Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c5bb9bd-ff8e-38ab-abaf-4c55a117d161.roa
File:                     9c5bb9bd-ff8e-38ab-abaf-4c55a117d161.roa (raw, json)
Hash identifier:          jrTuHtU5EAAFOG3aWa7+w/v9w3qS8L8M32jeW0+sDKo=
Subject key identifier:   6C:0E:37:6B:DF:78:53:30:7A:7E:33:2B:05:21:22:24:9A:2B:2B:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC47BED8A98B7DA23E5AC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c5bb9bd-ff8e-38ab-abaf-4c55a117d161.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     396596
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:7b:ed:8a:98:b7:da:23:e5:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=8d346873-7835-4b36-a557-2e93a205871b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3b:84:24:10:4b:15:8a:5c:3e:8f:8e:0e:bd:
                    d5:61:27:8e:88:1a:61:c8:de:dc:91:3c:e4:fe:f7:
                    86:f8:70:c1:bd:59:f7:92:9b:95:c4:a6:4f:9b:61:
                    68:91:df:bb:ec:e7:09:57:10:91:4f:99:86:28:34:
                    6e:5b:87:fd:f3:aa:9b:90:94:b0:f4:19:3a:64:f9:
                    b5:0a:72:42:2e:ce:9b:c8:31:e2:59:86:ca:37:ad:
                    ef:68:b3:6a:7d:dc:6e:9d:89:23:87:95:34:44:29:
                    fa:80:0a:28:ce:83:61:6f:a3:06:e3:6f:76:b2:ea:
                    0a:1f:b3:c3:d6:fb:b1:70:c7:ee:e6:42:e2:c3:ef:
                    ed:81:ab:7a:71:b6:a2:2e:7e:c6:2a:e5:dd:bb:16:
                    9b:82:2e:22:fb:8f:64:0c:e6:22:3d:39:e7:1e:1d:
                    62:84:13:97:fb:46:3c:b5:7c:70:71:3f:7a:a4:18:
                    33:fe:62:5a:7c:54:df:dd:3f:80:9f:a7:4a:ba:d8:
                    bc:20:d9:82:d9:bb:c8:b1:5b:59:8a:66:20:64:b1:
                    63:a9:fd:4c:bc:a3:1b:b3:e7:5b:07:bb:1b:79:26:
                    8e:a8:a0:3f:08:67:08:52:6b:54:94:c8:05:fa:92:
                    9a:3b:9d:f2:50:4d:91:fd:65:aa:18:47:2c:45:44:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:0E:37:6B:DF:78:53:30:7A:7E:33:2B:05:21:22:24:9A:2B:2B:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c5bb9bd-ff8e-38ab-abaf-4c55a117d161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:c2:78:68:fc:45:7e:d8:5b:be:98:65:84:86:a3:6f:9d:98:
         4b:19:22:d8:b2:7b:a1:bb:cb:d5:ba:be:c2:2e:a6:96:94:ae:
         bb:2c:bf:38:88:e5:9c:c5:0e:a3:fe:f2:aa:17:df:bc:31:36:
         0c:8c:fc:d5:0d:94:44:c8:46:53:cd:4c:0f:d7:cb:db:43:c8:
         62:1b:0e:91:0c:4c:4d:77:d3:d5:41:b2:b9:68:e0:de:de:73:
         7b:c9:ee:f0:10:aa:b1:60:cf:3f:52:2e:5f:87:5e:07:40:d8:
         d0:45:3d:89:72:fc:f3:de:65:0f:21:49:1c:81:c3:99:a1:0a:
         44:64:fc:88:a1:c4:57:06:d3:89:45:f4:ff:7f:44:56:35:a6:
         f2:76:e5:a3:90:e5:4d:75:ec:f7:16:4b:40:69:09:7a:8f:c8:
         45:90:a5:94:4c:fd:5c:1e:08:a4:71:39:ae:45:6a:1d:bf:48:
         bc:a9:09:19:28:57:26:14:27:95:8c:fc:77:6f:cd:cc:30:d4:
         bb:eb:46:92:4f:da:ae:37:ae:35:5c:75:10:93:06:99:a7:f7:
         01:31:a4:9a:94:fc:41:35:a7:64:09:e9:96:ee:ac:37:00:bf:
         e5:51:a6:53:0a:8a:22:f7:ef:7e:b9:58:d9:ae:d2:4c:1a:c9:
         a4:0e:d7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:37:06 2026 by rpki-client