Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32286a98-cb1f-37f8-b84f-1c8a96e382cf.roa
File:                     32286a98-cb1f-37f8-b84f-1c8a96e382cf.roa (raw, json)
Hash identifier:          bPvFY3ouQ8fHflPSUiRlangANE1vvhgtv1FZXZor52w=
Subject key identifier:   AF:12:5B:DC:FC:EF:A4:A2:98:DD:FE:E9:8B:4D:35:41:8E:53:33:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB57C4FD9B9231F0F2021C780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32286a98-cb1f-37f8-b84f-1c8a96e382cf.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     396609
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:4f:d9:b9:23:1f:0f:20:21:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=5f9fab08-6582-4b90-a8e7-0da2bd1f594b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:23:46:a9:99:14:11:8e:55:1f:6a:80:7c:f8:
                    25:ae:e4:3b:dd:9f:5c:1e:30:e7:28:97:c5:87:52:
                    c4:4d:ad:64:ec:c0:5f:06:f6:b0:7c:14:1d:f3:12:
                    8f:6e:6e:4a:4a:dd:d5:9b:e9:ac:e2:59:ca:21:7d:
                    57:7d:32:d1:ed:f2:37:ee:a0:cb:4e:b4:ad:c9:bb:
                    19:72:7a:d4:cb:21:2f:81:62:49:e5:27:44:2c:a1:
                    8a:dc:35:1f:3e:bf:7a:3e:bc:a9:2a:e9:73:72:a5:
                    c8:d9:cd:eb:f8:1d:5b:85:54:44:e5:87:12:f8:51:
                    55:c5:9e:18:1f:a9:e6:b9:ad:ab:3d:89:a5:ee:9c:
                    59:92:77:c4:9d:42:b0:0e:d2:25:52:cd:cb:d1:02:
                    99:a3:b5:bf:f8:2e:42:4a:b9:57:da:9b:0e:ff:ae:
                    e4:36:63:cf:37:e8:7d:a4:92:91:bd:b1:b0:12:f3:
                    cb:f3:48:ed:8d:6b:0d:c4:cc:03:c0:67:ca:21:c8:
                    24:30:2d:c4:a9:75:50:f7:7f:19:1a:22:44:c7:09:
                    dd:24:b8:ca:d9:4b:d2:ec:4b:3e:4d:60:a1:26:de:
                    d2:c8:92:36:2c:a4:e9:46:8a:fd:6b:c8:b7:f0:1c:
                    9c:17:e2:af:44:bd:92:9e:f7:0b:ae:2f:72:51:5e:
                    fe:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:12:5B:DC:FC:EF:A4:A2:98:DD:FE:E9:8B:4D:35:41:8E:53:33:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32286a98-cb1f-37f8-b84f-1c8a96e382cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:13:92:6b:6c:a0:a0:e2:af:fc:68:5f:ef:13:05:75:87:98:
         40:ce:04:0c:d5:98:82:07:eb:74:83:60:23:08:7a:5c:5a:1b:
         d9:04:78:bb:2c:95:9a:23:50:a4:fb:52:6c:2a:10:84:95:18:
         08:0f:a8:0d:d0:f2:33:6f:6f:79:1e:53:17:f2:d8:12:83:74:
         20:3f:f7:15:12:03:35:66:2c:af:17:cd:bf:a1:75:f5:b2:b6:
         46:7e:3f:ca:bb:81:60:dc:e6:d4:f9:cf:ff:fe:47:25:ab:1b:
         87:29:b8:41:66:64:d9:ca:24:ad:5c:da:a2:fe:d8:c6:92:ba:
         05:ba:29:ec:ac:0e:8f:81:26:97:f9:35:d9:3a:be:a0:ae:e3:
         60:be:68:3d:00:84:b6:04:a4:42:4e:dc:92:56:db:07:9d:c9:
         52:9c:78:cf:b8:64:17:cc:bd:ea:4e:19:ef:f9:8c:c8:c4:0d:
         cc:80:ed:84:74:46:df:ef:a0:a8:26:62:df:3a:a3:c1:29:fb:
         61:f8:4d:a6:ba:f6:f0:c5:61:0e:09:5d:8f:04:44:36:7f:10:
         c4:f1:26:78:e5:3d:5a:dd:c9:e9:54:ce:aa:4d:8c:38:13:90:
         65:3e:ab:5d:92:9e:ab:bd:94:0a:70:46:a7:07:37:e5:0d:bd:
         38:a9:6e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:31:15 2026 by rpki-client