Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/377f1a63-1938-3395-9e90-f68608283f96.roa
File:                     377f1a63-1938-3395-9e90-f68608283f96.roa (raw, json)
Hash identifier:          Uj9J3Wm+c6Sva+Ms31eOlPlsiSGmlPJYwqNkAwVpN+8=
Subject key identifier:   7D:A1:CE:CA:16:0D:1A:1B:8E:BF:12:8C:93:AD:85:B6:4D:AC:D9:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11AB82C8CB3C7C99D28E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/377f1a63-1938-3395-9e90-f68608283f96.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     397208
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ab:82:c8:cb:3c:7c:99:d2:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=34a1f3f1-ea6a-4165-a934-4daaea7911da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:23:5d:39:b5:60:0d:2d:6a:ff:8b:1e:f9:79:
                    6f:74:86:a4:c7:93:7a:53:e7:58:f8:43:c8:64:26:
                    47:e3:97:bf:5e:d7:a2:44:44:cf:29:c7:7d:9c:0f:
                    04:b2:fd:a4:bf:bd:1a:fe:3f:5d:4e:36:a4:bb:64:
                    eb:6b:08:fb:3b:54:11:a6:70:ad:47:41:3b:15:5f:
                    d2:ed:4c:9f:be:ed:44:4d:5f:54:1e:1e:1f:92:e8:
                    17:77:f9:c6:30:81:64:f6:cc:4d:0f:bb:30:5e:e7:
                    91:f1:f1:2c:bf:91:21:a9:45:bb:3c:be:d3:62:2a:
                    6c:33:63:3b:ae:9e:ef:32:c7:21:49:b5:2f:8b:43:
                    02:d0:8b:cd:3d:34:7f:55:d8:c9:62:ed:e5:c7:78:
                    23:8e:ab:b8:9a:2d:bd:4d:89:98:b9:29:d2:b7:5e:
                    69:6b:d8:9a:ae:f2:92:48:e6:25:59:35:81:7e:de:
                    01:72:ac:df:92:bf:75:47:1e:aa:b7:9c:9e:7e:11:
                    c9:45:23:33:df:f4:70:e8:89:23:a8:d3:cc:89:67:
                    69:9d:2e:71:d7:0d:62:1d:63:9d:d3:49:ba:1b:e0:
                    f7:99:40:7c:b1:95:98:11:3d:c5:41:7e:f3:05:55:
                    91:d5:f4:ec:ea:00:11:fe:b2:c3:3c:dc:a8:65:4a:
                    78:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A1:CE:CA:16:0D:1A:1B:8E:BF:12:8C:93:AD:85:B6:4D:AC:D9:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/377f1a63-1938-3395-9e90-f68608283f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:c9:29:91:22:fd:95:d5:ff:b5:e8:6f:0f:d6:42:4c:eb:
         0d:37:bb:b1:3c:cf:a4:3d:be:a0:14:ec:91:9a:cf:e9:9f:b0:
         f3:8f:06:86:a6:59:1c:d4:24:95:85:ed:ba:4d:6f:14:9a:34:
         2a:cf:b1:3b:3e:b9:30:47:c8:4e:ad:eb:52:a8:70:ca:e1:b1:
         97:78:83:a4:19:d9:61:e8:05:74:70:51:36:bd:15:79:96:88:
         6f:2f:73:e1:56:00:ae:c6:72:d4:99:af:f4:d0:62:73:9d:b5:
         7e:b5:3f:51:9f:a6:b2:6b:e2:b7:28:12:92:16:b0:d4:24:71:
         c0:5c:94:8e:ac:f4:1d:a0:76:52:50:74:e9:61:ae:1d:60:49:
         bc:3a:d9:e2:d5:b9:54:73:f9:fb:f9:d1:a3:81:9a:09:f7:07:
         79:08:f8:ad:9e:51:43:20:94:79:7c:3a:84:54:e9:d4:a9:8f:
         8c:7e:23:43:1e:d5:b8:18:fb:86:a1:b9:56:70:ac:eb:fb:55:
         15:db:71:db:cf:f2:8b:88:74:35:79:50:5c:28:a2:fd:75:cc:
         06:4b:db:59:7d:d5:e2:01:fc:21:64:73:95:45:71:cb:18:65:
         8d:1d:4a:36:6c:cb:93:2f:31:15:59:5e:d6:45:76:28:e0:e4:
         4a:ae:5f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:08:16 2026 by rpki-client