Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/136a9d51-3c2b-30cd-944f-5e5dc6353efe.roa
File:                     136a9d51-3c2b-30cd-944f-5e5dc6353efe.roa (raw, json)
Hash identifier:          FOHNi/fkmpm8IiY43ub7v4Wnpc5YfQPpBPiAQUyQc+U=
Subject key identifier:   AB:C1:B5:0D:C0:93:86:E2:42:A4:EB:2F:01:5E:F2:93:56:C7:DC:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA796C514C8F85C01BF96C280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/136a9d51-3c2b-30cd-944f-5e5dc6353efe.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397208
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:c5:14:c8:f8:5c:01:bf:96:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=86789447-1333-4aef-aa0b-f76aa1ad7a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b7:de:9c:9a:0e:d4:c4:02:8d:4a:75:7a:6f:
                    fe:a2:3c:02:02:dd:78:3d:af:e0:d5:e5:e0:e9:82:
                    6e:e0:f6:7d:5a:6e:b0:39:b1:9b:38:94:ee:3b:20:
                    f6:d9:3a:c4:b1:52:8b:c2:73:1e:71:27:98:91:6c:
                    9c:1f:27:b3:db:e2:af:99:d2:73:cd:13:c8:3e:b2:
                    d0:94:86:98:cb:a7:4b:f5:69:ab:b8:c1:01:8c:e3:
                    f8:0e:74:72:89:40:42:c9:36:6f:9e:3e:2b:26:c7:
                    e7:bc:d5:49:91:09:86:dc:45:c3:51:aa:4c:f2:d7:
                    96:fa:66:92:71:19:fc:8c:79:fb:6e:83:17:47:3e:
                    f2:88:3d:e1:94:31:8e:de:51:e6:f2:0d:ea:26:fd:
                    d1:e9:db:4d:cf:f1:d8:29:7b:4b:c2:44:80:0e:29:
                    20:f5:f3:83:e2:55:8d:34:51:a0:44:85:8d:61:19:
                    71:a4:6e:15:5b:87:9f:49:0e:36:34:a7:90:0e:a1:
                    fb:b6:ff:e6:9b:21:b4:19:99:00:3c:e4:43:73:af:
                    cb:6e:9f:5f:5a:1e:a5:51:ba:b0:57:6f:ac:5c:b7:
                    fe:e8:b0:42:e0:04:a9:52:7c:1e:4d:ef:ba:ad:03:
                    23:9a:ea:19:87:d5:ce:c8:b4:f3:32:cd:6b:bd:36:
                    09:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C1:B5:0D:C0:93:86:E2:42:A4:EB:2F:01:5E:F2:93:56:C7:DC:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/136a9d51-3c2b-30cd-944f-5e5dc6353efe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:d2:0e:01:3a:50:33:ae:0d:ce:cb:2e:b2:64:a7:a7:88:7c:
         ce:99:a9:b2:10:ac:75:40:ae:d5:37:dd:27:90:0d:c7:18:44:
         ad:6f:f3:d0:5d:94:4f:0b:2b:56:8b:cb:df:22:40:be:a8:d7:
         09:cf:e1:5a:0a:6f:35:7b:aa:f5:86:bf:79:39:9a:46:19:d4:
         aa:79:c2:e4:4c:75:c7:1f:7d:b4:05:85:8d:87:3b:32:4d:39:
         21:a0:70:55:f2:5d:2b:8f:4f:58:59:0b:1a:bf:80:8c:6a:9c:
         75:f2:5e:8f:10:63:ce:e6:24:e7:d2:b6:29:f1:10:15:7e:48:
         b0:bc:31:c2:4d:ee:96:3f:74:e2:cf:bf:cd:29:30:50:2d:af:
         69:40:8e:4f:c7:43:15:b8:10:5e:2f:d0:83:43:8b:c1:32:d4:
         30:df:72:76:39:d8:ab:83:4d:24:94:55:82:60:3f:25:ca:95:
         6c:c3:b4:dc:b1:93:e3:8c:6b:92:19:ff:ac:70:27:a2:7b:7e:
         43:bf:50:69:01:d2:9e:73:7f:19:a1:3d:34:7e:5b:10:78:7f:
         3d:c6:cb:1a:bb:03:e7:5f:24:9d:1e:70:d2:ec:8a:b2:79:83:
         39:67:90:e9:60:2a:93:82:ec:b6:3e:77:4c:b1:88:5d:67:33:
         34:09:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:19:29 2026 by rpki-client