Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbd33d45-6656-3ab1-98ae-7734d7593508.roa
File:                     cbd33d45-6656-3ab1-98ae-7734d7593508.roa (raw, json)
Hash identifier:          wP6Fnu1bIRm+BxzpvSf38BbjRPUW0uPTbf7MWK0kZqw=
Subject key identifier:   10:AA:C7:CE:C2:F3:DD:14:C9:53:71:3F:EA:D0:CA:B6:4C:6D:7D:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7888EE61A35FEE77B74CE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbd33d45-6656-3ab1-98ae-7734d7593508.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397204
IP address blocks:        2001:503:a83e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:8e:e6:1a:35:fe:e7:7b:74:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3d8aaa3f-514b-4c2a-aea8-94ded75e11dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:d5:70:1e:01:27:f2:27:5e:ea:8b:fc:c5:
                    b4:15:5d:c5:b9:b8:59:45:0f:b6:23:84:a8:ae:a1:
                    af:fa:24:5c:87:08:67:84:82:4c:7c:e0:5a:9a:6d:
                    20:47:7b:5d:4e:3d:71:64:3f:42:fe:35:7b:67:93:
                    f0:aa:7a:9a:c5:2c:b9:f4:30:0d:ea:8f:1d:9d:58:
                    02:44:4b:89:d0:e3:d2:a0:0e:7d:5e:d4:c8:ad:10:
                    44:f9:72:a7:fa:f1:61:85:95:d3:51:cd:54:3e:29:
                    3c:33:8d:d6:d2:97:af:ad:5b:f0:66:b3:9d:2b:cb:
                    c9:18:ca:60:97:e0:d7:d0:da:b0:99:e3:1b:2c:7c:
                    f3:bb:ab:2a:b2:16:24:87:74:36:43:f4:da:cd:8e:
                    f5:67:d2:bb:ef:e3:e6:b2:e2:02:3f:90:72:b5:2e:
                    cc:72:c2:b7:39:54:e6:09:36:65:84:25:e0:0d:a1:
                    3b:51:1b:82:07:7a:ae:ec:6d:99:1a:34:bf:9b:ca:
                    37:5f:a8:31:f7:ba:a4:f1:06:93:7e:89:cd:1d:56:
                    44:ec:3f:4b:dc:26:3a:2b:d3:99:26:63:16:f7:62:
                    35:b8:f1:d1:c7:ee:23:15:50:74:fa:fe:5d:8b:d0:
                    f4:7d:22:93:5a:80:89:fa:84:af:6b:57:be:0d:f8:
                    99:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AA:C7:CE:C2:F3:DD:14:C9:53:71:3F:EA:D0:CA:B6:4C:6D:7D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cbd33d45-6656-3ab1-98ae-7734d7593508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:56:80:a2:74:61:49:7f:09:81:7c:d1:79:b4:56:52:7a:1f:
         7a:e8:a7:1e:17:d2:29:87:3f:f0:6a:60:dd:eb:65:ef:cd:aa:
         bf:eb:e4:d4:e0:8c:1a:a8:44:49:38:c4:fd:fd:10:07:da:f4:
         c7:d2:17:0f:45:82:39:15:32:b4:08:69:c3:fc:e5:95:45:e3:
         17:6a:8b:c7:75:6c:86:98:52:f5:ec:2b:49:2d:d9:1f:e2:ff:
         82:1c:b6:dc:9a:29:54:07:f6:2a:24:61:6b:13:81:6c:f1:4a:
         be:de:38:da:66:09:18:0c:e5:25:e0:a4:ce:4a:0f:4a:b7:8c:
         04:df:bb:e5:92:63:c3:5e:c9:e7:25:f3:56:5b:bb:82:d7:67:
         43:42:6d:64:fc:b2:50:0e:be:ff:26:0f:75:ab:4b:77:db:1d:
         f3:d5:a6:e8:d0:4f:ca:01:49:a3:77:59:c5:f2:43:eb:ec:f8:
         e1:7b:a8:7e:42:ea:14:cd:9d:87:7e:e7:d1:b6:10:ae:d4:7f:
         d7:58:25:a6:3b:2d:45:f9:b3:f6:84:97:de:e4:62:2b:94:05:
         15:ff:a6:ef:f8:6f:1d:9c:32:4c:8b:5c:b9:df:d8:02:63:48:
         a3:1b:04:b5:07:34:f6:d1:07:0a:74:85:63:84:a9:20:d0:c3:
         52:d9:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:33:45 2026 by rpki-client