Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e49075a2-df79-38bf-968f-d41599c10d90.roa
File:                     e49075a2-df79-38bf-968f-d41599c10d90.roa (raw, json)
Hash identifier:          5WIHqFfx+JkxJJGR9CEcNUq8ZOYQ8a1rLgRhIdeSHdA=
Subject key identifier:   A6:02:BE:2D:92:AC:27:A9:DC:CE:04:7F:ED:4A:B6:A9:F9:4B:B8:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE2210BEE7E851E3910C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e49075a2-df79-38bf-968f-d41599c10d90.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     10515
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e2:21:0b:ee:7e:85:1e:39:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=af355361-5f49-4a04-9b5a-3d2f3375fc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2a:fb:f7:bd:b6:3e:00:d6:1a:7e:9c:83:48:
                    64:9c:46:f0:5f:fc:8f:6b:5d:61:b2:ab:05:a6:f5:
                    51:16:1b:f6:90:96:6c:d8:e6:54:89:25:64:6a:cc:
                    53:4e:41:ca:eb:a4:35:d7:b8:17:92:75:83:0b:7c:
                    a2:2c:fb:5e:3a:78:55:3a:fa:1a:77:9a:a0:9a:aa:
                    ef:6e:ca:27:3e:35:57:fd:87:c2:12:66:a7:37:48:
                    72:89:33:4b:53:a2:82:bb:c9:c5:db:a8:6b:b1:58:
                    8e:df:f1:56:50:43:73:56:b9:b4:12:17:c7:e8:41:
                    57:17:1a:b0:18:9b:0f:30:59:34:f1:2d:b7:3c:a5:
                    14:4f:6d:d9:54:84:2e:55:c1:f2:63:ec:b9:8a:f1:
                    37:c6:2b:d3:2c:8d:95:74:a1:9c:ce:d9:e4:90:5b:
                    0e:f6:4a:d1:3d:92:ed:05:43:6e:50:e8:69:83:19:
                    7d:9d:30:76:a8:72:64:ce:cd:4a:98:d8:a7:6c:4e:
                    10:97:04:4b:28:d5:66:b3:c9:dc:c2:fd:88:83:ac:
                    f1:d1:23:e5:5f:4b:df:70:d3:46:61:e9:4d:db:4f:
                    30:51:59:a0:be:4a:4a:b0:4d:cf:6c:b3:2e:d3:58:
                    12:12:9b:f2:d8:3b:01:35:25:97:57:e8:a1:9d:73:
                    cf:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:02:BE:2D:92:AC:27:A9:DC:CE:04:7F:ED:4A:B6:A9:F9:4B:B8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e49075a2-df79-38bf-968f-d41599c10d90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:8e:b5:a8:95:97:5d:f2:ca:2a:d0:1e:cf:aa:d2:5d:2e:0e:
         27:8d:23:2c:3a:05:71:b6:20:24:38:45:35:20:6e:e1:12:78:
         9d:9c:58:20:ad:d1:5f:14:36:c3:8d:a9:b9:e7:88:d9:3f:ff:
         0c:67:be:5e:b3:c7:4e:00:5e:23:e6:64:83:fd:62:02:58:61:
         ab:70:9c:c4:eb:84:33:ef:89:b6:fd:11:56:f8:57:eb:9f:f9:
         70:11:99:f4:4e:93:8a:98:2e:78:96:1a:38:77:00:5b:0b:20:
         cf:7a:c6:fa:b1:9b:00:03:80:04:40:20:38:a8:89:c2:bc:15:
         ed:36:0d:e1:ab:58:9b:fc:88:b1:42:05:26:a9:c5:2d:ec:74:
         57:7a:ff:08:4a:1f:60:0d:bf:70:02:3f:46:a1:1c:6e:de:02:
         81:62:15:21:f4:99:e3:c4:d5:83:46:2b:bf:e5:f0:e6:47:f5:
         e9:8d:24:68:b5:52:dd:dd:28:91:d2:1f:61:df:03:aa:74:f5:
         84:6d:ab:2c:56:ee:6f:b8:66:d9:48:9f:2b:32:2f:d7:c0:a8:
         86:d4:4a:da:17:da:d0:52:6b:7d:76:7f:7d:ee:2a:18:a9:6d:
         d0:2c:c7:c6:c5:47:c0:e8:d1:73:6b:83:a0:fe:38:c7:d9:77:
         13:7e:1a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:44 2026 by rpki-client