d:79:3f:bd:73:4d:ac:e8:5e:06:c0:60:86:
                    e8:6f:d2:46:99:01:ff:61:e5:fa:ef:07:86:6b:5b:
                    e7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:03:4C:5F:24:59:16:B5:D6:FC:0A:B2:AE:FF:B6:56:94:4D:A6:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e09fa7e6-a416-3c4a-9571-b496a9189849.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:e9:be:a4:53:29:b7:a3:d0:a1:91:3d:3c:4b:54:d2:16:ed:
         cd:e3:b7:07:80:fa:62:7a:5d:9c:d4:ad:57:1c:fb:fb:68:c0:
         9a:9a:8f:cd:58:d4:5e:be:88:35:42:60:00:3a:5a:f1:c4:36:
         ad:81:76:1d:48:db:1c:e4:88:a0:21:ff:8c:4b:8b:fe:54:9a:
         15:31:16:41:13:a4:a0:88:0e:e0:ea:1f:c4:d2:f9:ab:1b:23:
         d8:a8:36:c5:07:3a:0f:5d:3c:67:d7:7c:0f:e6:04:46:38:12:
         2b:ba:43:4d:1c:2f:da:05:81:d0:15:0b:5e:34:d2:33:26:66:
         39:66:ee:09:26:56:14:28:41:a5:06:46:6e:a8:b7:d2:49:36:
         94:30:46:fc:3c:1e:df:2f:5a:2b:7d:f2:98:fc:6b:e0:8e:01:
         80:f2:67:d3:6b:bd:f7:80:04:e0:8b:74:f4:81:02:33:96:7a:
         84:8b:58:55:71:6a:be:5a:8a:d6:f6:a4:25:9e:1a:ee:c2:e3:
         16:76:7f:7a:7c:98:8c:a5:cf:97:c6:51:82:44:4e:d9:ce:ab:
         d7:2a:2c:24:d3:59:37:2b:61:ee:d2:2e:7a:d0:15:33:db:65:
         2c:51:76:10:43:ca:07:c9:c6:69:a9:a1:ef:bb:ee:d8:81:9e:
         6b:ba:49:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:22:25 2026 by rpki-client