Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0119e1cd-e73c-3862-bd2e-cb0a4fa3d233.roa
File:                     0119e1cd-e73c-3862-bd2e-cb0a4fa3d233.roa (raw, json)
Hash identifier:          +UG3bcgDInICKfYq3GABw/GUsjyOV/Xi2pfdTHVV1Ac=
Subject key identifier:   8B:85:93:53:7D:68:8B:95:AE:2D:54:F3:EB:E5:CF:8E:09:66:13:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584FBED115F4CFA04B7AE9141B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0119e1cd-e73c-3862-bd2e-cb0a4fa3d233.roa
Signing time:             Fri 06 Nov 2026 02:00:14 +0000
ROA not before:           Fri 06 Nov 2026 02:00:14 +0000
ROA not after:            Thu 04 Feb 2027 02:00:14 +0000
asID:                     36624
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:be:d1:15:f4:cf:a0:4b:7a:e9:14:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  6 02:00:14 2026 GMT
            Not After : Feb  4 02:00:14 2027 GMT
        Subject: CN=41070a97-afa7-4ecc-a095-e24cba68bc7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3e:3c:6c:4c:36:03:41:19:8f:ad:85:fd:81:
                    68:bb:a9:6a:3f:59:30:f7:01:36:3f:d6:1b:c8:0c:
                    d8:98:e9:b1:e3:ab:c1:85:b6:5f:b8:68:68:40:c7:
                    1b:e0:33:5b:09:1e:88:e9:6d:1d:d1:b2:4e:c8:56:
                    cc:7f:a8:70:dc:ca:89:26:4e:2e:3a:be:f3:d9:6f:
                    8a:da:77:bc:86:ca:03:1e:96:f2:b2:11:ad:d2:8a:
                    75:50:34:7f:d9:e2:3d:c4:39:34:d0:e1:d0:0d:cc:
                    c4:ac:33:04:76:d1:61:3a:3b:f0:c2:ee:66:6a:60:
                    33:27:83:be:73:ee:9e:88:ca:31:f2:29:be:5b:59:
                    e7:13:53:68:d8:6d:14:d6:73:98:71:f8:53:f4:94:
                    bb:73:01:46:9e:24:63:af:ad:52:dc:00:4c:88:53:
                    d7:58:da:07:0f:9b:e3:8f:27:93:7b:c8:bc:92:5f:
                    0b:09:6b:21:6d:12:e7:10:00:16:10:e1:61:43:7d:
                    ea:55:45:a0:e3:9f:18:60:ff:82:47:bc:01:c5:a8:
                    b9:24:70:3f:92:0a:6f:21:3f:2e:e3:b0:69:52:43:
                    7e:f4:48:6f:72:7d:4c:ec:5e:dd:10:5a:e6:4a:90:
                    92:a0:a3:1b:69:bb:3e:b6:61:6c:ee:7f:76:e7:cd:
                    14:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:85:93:53:7D:68:8B:95:AE:2D:54:F3:EB:E5:CF:8E:09:66:13:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0119e1cd-e73c-3862-bd2e-cb0a4fa3d233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7e:8c:58:9d:7a:6e:94:b5:03:eb:21:a2:0a:a0:9b:52:d4:
         e8:51:72:77:89:d9:cb:3d:74:fc:3f:e0:44:d2:e2:9d:d0:02:
         5d:fd:20:e3:f1:ec:63:f9:55:81:ae:44:5f:b0:96:49:c4:a3:
         94:2d:c2:6e:de:c5:d5:d4:30:18:98:15:79:84:f0:fe:81:5d:
         7a:39:2c:da:9f:c5:5b:0b:c7:d2:0a:02:f8:d5:b6:ed:91:f1:
         31:c6:ea:e3:f5:63:61:af:4b:ca:07:84:30:0f:e0:9e:62:68:
         61:e3:2c:cf:9f:bd:96:5a:3f:1b:02:1f:78:34:26:c5:91:cb:
         e2:69:97:ed:96:73:d5:af:20:ee:e1:d5:92:0f:f0:b8:02:95:
         43:9b:1d:e2:0d:2b:0f:39:59:30:e2:32:3b:53:f7:30:99:00:
         50:18:fc:1e:81:e0:b2:5c:02:8c:2d:8e:91:61:b8:69:3a:fd:
         1f:46:d7:3c:a9:54:bd:58:8a:67:4b:7d:ef:3e:7b:ab:30:8e:
         88:0c:de:7c:0c:59:67:5b:e8:82:ea:11:95:df:3d:53:c6:11:
         7d:49:b2:65:a2:bc:95:fb:15:70:93:e1:43:14:b3:ce:30:c1:
         7b:2e:10:30:16:b9:aa:72:d5:6a:cb:4c:4d:3c:58:c1:ae:64:
         32:ee:f6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:06:55 2026 by rpki-client