Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/552b0b92-ea8a-3c12-a391-527f59741a4a.roa
File:                     552b0b92-ea8a-3c12-a391-527f59741a4a.roa (raw, json)
Hash identifier:          22hmj4bKzF5giaOJmXzyKCCUI+CnY2tDoCE7qKOApzA=
Subject key identifier:   47:7C:FC:E8:ED:38:AF:67:32:98:3C:17:72:7E:C9:06:90:82:EF:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB57C52D5001ACB3615D24000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/552b0b92-ea8a-3c12-a391-527f59741a4a.roa
Signing time:             Mon 03 Aug 2026 01:00:11 +0000
ROA not before:           Mon 03 Aug 2026 01:00:11 +0000
ROA not after:            Sun 01 Nov 2026 01:00:11 +0000
asID:                     397212
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b5:7c:52:d5:00:1a:cb:36:15:d2:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 01:00:11 2026 GMT
            Not After : Nov  1 01:00:11 2026 GMT
        Subject: CN=ea4644ef-0574-4a8a-9dd7-962855aa8e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:90:7c:bd:11:9c:74:57:b6:35:18:01:8f:88:
                    68:90:98:26:17:fc:63:06:c1:c5:c6:65:36:29:77:
                    92:dc:d9:a7:d7:9b:3c:6c:f1:94:0a:30:2a:8a:2e:
                    06:8d:59:66:20:5f:76:26:cc:c8:e4:66:96:ca:6c:
                    d7:35:6c:39:b9:e5:73:54:c7:7a:8f:2d:51:79:6b:
                    4f:14:23:63:04:8d:27:77:2f:9c:ad:79:10:10:ae:
                    ce:d5:f3:a2:59:e1:c8:50:0f:d4:93:f6:98:4e:48:
                    26:b4:b3:1e:8b:f2:62:2c:ed:b5:b5:9a:d9:22:de:
                    6c:44:02:5c:62:71:82:f1:d4:61:12:2f:15:e7:37:
                    dd:c3:ec:52:5d:03:5b:ec:eb:97:3d:3c:18:7b:f5:
                    64:5a:31:ce:98:95:27:c4:58:29:25:17:09:e1:7e:
                    74:c2:4a:38:cd:ca:fb:d1:31:2d:85:ea:f0:9e:57:
                    02:35:99:71:e8:98:ed:fc:69:73:29:80:fc:28:4b:
                    df:ac:82:b7:d6:fe:41:75:69:eb:2d:3d:fb:56:ce:
                    2b:bb:4a:49:ff:e7:b0:8f:19:0f:c7:e0:45:27:fd:
                    be:ce:c0:50:33:33:45:78:73:08:24:00:a9:3d:e4:
                    81:43:40:01:1e:14:ab:20:3a:6a:ff:da:4d:af:11:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7C:FC:E8:ED:38:AF:67:32:98:3C:17:72:7E:C9:06:90:82:EF:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/552b0b92-ea8a-3c12-a391-527f59741a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:25:a1:e3:63:1b:78:5b:c9:24:79:b9:ed:78:54:9c:71:7e:
         92:50:c2:f3:58:af:59:ea:7a:b1:ef:d2:91:e3:16:65:b9:18:
         10:5f:e6:60:d8:5c:49:ab:0d:79:91:4c:c0:1c:a7:cd:0b:02:
         be:02:ed:fa:ba:82:be:a2:db:3c:0d:93:9b:f3:ac:be:e0:dc:
         c0:23:33:66:82:85:9b:67:eb:4b:86:40:4c:26:b0:3d:1b:6e:
         dc:6c:0e:ab:68:a7:68:2c:e4:fb:5a:a7:c5:3c:08:bf:b9:09:
         d2:4a:35:46:ca:fe:ee:42:27:61:d6:e1:a2:2b:f9:90:1a:a8:
         a8:d7:cd:18:8e:71:1c:fd:4e:41:4c:df:0c:27:57:41:b8:4d:
         cc:f5:f0:6f:27:e6:bb:0c:87:32:37:9c:6f:18:f4:7a:3a:42:
         68:e6:5f:bf:34:7a:72:a3:bf:35:66:a1:a6:12:a5:9b:4f:5e:
         5f:e7:e5:2e:44:5e:a6:d2:07:9e:08:cd:f2:56:a9:4e:62:9f:
         e9:d8:d2:a0:d4:21:7b:bb:05:ff:e6:04:d7:3d:b7:79:97:70:
         3f:3e:e2:cd:d6:a1:11:09:6f:bb:ac:cc:fc:62:87:02:45:72:
         8f:50:95:c5:30:36:6f:dd:b1:ac:92:bb:e3:e1:12:18:81:b2:
         55:9d:54:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:26:06 2026 by rpki-client