Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f1f2d7a-83f5-331e-9388-f83678c9aed0.roa
File:                     1f1f2d7a-83f5-331e-9388-f83678c9aed0.roa (raw, json)
Hash identifier:          CCzUOlKs/y1uSi8QGCHONDhRklg/4O4tzmbrhH5g9jU=
Subject key identifier:   B5:DE:B5:6C:86:D9:15:07:21:5A:DB:E3:10:9B:BD:3B:37:A1:B4:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DEC7B4456DC9D4FCCD9611700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f1f2d7a-83f5-331e-9388-f83678c9aed0.roa
Signing time:             Sat 23 May 2026 01:00:25 +0000
ROA not before:           Sat 23 May 2026 01:00:25 +0000
ROA not after:            Fri 21 Aug 2026 01:00:25 +0000
asID:                     396571
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ec:7b:44:56:dc:9d:4f:cc:d9:61:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 23 01:00:25 2026 GMT
            Not After : Aug 21 01:00:25 2026 GMT
        Subject: CN=8097ea69-f1b3-4a04-8b0c-ee68a15c587c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:02:a3:ae:2e:ab:07:f6:9b:f3:a7:4c:4f:
                    b7:03:1f:11:c1:61:d1:be:06:d4:a0:b6:b1:9b:42:
                    f9:f3:1d:9a:48:b3:06:69:21:b0:21:a8:83:8d:f9:
                    32:8d:ac:68:08:83:f2:8f:0a:8a:38:38:7a:2a:fc:
                    7d:32:4f:33:48:27:2b:75:62:15:06:96:78:2b:ba:
                    df:e8:10:b1:da:0a:92:db:c0:12:a7:f4:7a:09:2e:
                    d2:8f:38:33:02:95:1d:12:20:18:9d:a2:83:85:97:
                    d4:43:d3:05:d0:5d:5a:31:26:a0:6f:25:95:54:05:
                    38:02:ae:b6:f7:02:30:2c:75:19:33:9b:87:eb:f3:
                    83:38:f2:07:ca:a3:be:82:62:c6:65:3b:c4:5a:12:
                    1a:42:ad:f5:65:5f:58:37:92:d2:ae:8b:e7:ba:06:
                    8d:92:90:f3:d1:33:0b:82:71:41:18:10:00:01:fd:
                    59:38:dc:97:44:06:4f:c5:d2:5a:4f:d7:5b:0c:4f:
                    b9:07:27:13:ef:be:ac:f1:1c:94:88:14:a1:99:a6:
                    1a:7c:ef:dc:58:1f:94:cd:58:2d:51:9b:53:9e:70:
                    40:9c:30:0d:07:d1:fc:f4:79:c9:f8:bf:96:49:1d:
                    a8:f1:fa:22:b3:ab:87:9b:44:7c:db:57:88:8e:99:
                    1e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DE:B5:6C:86:D9:15:07:21:5A:DB:E3:10:9B:BD:3B:37:A1:B4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f1f2d7a-83f5-331e-9388-f83678c9aed0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:ce:87:b0:5d:20:7e:a0:1a:bd:a0:04:ba:56:7f:53:12:
         32:cd:aa:a6:2b:d5:f6:5c:48:56:17:b1:d1:30:36:ca:de:97:
         16:ba:48:8c:b3:c6:a7:ef:ab:eb:17:b5:61:5f:15:5e:f2:5b:
         ee:50:90:65:35:8f:e4:d1:dd:8f:20:8f:13:8f:32:04:82:bf:
         f3:28:17:35:10:ac:2c:28:a1:bb:c6:01:b1:f4:31:35:29:83:
         0d:24:c6:c7:60:58:a2:25:8a:c0:20:af:14:67:74:02:21:98:
         26:e2:35:f0:05:f3:58:64:25:6e:88:2b:ac:e4:33:15:df:9e:
         4e:aa:c4:3d:5d:c2:18:5e:9b:a9:6e:5e:47:42:eb:41:b0:bd:
         ac:73:18:49:bc:19:de:6b:e6:64:00:c4:cd:45:f5:ce:3f:63:
         c5:88:cb:02:ca:c8:8f:31:c7:7a:19:b9:bd:84:ed:5a:f1:f2:
         8a:b0:1e:55:ab:29:70:7b:91:8d:f0:94:c7:0a:3c:fc:27:26:
         1c:eb:91:07:23:43:f9:31:33:34:ec:cf:a4:4e:39:9d:a3:9a:
         ac:91:d2:bd:82:e6:18:99:94:ad:52:14:dc:74:14:27:6d:00:
         0f:9a:ab:6f:38:99:30:ad:68:2c:ff:25:5f:ef:25:a8:b1:a7:
         75:5c:c4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:12:46 2026 by rpki-client