Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6439a62-c428-38fe-b48c-6ce9d8db9985.roa
File:                     b6439a62-c428-38fe-b48c-6ce9d8db9985.roa (raw, json)
Hash identifier:          tQG6CUYNx1mAkqGd4I4Lk7Hfclcarw8ktvlaSYZTe/4=
Subject key identifier:   FA:66:A0:E6:9C:E6:B0:4B:E1:65:FF:55:49:84:5F:A8:B7:26:19:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7878D025052AEC5C838E600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6439a62-c428-38fe-b48c-6ce9d8db9985.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396596
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:8d:02:50:52:ae:c5:c8:38:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f6c9f1b8-3843-4269-85c9-c42c74798855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d8:40:4d:51:bf:5d:d9:03:f1:47:6b:51:f1:
                    6a:f4:17:b8:4b:81:51:82:d1:b7:17:69:71:61:d5:
                    a7:71:08:d7:72:dc:99:f8:3f:75:53:94:38:c2:18:
                    21:e2:ac:51:ef:de:b3:fc:c4:bf:6f:24:10:8a:74:
                    2d:d8:11:a6:2d:d9:1f:80:a7:f1:7d:91:84:03:06:
                    24:25:82:53:fc:f4:7d:75:7e:1a:4c:7f:df:d2:46:
                    63:a2:bf:5c:cd:2f:ed:a3:fa:49:f3:1e:23:35:f2:
                    f4:ea:4a:61:f7:00:26:f2:55:ae:75:70:91:f2:65:
                    01:cd:fe:eb:1b:eb:a8:47:4e:f4:c1:f6:b4:c6:6a:
                    06:05:b1:24:d1:f1:d3:af:3c:ab:84:bf:ce:f0:02:
                    16:88:e8:5e:3f:5c:b4:79:4f:a6:7f:e9:15:c2:43:
                    cd:a3:fb:e0:45:b8:f0:25:fe:b0:47:0f:2b:c6:33:
                    ce:97:72:87:31:4a:d2:0d:ea:cd:6e:c7:45:dc:0c:
                    21:61:42:0d:0b:f9:b4:86:89:95:a2:c2:99:5a:7d:
                    6f:19:65:27:04:f2:32:ee:74:ea:e9:fb:eb:5f:3f:
                    4d:b2:55:f7:5e:4f:74:92:62:f1:ac:fc:38:aa:d1:
                    e4:17:ef:a5:46:15:1b:3b:8d:8a:50:18:3e:05:8a:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:66:A0:E6:9C:E6:B0:4B:E1:65:FF:55:49:84:5F:A8:B7:26:19:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6439a62-c428-38fe-b48c-6ce9d8db9985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:77:02:87:6e:58:73:36:dd:4a:0a:39:cb:86:97:f4:4f:06:
         14:be:9e:49:4e:26:a5:e7:8a:9a:56:82:c0:b3:48:63:37:04:
         cb:7a:26:5d:ff:25:a2:58:74:79:fd:95:cb:5b:2c:22:62:24:
         2d:78:9d:17:f9:1f:1a:c5:c3:1e:03:02:71:c2:3e:f8:de:83:
         88:56:41:db:b7:54:82:9b:60:6f:2d:0c:b5:e2:f3:79:5f:f9:
         98:d3:e9:c8:c6:5a:b6:ad:c9:35:21:e0:a4:cf:ee:b9:56:27:
         27:a0:e9:64:b4:61:b2:bd:47:6f:ed:ba:0c:6d:98:bb:ed:47:
         57:a3:3b:43:ad:38:02:a1:c7:94:60:00:17:7c:06:38:0b:36:
         55:cb:e9:57:a1:63:62:71:f9:b1:3a:ab:65:7c:8d:eb:a5:89:
         37:e7:f5:8c:31:9f:1c:ac:77:91:39:b9:3a:f3:0c:c2:46:45:
         31:d6:21:56:83:9c:47:41:f9:42:be:ba:08:a5:b7:7a:d3:e0:
         f5:5b:99:39:c7:92:36:df:80:6e:62:c6:30:13:e9:ef:60:47:
         45:26:e6:3f:64:f9:cd:c0:01:01:66:6c:e9:6b:40:5c:13:08:
         45:1a:f1:b2:a8:1f:f7:b3:34:70:4c:ca:7c:44:a4:0f:2f:78:
         28:60:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:28:39 2026 by rpki-client