Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfd80b62-cb89-3932-825c-7558df368a1e.roa
File:                     dfd80b62-cb89-3932-825c-7558df368a1e.roa (raw, json)
Hash identifier:          mJkUmEZqyZv1CBXzRgi9X4rLFxP/mNHveRCmguxM1WM=
Subject key identifier:   E5:E8:CF:B7:2F:E7:85:9C:A6:65:D4:43:25:54:6C:CD:7A:97:00:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9F00F4688E85012DA8300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfd80b62-cb89-3932-825c-7558df368a1e.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396540
IP address blocks:        2001:500:13f::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f0:0f:46:88:e8:50:12:da:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=4c6f45b4-1cfa-4ca8-abce-14e5ca2d2bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:44:1b:0d:80:70:29:dc:0b:26:2e:f8:d5:
                    8b:5c:cb:d9:c2:ab:d7:9e:37:7e:35:16:36:94:bc:
                    89:ed:24:85:da:fe:2e:67:3f:eb:a0:70:27:46:df:
                    f4:4f:ff:b5:26:30:c0:6c:0d:7d:76:77:2e:45:d6:
                    0a:e9:7d:4c:27:b1:e5:3c:b5:4b:64:cb:87:90:77:
                    c1:4a:9b:bf:c3:1b:7d:97:4f:6f:a3:f7:76:dd:49:
                    21:8f:e6:56:1c:3a:3a:6a:c1:4e:ef:6a:1c:4b:bd:
                    a2:ff:2f:c1:ec:42:74:ed:67:70:d1:ff:ff:34:41:
                    cb:22:05:68:ef:f3:92:aa:2c:ab:e5:75:5f:a0:c7:
                    8a:6f:42:91:33:be:bd:03:83:68:b7:a0:b1:e6:72:
                    d4:ae:37:97:18:e2:45:b5:47:ca:72:ef:6d:a2:a0:
                    42:05:33:f1:cb:bf:86:04:bc:97:85:75:6a:a1:69:
                    0a:24:c0:d5:d9:bb:bd:1c:a1:d6:2a:9f:96:af:5b:
                    52:01:4c:cc:40:3b:a7:73:10:67:07:3c:e5:27:41:
                    d4:ed:f9:ea:52:6c:7b:99:9d:2e:2c:c5:37:8e:bb:
                    88:c6:c2:2e:b9:47:e3:63:51:db:4d:a3:20:85:70:
                    8f:6b:97:32:35:6a:2c:7f:fa:df:88:7c:df:10:07:
                    18:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E8:CF:B7:2F:E7:85:9C:A6:65:D4:43:25:54:6C:CD:7A:97:00:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dfd80b62-cb89-3932-825c-7558df368a1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:83:24:54:02:9b:6a:d3:45:ac:c5:52:69:af:bc:bd:3c:ba:
         ef:20:41:12:ff:44:85:e9:3d:60:78:90:65:13:f4:2b:9b:30:
         27:4b:c0:75:78:e9:01:0e:6b:58:f7:77:0c:74:f2:59:10:53:
         f9:e2:0b:47:37:26:6a:45:9e:6b:ca:82:82:6c:56:11:6e:3e:
         17:35:5b:8b:52:ff:73:39:d8:01:af:aa:4c:78:02:93:34:0a:
         92:02:70:2d:48:17:ee:50:99:ce:58:e5:70:6a:84:f1:df:30:
         3b:77:b3:b6:a3:09:ec:70:00:13:12:e2:7e:14:4f:32:83:c9:
         40:19:23:cf:6f:7b:e0:29:11:8f:83:96:46:dd:d3:77:60:46:
         8c:57:06:25:e6:42:b7:52:c4:d3:71:59:63:5a:f2:55:f1:65:
         1f:13:8c:64:83:19:f6:30:96:ac:f7:ed:64:ec:43:c1:2c:b5:
         53:0e:0b:da:eb:9f:e5:a1:3b:98:06:df:8e:67:45:fe:5a:40:
         c2:6b:44:0b:04:22:21:ab:0c:5f:51:4a:a8:da:ee:cb:04:ff:
         24:5f:3d:e7:05:9d:fb:2e:fa:dd:7c:10:63:a8:85:f0:54:95:
         f5:1b:d5:61:fd:99:9d:78:70:11:2b:43:6a:b3:19:f9:f9:ec:
         0c:c3:eb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:34:08 2026 by rpki-client