Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c2a9bf5-173c-396b-bf6d-101f840f3775.roa
File:                     0c2a9bf5-173c-396b-bf6d-101f840f3775.roa (raw, json)
Hash identifier:          vrFjgtJ9UUYVGnNv60rDSruCiRlBjL52ilvXOjEit/s=
Subject key identifier:   E5:A9:78:62:BA:71:FB:12:C7:4C:57:BC:37:E8:7C:9D:BB:4F:12:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE87FEECE6F67A9B1D5B8D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c2a9bf5-173c-396b-bf6d-101f840f3775.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     396563
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:fe:ec:e6:f6:7a:9b:1d:5b:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=af9895c5-7979-4a32-9265-ffba833d112f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:52:bf:9d:70:be:8e:64:02:0d:29:3a:65:cf:
                    40:1c:5c:e7:a8:af:e8:04:7b:3f:1d:de:9c:7c:61:
                    e9:75:50:46:2b:2d:7d:d3:0a:39:25:00:e1:1e:e3:
                    0f:1e:06:38:9d:9a:e8:de:3c:b1:ac:fb:cf:06:b3:
                    3e:ce:b5:dd:95:7a:84:1f:22:0b:b0:67:fa:9c:30:
                    f8:70:94:88:9e:c2:8e:84:6d:c9:8d:97:3d:d6:ea:
                    61:91:9c:b1:71:ca:fa:77:19:ef:a7:92:b4:37:89:
                    f0:75:1f:fd:03:b7:15:38:ea:3e:56:b8:10:99:fd:
                    a8:59:d1:95:3c:ee:f1:78:42:44:05:3b:b7:91:08:
                    01:71:9a:60:94:15:96:4c:e5:0c:37:69:5d:97:67:
                    d6:4a:d1:0b:c4:31:6c:87:ed:79:2d:c0:32:dd:04:
                    c2:02:d0:36:60:61:b2:90:49:8b:e5:71:d8:8a:20:
                    ef:9c:2c:fb:68:78:a8:15:b8:43:40:c6:42:ec:a0:
                    65:c0:46:ac:cc:a9:ef:a1:ff:52:d9:4d:30:6a:a6:
                    02:36:d0:f1:cc:85:ba:13:1f:6d:de:72:88:dc:a0:
                    7c:32:eb:46:c6:a8:c9:56:66:53:0f:bf:79:6b:24:
                    19:fc:19:7f:42:12:6a:2e:df:1e:93:67:98:55:d6:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A9:78:62:BA:71:FB:12:C7:4C:57:BC:37:E8:7C:9D:BB:4F:12:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c2a9bf5-173c-396b-bf6d-101f840f3775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:5d:fe:35:b8:74:21:15:89:60:25:20:4b:92:66:70:19:ef:
         64:aa:5a:c8:f2:70:c7:44:59:31:3a:3b:2c:c7:81:41:99:8a:
         be:26:45:ee:44:a0:aa:9d:05:e5:ff:a3:d8:20:63:38:38:e0:
         8c:18:a7:8e:4a:dc:c0:91:0c:b2:64:12:1c:8b:c8:87:64:51:
         67:f1:55:b1:72:c1:c9:48:80:10:6e:f1:8b:82:40:86:3e:8c:
         d8:24:a2:27:7e:d2:c7:a9:85:52:92:10:d2:c4:57:eb:7f:f3:
         6c:ac:f5:76:9f:b5:49:2f:3b:71:68:d9:93:6b:08:59:ae:23:
         72:d9:1d:67:fc:4f:eb:e4:35:53:8b:f8:31:23:0c:2d:4f:90:
         70:ed:d0:4a:c6:ab:bf:57:8d:68:a2:57:f5:97:e7:48:7a:34:
         ff:65:90:42:bb:7f:73:1c:eb:84:37:ef:23:29:ed:18:58:37:
         ec:0d:66:de:17:5c:17:20:ca:f2:53:b7:d3:2c:ae:0a:32:22:
         ed:3e:2d:91:8d:6c:4b:53:8c:bf:91:96:34:8e:60:e2:75:37:
         3f:09:69:bc:19:0a:94:05:92:cd:49:a4:4b:89:dd:41:10:07:
         ae:9c:2a:b9:0e:19:66:ba:08:65:f3:3c:87:d3:b5:d2:68:f2:
         cb:e9:3d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:00:40 2026 by rpki-client