Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb925b8-9472-38ed-9531-a4d848bdb685.roa
File:                     ebb925b8-9472-38ed-9531-a4d848bdb685.roa (raw, json)
Hash identifier:          saSN+XW6kIVdp7hhjDopILyrf5Tb4wQsYbF6mZnVVcc=
Subject key identifier:   6A:FE:A1:5B:DF:2C:D0:ED:CF:65:DF:1E:DF:BF:18:94:3D:4B:77:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE15395C575034B98AB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb925b8-9472-38ed-9531-a4d848bdb685.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396610
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e1:53:95:c5:75:03:4b:98:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=10f52496-2d9e-4e62-84ae-b51c5fdbbd72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:15:47:8a:25:d6:3b:d0:2c:09:a0:c6:10:
                    34:2a:3e:9c:af:b7:c6:dd:7f:57:c7:47:d5:31:c7:
                    1a:09:06:4e:2e:0a:3f:9a:a7:0f:63:71:e8:05:5d:
                    ea:ac:46:bb:9d:d1:1a:3f:a9:98:9b:4d:8a:e6:ed:
                    66:a6:7d:ea:8e:04:98:54:2c:b7:de:7f:9f:85:09:
                    fe:13:98:d8:34:51:f9:6b:df:7b:24:02:04:75:c1:
                    92:1a:b9:de:86:0a:87:f8:a1:37:52:dc:b0:3e:fd:
                    98:05:7e:57:41:4e:5e:c3:f5:72:93:35:86:e3:4f:
                    63:1f:fe:10:24:85:1c:5c:00:72:54:fb:f1:ea:f0:
                    16:d6:6c:9a:ea:3c:8d:e2:99:0a:2e:1f:b8:6d:c8:
                    2b:d4:e7:c2:9b:4a:47:30:f2:e8:e1:96:79:d0:ce:
                    82:57:b4:63:0a:32:f0:56:5b:22:ca:2c:f6:41:b9:
                    0d:11:29:a5:c3:de:1c:98:aa:c9:ca:76:2b:fa:1f:
                    60:d6:b0:58:fe:1f:d8:c9:f9:83:26:a0:bc:be:69:
                    1f:2d:53:8a:cb:40:35:1c:9b:b5:cc:96:b0:43:d7:
                    ba:32:77:27:04:67:df:d9:0f:5b:5a:31:fa:4c:52:
                    0f:f3:03:9b:9d:83:79:a0:64:d2:45:df:f5:1f:c3:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FE:A1:5B:DF:2C:D0:ED:CF:65:DF:1E:DF:BF:18:94:3D:4B:77:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb925b8-9472-38ed-9531-a4d848bdb685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:21:4e:ea:c6:8d:60:10:7c:96:31:7b:e3:04:e6:cd:b2:a3:
         35:c9:4e:ab:9c:4d:04:ab:15:6b:9f:2e:fb:f4:35:5a:3f:16:
         0b:3f:45:97:f5:0b:c9:5f:5d:f5:7e:ee:e2:95:5f:5e:59:31:
         02:fd:36:71:0d:d1:55:b9:d1:a6:0a:2f:56:14:8b:45:4a:46:
         8d:94:9c:c3:df:97:06:05:df:b6:2d:5f:33:35:51:d0:1b:0e:
         3c:91:da:76:0d:3e:db:ae:68:a3:a6:a3:a9:15:a8:33:34:6a:
         fa:80:94:46:9b:ba:9a:b8:61:1f:cf:dd:32:ea:c4:89:4b:15:
         eb:85:10:89:87:39:9d:56:de:01:e5:eb:5c:2a:4a:e0:59:f8:
         49:8c:07:a7:59:32:e0:6b:8d:4d:a6:5c:a0:96:07:7d:00:b6:
         04:bb:e9:69:cb:db:84:6c:a7:f2:a3:83:4e:cf:76:43:7c:63:
         a1:39:f0:3d:f6:4d:51:85:ab:11:e3:4a:12:6c:2c:0f:86:c0:
         b0:80:8f:35:6b:a1:65:33:7b:6f:0d:59:94:a5:98:44:64:22:
         6a:b1:89:15:ed:ab:35:b8:6c:53:44:f7:a8:21:c5:7f:b4:66:
         88:00:0d:41:4c:a0:24:a2:80:39:a9:e7:85:ac:17:6b:ee:c0:
         b8:ee:78:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:25 2026 by rpki-client