Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4938d4b-7b8b-3695-bc74-74a6db2d7820.roa
File:                     a4938d4b-7b8b-3695-bc74-74a6db2d7820.roa (raw, json)
Hash identifier:          Sta1Ca0fmeWlRMuzBOlVbRWzBdR4lZV3x225q7SuRLQ=
Subject key identifier:   F0:6F:45:2C:E3:1E:82:A2:41:AD:98:21:88:6E:EF:C9:B7:B4:D1:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9EF73B55F66A112051D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4938d4b-7b8b-3695-bc74-74a6db2d7820.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396592
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:ef:73:b5:5f:66:a1:12:05:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=7ca17b9f-a389-4dfc-bf43-88d8418334e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b6:87:8e:07:30:5d:1e:4f:88:9e:79:b5:65:
                    69:65:aa:6f:38:19:d9:f2:cb:63:2f:82:1f:64:3d:
                    9c:20:15:47:b2:79:15:db:8e:03:f1:c0:b2:21:2d:
                    50:60:05:ba:2a:b0:8a:78:71:19:1c:23:e4:37:b5:
                    b1:b0:8e:ef:97:96:02:3b:d2:dd:9d:9e:37:45:7e:
                    f6:80:d4:f2:4a:f2:b8:1f:97:41:98:62:f2:36:79:
                    02:41:76:6d:df:4f:72:c2:d1:c0:94:63:60:21:12:
                    aa:e9:0a:10:42:94:3e:0c:bb:8a:6e:d3:20:a1:5e:
                    6d:08:28:62:7e:6e:4c:09:8e:4c:90:a6:80:b5:6b:
                    4d:31:50:e6:5d:cf:61:c9:b9:3e:4b:2c:62:40:0f:
                    93:2a:75:ca:b6:d2:00:9f:e3:cd:19:22:d9:e1:04:
                    f9:68:f2:fd:36:55:a2:4f:95:d7:d8:86:66:52:52:
                    27:46:eb:0b:89:96:30:f5:05:50:1a:08:c9:cd:76:
                    90:21:56:b0:d6:c3:21:d4:0f:ba:1d:20:52:f6:29:
                    db:0d:10:a6:65:9f:8d:39:7d:24:47:d2:a3:d6:17:
                    77:0b:b5:fe:f1:99:1f:aa:a9:f8:30:c9:8f:62:35:
                    8e:80:72:f9:ad:50:67:69:9f:59:59:7a:4c:26:9d:
                    7a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6F:45:2C:E3:1E:82:A2:41:AD:98:21:88:6E:EF:C9:B7:B4:D1:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4938d4b-7b8b-3695-bc74-74a6db2d7820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:26:c8:2a:4f:97:5c:8b:54:6a:55:54:d9:0e:52:f2:e6:87:
         37:47:58:14:cb:3c:58:8a:f5:8d:8a:fb:93:23:6d:0d:12:1b:
         43:5b:09:69:4c:ab:3b:cc:f0:82:8e:5d:79:2a:55:f5:2d:a0:
         fc:36:4e:47:a2:41:fc:82:d8:99:41:03:a8:eb:a1:ee:67:4e:
         2f:59:18:87:57:a8:d2:a1:80:98:fa:d8:b6:9a:c6:9b:70:ff:
         8d:b8:38:bb:c9:6c:8f:3b:cd:dd:8e:23:da:48:96:30:61:2f:
         ed:92:b5:a9:76:20:84:39:25:c8:44:3f:b4:93:e9:82:64:92:
         45:dc:92:6d:29:81:a4:f1:f9:68:69:0f:c7:6f:7b:a5:38:f4:
         31:2f:95:64:2a:60:52:3c:17:c1:2e:df:fc:17:03:94:05:86:
         a6:46:fc:55:86:d0:de:ef:c7:59:d3:73:3d:91:3d:6a:53:79:
         e6:97:b5:11:41:a7:a0:03:7f:4e:b8:19:08:27:fb:d8:39:64:
         d7:d5:df:c5:2d:bd:39:b2:55:e5:b9:a3:a4:f5:26:19:87:96:
         06:d7:22:7f:fd:2d:8b:84:69:4a:44:d7:3c:b7:19:31:d8:96:
         c0:2e:ac:f7:f1:b1:80:df:d9:85:6b:15:22:ac:a7:28:b6:78:
         08:50:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 21:54:05 2026 by rpki-client