Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36ded8c8-ecff-3846-a6ab-8940e8195e7b.roa
File:                     36ded8c8-ecff-3846-a6ab-8940e8195e7b.roa (raw, json)
Hash identifier:          VLxVv8xP0vbJWZAzVtFgxRB/ji6HummEROfdH8ThjXE=
Subject key identifier:   8D:18:79:00:18:0F:1F:9B:1B:D6:39:E4:D8:4C:D4:60:09:AA:6E:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78FA90ADCD5FCA42DBEEC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36ded8c8-ecff-3846-a6ab-8940e8195e7b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397199
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:a9:0a:dc:d5:fc:a4:2d:be:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=15c6ef9c-a205-4603-a1f9-8b83f632345e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d1:05:e2:4c:9b:14:70:78:df:63:ce:67:5b:
                    d6:d6:08:f0:b9:a0:5f:50:14:66:42:fb:06:73:77:
                    57:18:01:a0:07:56:ed:34:79:ac:2f:0e:b3:0a:4b:
                    37:26:69:2e:cb:bc:58:8f:57:4b:b3:b8:c6:90:b1:
                    80:eb:7e:1e:50:c5:b5:43:77:83:e4:2d:79:39:05:
                    2b:a6:f1:75:3f:ea:ed:c8:2e:88:95:38:77:e7:f4:
                    b4:23:2a:be:6f:41:b2:f0:08:cc:5c:d2:42:93:9f:
                    5f:b6:a8:ba:3c:ee:d7:68:5d:05:8f:bf:54:58:ae:
                    05:45:e7:4e:68:ee:20:8f:fb:48:44:65:14:6a:b1:
                    9a:56:26:06:80:4a:f8:28:70:da:14:e0:31:6b:12:
                    ee:72:c9:53:ce:72:4e:8e:9c:e7:b1:79:92:e5:d5:
                    39:d1:e0:0a:a1:f7:9d:90:1e:0d:de:e7:ca:d8:b7:
                    b8:08:e9:a1:70:d9:b1:e9:d8:40:46:ee:1d:09:ee:
                    18:2e:bc:05:35:e4:4b:4c:a7:b7:88:52:ba:80:8c:
                    43:d4:a5:dc:1f:0f:9b:a2:b2:68:ca:dd:f7:5c:21:
                    d7:16:fa:4f:d6:15:ee:d7:4c:cf:e0:6b:6f:69:34:
                    9c:99:f6:ef:73:44:fb:48:56:23:f3:8a:10:ad:77:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:18:79:00:18:0F:1F:9B:1B:D6:39:E4:D8:4C:D4:60:09:AA:6E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36ded8c8-ecff-3846-a6ab-8940e8195e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:db:38:f3:97:36:4c:48:f4:db:d5:87:fc:82:e6:69:0f:8e:
         3c:a4:1b:4f:f5:54:77:f2:57:88:f6:0c:32:3b:b5:3d:03:94:
         e2:8a:10:b3:6e:0b:a9:cd:d1:55:af:2f:6d:94:e2:11:73:a9:
         81:6c:2a:d1:4b:dc:12:9c:70:14:bb:cc:f7:c4:c7:0a:5a:e5:
         85:5b:59:91:df:ce:71:56:31:38:4d:da:86:0f:d1:60:51:a5:
         c1:77:c6:7c:6e:a1:09:ce:9b:11:08:17:22:a3:ce:66:18:42:
         a0:ff:5b:ee:7c:40:c3:fc:19:07:50:26:d4:83:2e:dc:86:bf:
         e7:95:99:90:a3:a8:a3:0f:b1:bc:0c:d1:f8:b6:06:49:51:6d:
         f5:20:2c:42:7f:8b:c5:bb:69:e4:ff:62:22:78:1f:15:e0:91:
         c9:1d:ca:4b:69:c9:7e:65:3c:c1:4e:83:6b:36:9d:ec:22:4d:
         cd:ed:52:60:a5:2e:c4:26:cd:1d:36:57:0d:76:03:9b:86:60:
         ae:6e:26:b6:a8:6b:11:69:f9:d4:ff:7e:90:ef:ce:65:1e:c6:
         52:70:41:81:f3:bd:36:14:63:22:25:9a:59:ab:05:51:50:ab:
         80:a6:29:67:95:e9:3b:9c:ab:2a:8e:33:44:92:5e:1a:cc:86:
         63:b5:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:20:54 2026 by rpki-client