Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fadc747a-bdd7-3223-9311-00d7a2a21f3a.roa
File:                     fadc747a-bdd7-3223-9311-00d7a2a21f3a.roa (raw, json)
Hash identifier:          DzBeAeB3XlrsM9EN4VCRvmLxlEMCSBFZpYxJTMQF2ck=
Subject key identifier:   2C:8D:DD:67:21:15:64:77:80:85:70:B2:5D:29:38:3A:9B:F9:39:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78F59E5D83CC98D23EC2080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fadc747a-bdd7-3223-9311-00d7a2a21f3a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396602
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:59:e5:d8:3c:c9:8d:23:ec:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3c11223e-fbc2-4118-bc4d-6fff9cc886ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:e7:bc:e5:f0:4e:fa:2c:ba:72:17:fc:67:
                    e3:8f:1c:d1:e0:e9:16:9f:bb:bd:2b:bc:16:a2:88:
                    c3:9a:1c:5a:cb:9e:9b:8c:70:72:13:2e:28:87:03:
                    2f:1e:d5:1e:3b:96:73:a1:1b:64:aa:97:05:69:7b:
                    ac:ac:52:15:ba:0c:50:87:7b:ef:34:da:3e:3a:78:
                    c2:9e:a1:08:40:ac:c3:39:11:2e:9a:8b:24:e7:17:
                    15:02:79:23:60:29:ef:03:87:65:27:33:d2:36:c1:
                    51:d0:36:c1:d5:ca:bc:55:f8:97:48:c6:e9:49:e2:
                    a5:35:d7:10:b9:20:8e:55:55:44:08:08:59:a3:30:
                    39:93:8a:ab:18:36:d6:06:e9:e8:d8:03:25:1a:30:
                    fc:fa:ef:c5:f9:81:a0:d4:7b:0b:37:d5:ab:79:ea:
                    f8:bf:03:cb:a7:69:2c:03:18:7d:ec:ba:90:74:84:
                    c1:e3:78:5c:78:97:3e:ca:12:42:2a:ad:d8:f1:6b:
                    80:83:45:35:45:dd:a3:f4:bf:d7:41:33:b4:4d:b3:
                    d3:e1:1f:47:15:f0:72:2a:d3:de:46:d7:c8:76:81:
                    de:e7:8d:f6:25:b7:1b:3f:63:a5:d2:3d:60:ac:00:
                    e7:91:e0:cc:b4:50:47:48:68:c4:26:1e:80:ee:3a:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8D:DD:67:21:15:64:77:80:85:70:B2:5D:29:38:3A:9B:F9:39:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fadc747a-bdd7-3223-9311-00d7a2a21f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:53:72:c0:bd:5d:5c:1b:f1:0e:43:b7:26:a6:a0:6f:6c:43:
         ba:ab:37:b4:6f:c3:31:dc:5f:0a:09:a9:0d:b1:a2:4f:b8:c8:
         bd:6e:71:1a:fa:e6:2a:c2:4f:4a:02:c5:45:68:e9:50:6e:48:
         f7:3b:11:55:06:54:b0:86:2e:56:7f:a8:69:77:7f:f9:2d:88:
         34:d5:67:b4:54:74:36:c3:90:2d:d7:e5:4b:89:24:e8:17:52:
         bc:04:88:d6:6f:c9:f7:e8:a8:69:a6:cc:4d:a5:28:e1:b8:4c:
         d1:05:a4:f9:6a:5b:45:f1:aa:b7:23:41:d5:dc:5f:32:c9:14:
         06:9b:51:87:97:29:fc:03:36:31:91:0c:78:75:68:e4:da:6a:
         0b:e9:20:bf:26:30:b7:31:8b:cf:24:87:51:e9:86:34:2e:d6:
         ee:78:f5:57:74:2f:e2:d1:36:90:5e:8e:cf:1e:14:04:8f:e5:
         57:93:e5:8a:fc:60:b8:83:67:6b:18:dc:97:51:e4:c0:2b:70:
         ed:c2:ab:27:16:2a:91:d4:70:35:22:dd:79:23:9a:22:a6:0c:
         9a:c7:7c:3f:8f:d6:d3:83:ca:cf:57:50:ab:c7:ea:93:7d:dc:
         04:4d:16:0b:62:82:67:44:d2:d4:05:09:b4:54:57:a7:6e:41:
         15:f1:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:55:00 2026 by rpki-client