Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa
File:                     5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa (raw, json)
Hash identifier:          Q2SwbFWrItMtlfGjqufB76mSp/09LeHZ2Z1b3YX4Xvw=
Subject key identifier:   67:26:44:46:DB:00:62:1E:04:F5:A3:A0:4C:E6:3D:E1:52:E5:35:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78EFF96D5B2A8652E6B5EC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19836
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8e:ff:96:d5:b2:a8:65:2e:6b:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dbef563e-d2de-4891-b697-37630493c4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:21:27:3b:06:db:87:f1:9f:ae:b0:2e:8c:3b:
                    02:04:a1:29:ad:04:0c:96:70:a3:c6:19:92:63:45:
                    06:34:75:ce:ee:da:29:bd:64:7e:e6:3c:b3:16:f4:
                    c2:14:41:c8:87:58:71:11:91:4e:86:98:e5:14:c6:
                    b0:90:02:cf:e2:8a:71:e6:79:5a:7f:6a:93:02:ab:
                    6c:32:f1:5f:74:3d:74:89:a8:78:9e:59:7c:69:1c:
                    d3:5b:3d:47:b8:40:e1:61:11:81:cf:60:b4:e0:d5:
                    0d:54:ad:77:8d:bc:a8:1f:71:df:82:97:9e:c3:f9:
                    4a:fd:7b:20:d0:fa:57:e3:ec:db:1f:d4:37:5f:91:
                    98:c3:f0:4e:17:61:3e:e0:35:f4:15:0e:6a:db:d2:
                    44:12:8f:6b:fd:61:0f:2d:4b:7d:d1:a8:5c:c8:ee:
                    a3:40:b2:ff:f3:19:83:86:73:37:0e:39:0a:1b:f1:
                    ee:8a:4b:7a:50:66:c3:f1:c5:94:d5:f4:0f:86:bc:
                    f3:89:a0:4a:16:a3:9b:49:ea:8b:34:71:33:a0:23:
                    2e:55:20:48:47:57:19:12:fd:a7:70:ce:bb:3c:1d:
                    47:36:80:6a:20:3a:52:86:ef:8e:60:55:97:67:96:
                    a7:93:e7:2b:e8:79:c6:dd:21:c6:98:21:23:07:55:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:26:44:46:DB:00:62:1E:04:F5:A3:A0:4C:E6:3D:E1:52:E5:35:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5e792dd8-59f1-388c-b837-0ba017a6bdb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:05:43:f9:35:63:ee:d7:e4:0d:d3:85:ab:cd:26:bd:99:
         3d:b1:e6:ee:88:fb:2d:b8:07:97:00:eb:72:de:ad:50:b5:b2:
         77:2b:96:9c:39:88:97:d2:69:2b:5a:58:47:f3:b9:f3:8c:8a:
         7a:8c:8d:e4:3b:16:69:61:3a:e6:d6:85:e9:99:d6:fd:5e:87:
         f8:a7:8c:98:4a:cf:12:66:b1:ac:89:06:dc:5e:03:11:40:b3:
         73:66:2f:1a:84:80:95:ca:c5:5c:21:72:c1:ec:a0:7c:9b:cf:
         55:df:af:a4:14:1b:bc:bf:41:62:66:fb:b8:15:24:69:ed:3b:
         4b:6a:5c:15:45:03:db:35:c9:f2:3a:7e:87:83:4f:fd:cc:f0:
         66:91:56:c5:de:83:38:58:2c:ba:78:bf:f2:37:3e:b8:bb:00:
         19:b9:9f:99:63:46:69:5d:f7:c2:55:23:0f:5a:d4:90:df:e8:
         4f:c6:88:d6:5c:4a:44:84:0e:6f:73:70:f6:97:a1:c0:6f:f0:
         5c:76:ef:8f:c1:9d:94:34:7d:64:bc:d6:70:d3:a3:c2:ab:04:
         12:0c:64:b5:2e:d8:4a:99:2e:f9:bd:00:40:b6:f5:39:aa:3c:
         e1:8b:1c:78:a0:d6:34:5a:29:0c:a3:f9:e9:64:ff:ca:77:43:
         17:76:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:35:45 2026 by rpki-client