Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18f57973-9e9b-3bf4-a636-8896eacfb1b7.roa
File:                     18f57973-9e9b-3bf4-a636-8896eacfb1b7.roa (raw, json)
Hash identifier:          DKS6LSln8vmPbe6IlZFX0mIOJjqjZpDLo8ETTCR8woU=
Subject key identifier:   61:AF:20:E8:46:7C:5B:DC:3C:A4:7B:3A:DB:88:8A:6C:47:74:9E:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE5043B8B420BB85F211100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18f57973-9e9b-3bf4-a636-8896eacfb1b7.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396562
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:04:3b:8b:42:0b:b8:5f:21:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=b51371d6-c5ce-4cc3-844e-213fc9d55490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:61:19:7b:c2:70:48:a2:eb:62:0d:7a:b1:26:
                    a3:fe:ee:9b:59:bb:22:ea:35:72:d3:9c:e4:14:56:
                    7c:24:d1:20:76:89:ee:c5:cc:d3:fa:23:f6:7a:16:
                    ab:28:32:66:85:cf:71:0d:4e:71:ec:a7:73:e0:40:
                    06:3c:61:7f:50:0c:ac:b5:e7:83:ad:bd:90:01:72:
                    cf:15:92:49:c2:17:d6:82:f2:6c:e4:e6:0f:5e:4d:
                    27:d6:ac:01:30:ed:db:06:fb:4d:72:2b:b0:57:04:
                    9f:71:90:5a:32:9a:24:48:62:81:39:b6:33:ba:5f:
                    f1:29:51:d2:9b:65:37:13:cb:28:79:9d:41:af:14:
                    9a:d9:ba:29:a6:94:96:ce:d2:8e:de:df:9c:9c:d6:
                    b5:f4:30:a8:28:ea:44:28:7a:87:8d:ed:14:a2:12:
                    5a:b8:45:91:65:ab:96:c1:ed:3c:08:47:0e:ba:eb:
                    14:67:8f:c5:96:8c:4b:b6:9b:8e:2d:f5:39:05:35:
                    a2:0e:67:f7:77:b8:31:1a:f0:a2:bc:87:59:cf:8c:
                    c9:c0:8d:2a:4b:06:ae:b8:62:4a:57:e0:33:ba:c8:
                    34:60:f0:fb:23:38:04:ba:cc:80:b3:89:70:79:3e:
                    47:24:6f:0b:e8:29:30:48:a7:94:08:9d:b8:06:4d:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AF:20:E8:46:7C:5B:DC:3C:A4:7B:3A:DB:88:8A:6C:47:74:9E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18f57973-9e9b-3bf4-a636-8896eacfb1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:96:ce:14:5d:e1:f7:c9:c3:33:c2:f2:40:a0:38:16:a7:69:
         5d:74:33:5a:a3:cf:12:06:14:18:6a:38:d4:7e:73:46:c3:b3:
         8f:1d:e9:96:43:6d:55:67:0a:97:dd:99:4d:77:2e:53:dc:4f:
         f9:ef:97:11:57:09:ee:30:bd:13:d4:ca:ce:e2:15:8e:82:f2:
         86:04:58:7e:0d:61:9c:c4:d6:a8:d9:e4:fb:4c:ca:51:4f:9a:
         e6:9f:fe:e1:24:e4:69:5a:2b:45:f2:8a:0a:bd:91:a2:d6:0e:
         fb:24:1e:ee:21:09:5b:1b:ce:aa:b8:f2:68:5b:98:44:af:af:
         23:72:5c:e7:23:b8:71:fc:67:fd:97:8a:a0:e7:45:f1:54:45:
         b6:bb:c3:dd:5a:14:11:5b:c5:41:a3:f6:46:72:92:6e:f0:e8:
         4a:25:9b:ad:cc:3d:0e:53:cb:b9:6d:bd:71:bc:4d:65:6e:d1:
         00:90:c7:cb:e9:37:a0:3b:c6:bc:b7:70:7e:42:96:be:5b:d7:
         a7:a7:3d:74:f2:e1:7f:78:e1:f3:7d:35:c6:b1:dd:d4:40:89:
         e0:b8:a3:d0:3b:27:81:7c:3e:c0:54:d8:38:0c:fe:7e:ba:30:
         c9:23:f4:59:f5:20:93:37:ac:52:a3:5a:57:b8:8e:e5:43:0d:
         65:8e:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:05:19 2026 by rpki-client