Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8d12779-c45c-3a25-bfe8-fef6b75358f0.roa
File:                     f8d12779-c45c-3a25-bfe8-fef6b75358f0.roa (raw, json)
Hash identifier:          IetTBkqX2HEucGps9L3bC7l41S7245YPeg3JOwwfZEU=
Subject key identifier:   EB:51:FC:4B:92:B1:BD:4A:9A:BE:D5:BD:9E:CE:37:DC:55:56:26:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE6F47EF75EA712083F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8d12779-c45c-3a25-bfe8-fef6b75358f0.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     397203
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e6:f4:7e:f7:5e:a7:12:08:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=527f2a2b-8eb2-4b0b-8c11-813b0f0c34b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:c1:70:04:67:32:43:2d:65:06:a9:fe:6f:
                    53:ac:31:fd:b2:54:84:88:72:e9:fc:ad:a2:0e:2e:
                    03:37:9b:52:8b:03:08:a7:b7:25:df:4a:25:96:db:
                    1a:5b:dc:f5:c5:a3:5b:94:43:91:fc:6d:7e:43:c3:
                    c5:c5:64:6b:15:19:1f:f1:57:a4:25:da:de:a8:e4:
                    f3:63:94:07:2a:ac:f8:2d:cc:9c:3c:37:29:64:27:
                    35:81:11:16:5b:49:30:39:b6:9c:eb:60:0c:07:64:
                    21:94:11:77:8c:ae:42:cd:7a:f6:96:23:80:f1:b1:
                    99:34:a3:6a:aa:2a:ec:50:b5:44:32:a9:fc:15:3a:
                    79:e8:81:47:95:1d:47:ac:82:8f:13:3b:18:d6:57:
                    5a:10:5a:02:8c:b4:74:d0:94:70:39:4b:bb:84:7f:
                    db:49:d5:8e:20:ce:04:44:22:a6:f2:5d:76:f0:02:
                    44:25:9a:2a:31:cd:c2:09:d3:3a:45:0b:73:ae:a3:
                    83:06:51:32:f4:e0:41:57:b6:2b:b9:cf:25:7e:a1:
                    d3:8c:1e:97:db:7b:ef:df:a9:d7:e1:1d:9b:57:13:
                    f7:d6:b5:87:03:b7:d0:04:62:2b:9b:41:e0:48:ce:
                    07:27:0a:3f:e1:bf:35:8e:41:4b:60:1a:b8:e9:45:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:51:FC:4B:92:B1:BD:4A:9A:BE:D5:BD:9E:CE:37:DC:55:56:26:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8d12779-c45c-3a25-bfe8-fef6b75358f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:6c:75:19:b6:2a:ee:64:17:79:bb:e1:d3:7b:e1:21:14:25:
         fe:a0:37:b7:0e:f9:b8:f9:18:cc:85:3d:52:86:ce:e4:bd:f4:
         15:8d:57:5e:e0:6a:a5:24:8d:99:29:c8:02:e6:bc:e5:d4:fa:
         85:b5:ec:a9:6a:5a:83:59:4b:54:04:01:23:90:7d:9b:b8:c0:
         30:44:fe:99:e3:7b:20:a4:09:da:f9:2a:15:78:dc:b4:0a:75:
         87:80:7f:21:f2:62:9a:c4:f4:a6:36:19:46:fc:82:f0:77:5d:
         a6:7f:52:d1:2d:f9:6b:71:9a:a0:b9:fa:38:be:fe:33:8f:fb:
         cd:b4:b4:56:b6:f7:e2:04:93:35:4e:93:a9:53:42:a9:bb:68:
         17:4c:f5:5f:dc:35:7c:dd:ef:05:25:65:65:59:89:c6:46:93:
         e8:3c:a8:04:3f:7e:e0:f1:52:b0:2e:3b:e9:d4:08:af:76:ac:
         ab:07:38:55:00:89:0a:59:d3:aa:96:6a:ea:8a:fe:8b:18:40:
         3e:03:9e:76:cd:ce:aa:68:0f:d2:08:f9:df:a4:e0:a3:5c:25:
         0c:c7:53:56:7d:bc:57:16:f6:cb:df:92:76:32:75:47:47:07:
         8d:f5:96:6e:ee:9b:2a:8f:00:55:ce:3b:90:25:07:42:1f:6f:
         ed:37:77:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:55:55 2026 by rpki-client