Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2a93c40-be74-3273-b925-38e426b8fb3d.roa
File:                     f2a93c40-be74-3273-b925-38e426b8fb3d.roa (raw, json)
Hash identifier:          VKkBgMWHsZjRCNmhW8t8RpaFrt7jfri2mmJegwvwkqA=
Subject key identifier:   38:07:C6:8C:F7:9F:0C:E6:57:61:F0:C5:82:9F:02:B0:C6:54:A9:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79D4621C23962E33F4B9B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2a93c40-be74-3273-b925-38e426b8fb3d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     211369
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9d:46:21:c2:39:62:e3:3f:4b:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a4ae2264-9654-43f4-876b-83dd514b4ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:ac:76:c8:88:29:25:63:d3:ca:1b:15:69:
                    70:1f:dd:d9:f6:19:bc:33:13:93:9c:70:63:2d:88:
                    77:dc:61:46:71:fb:2e:01:be:6a:aa:d8:ef:f2:2d:
                    c5:5d:2f:ee:74:4d:d1:d9:94:8b:b1:98:9c:47:8c:
                    11:21:63:f5:fd:82:ef:5a:ba:96:c7:4e:6c:15:4e:
                    fa:0c:a1:d0:d0:da:ff:41:68:fb:b9:18:d7:76:f7:
                    4b:b3:35:e5:38:bc:52:be:8b:80:74:17:66:37:b9:
                    dd:06:e5:71:e4:b6:37:7e:5b:3a:76:01:91:ff:8a:
                    d3:8f:ed:a5:29:0c:bc:5d:55:9e:66:93:8d:d2:c9:
                    1e:ba:d2:9c:37:ba:08:6c:0c:36:c4:b0:30:54:df:
                    25:b4:3e:e8:5f:85:ca:f2:b1:65:10:92:33:56:b2:
                    d5:c2:b6:2e:67:0d:c6:c9:6f:e1:3c:9a:e6:66:02:
                    0d:c3:53:27:80:57:d0:49:e1:95:5a:76:d2:50:d3:
                    d8:17:19:41:aa:25:93:ea:40:13:d1:e2:6b:5a:ba:
                    f7:e4:31:ec:a9:25:47:de:bd:22:18:cf:4d:fa:ba:
                    41:0f:ee:78:b6:31:cb:58:66:c1:9d:84:25:17:21:
                    69:f5:09:a6:27:60:be:b4:d6:44:45:61:b7:52:4b:
                    b0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:07:C6:8C:F7:9F:0C:E6:57:61:F0:C5:82:9F:02:B0:C6:54:A9:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2a93c40-be74-3273-b925-38e426b8fb3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d7:e3:4e:d5:43:3c:de:9a:db:cb:c6:27:1d:65:02:a5:97:
         58:ed:ba:28:98:42:2a:ba:e7:c9:96:a6:32:3f:61:1e:67:2a:
         5b:7b:b1:f0:f5:a3:5e:8d:8e:dd:38:fa:48:48:05:b3:9b:be:
         1b:d2:7c:54:6f:0d:87:34:70:cc:84:4d:1d:5d:64:f6:5f:04:
         c3:00:78:9a:3f:96:41:47:63:aa:df:3b:0e:f4:dd:17:e1:e8:
         63:60:71:81:d8:70:13:78:50:a2:50:3a:a2:d5:a1:89:99:12:
         d5:eb:85:84:b5:00:8e:75:a3:3f:cc:5c:45:1d:e0:91:b5:99:
         85:91:a7:8d:2e:bb:7c:af:7e:a9:c8:6c:cd:d9:28:91:9d:87:
         39:e4:b5:c2:41:24:64:d9:e4:67:e7:85:66:84:d3:0b:af:d1:
         22:c2:e0:8e:bb:56:d5:9e:60:36:01:5d:1a:6e:14:88:53:66:
         d0:75:c0:a6:8d:20:9a:e9:ec:86:fb:89:98:e9:46:25:49:79:
         10:e6:77:7e:ed:28:d0:34:eb:2d:1f:1f:bc:18:0a:64:3d:bc:
         48:bd:50:26:6c:34:84:f7:61:18:7f:2d:c3:9b:2c:52:b2:3f:
         8f:78:b5:f0:a5:07:32:16:8c:5d:ad:ea:6b:43:a3:97:3d:8b:
         c9:28:5d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:20:41 2026 by rpki-client