Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3da728f0-1645-3bbf-8faf-ded106d4509d.roa
File:                     3da728f0-1645-3bbf-8faf-ded106d4509d.roa (raw, json)
Hash identifier:          bYex5CUnTGdg5sMZSB69sXlbE/QxZFw8i82EqBcPWCM=
Subject key identifier:   19:A8:2C:F9:45:7A:28:96:9C:7C:0D:3B:BA:69:95:C2:AE:18:B2:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA790A6D5A5AD280D86CE6BE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3da728f0-1645-3bbf-8faf-ded106d4509d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36618
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:a6:d5:a5:ad:28:0d:86:ce:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=00d5a400-ba05-425b-8369-e481ce444f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:41:41:b7:33:d3:57:b0:6c:8f:7c:03:6f:7a:
                    2e:6b:83:3f:7d:49:dd:00:a7:c1:9e:f2:31:f3:8a:
                    24:8a:69:b2:3b:a5:24:a7:e4:85:0b:67:67:80:61:
                    e3:d7:84:28:dc:37:92:e8:a2:87:4e:ef:6b:e8:cf:
                    da:69:51:db:ba:94:55:98:8f:35:05:88:26:fd:77:
                    3a:37:9c:64:a1:39:e6:e4:7b:ea:cc:67:ca:ec:9b:
                    0b:d5:73:c8:6b:82:c5:31:ca:a8:4a:b1:e5:01:bc:
                    31:de:0b:d5:ba:cf:e8:38:5a:b3:7c:f8:d9:73:a3:
                    8c:72:12:e6:87:7d:15:32:6c:43:ad:87:bb:04:78:
                    95:c7:6d:3b:c3:96:2c:51:ce:92:5e:72:55:fd:c3:
                    49:12:f1:02:de:a5:4f:c3:b1:a4:73:1d:44:76:cc:
                    de:54:38:83:7e:03:59:2c:3a:ed:77:9a:c1:7b:ae:
                    f6:61:8a:60:33:fb:e5:da:11:a8:d1:b6:3f:98:ec:
                    00:62:30:e7:3d:d1:39:79:d5:78:33:74:7f:13:b5:
                    27:3e:1b:56:25:c7:b8:24:ed:99:9f:a0:89:2a:cf:
                    1d:2a:a8:93:de:0c:45:66:b0:50:05:5b:fa:e3:af:
                    a0:de:1c:f6:3a:ab:98:62:db:0f:9e:e9:6c:51:78:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A8:2C:F9:45:7A:28:96:9C:7C:0D:3B:BA:69:95:C2:AE:18:B2:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3da728f0-1645-3bbf-8faf-ded106d4509d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:bc:a4:18:e5:cc:e0:74:02:5a:82:35:d0:fa:7a:20:69:d6:
         69:08:69:81:4a:bb:27:36:0b:0f:bd:b4:78:50:5f:36:e2:b6:
         1c:a8:01:a3:11:43:2b:c8:98:8f:33:29:ae:dc:8a:fb:54:4e:
         a2:d2:dd:e3:5b:bc:2f:b4:57:cf:04:47:a2:34:66:c7:7b:78:
         46:5a:69:56:f1:50:91:fd:4d:c2:32:70:b7:09:9d:d4:e3:90:
         4a:c4:eb:75:5b:66:25:d2:64:23:92:3c:ef:36:3b:f0:4e:5f:
         6d:45:64:1f:8f:2c:54:8d:7d:4c:c4:b9:8a:17:f6:58:d6:5c:
         40:6c:ab:ff:ca:6a:70:aa:ed:22:8e:f7:3f:91:d4:ca:01:9c:
         e7:9b:23:db:cb:a2:b9:bf:b8:de:a4:0c:c6:55:37:a6:e1:7f:
         6e:b5:00:5a:c4:35:c9:9b:65:ee:37:bb:ad:f1:60:15:f3:19:
         5d:48:02:e6:34:98:f0:1f:08:0e:04:d3:68:e8:d9:ab:b8:a8:
         d6:fe:b8:7d:fb:24:7e:e9:f6:4b:20:d1:5f:6b:13:e5:09:07:
         f4:d2:d6:59:0a:b9:cd:d5:c7:3d:17:e3:61:53:b6:22:29:c9:
         eb:bc:c4:3c:93:49:d3:fc:01:3f:5d:02:42:72:23:8d:57:b3:
         8a:5c:2b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:21 2026 by rpki-client