Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37a672da-6764-3821-8b78-d384eadf2304.roa
File:                     37a672da-6764-3821-8b78-d384eadf2304.roa (raw, json)
Hash identifier:          Nn+AcGRFxXCjp8xUDn34HG2F7de2qQkvNpnfW1tGseE=
Subject key identifier:   8A:DD:30:69:AF:C5:2D:17:4B:BA:73:A6:7E:09:0D:A4:8D:85:D6:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E059C7C74AED7BA1AC47A6500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37a672da-6764-3821-8b78-d384eadf2304.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     396583
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:7c:74:ae:d7:ba:1a:c4:7a:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=d35d7da6-20af-4a85-a694-bca2eab3e1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:fa:bd:09:89:51:37:e8:64:4e:88:67:17:
                    c2:c8:b8:c3:a5:1b:95:44:be:e2:97:9b:92:4b:27:
                    09:bf:f3:a0:1e:fb:0c:eb:bc:e8:39:76:60:d1:ab:
                    20:19:92:24:96:27:9d:f1:eb:e4:b0:d3:23:e7:e1:
                    a4:6d:ea:50:11:73:cd:76:a4:29:82:2e:21:9c:79:
                    68:39:59:0a:4c:26:4b:4c:f1:1b:61:ca:0b:f4:cd:
                    ba:5d:d9:3d:94:63:0c:b7:3c:78:3b:d2:ce:89:99:
                    e4:66:36:c6:e3:98:09:d3:d6:6d:f0:b2:ed:14:91:
                    c8:1e:b8:4e:83:e1:a1:eb:90:f9:f8:42:27:3f:98:
                    a6:86:95:35:01:c8:dc:c4:82:e6:b3:ee:40:5d:f1:
                    4f:40:5c:b9:2c:93:df:56:5a:56:5e:0c:3b:1e:3a:
                    6e:32:d1:4f:4a:79:14:b4:cb:86:66:25:fc:d0:6c:
                    77:a8:85:7a:6d:90:91:1a:0c:6c:82:20:b0:ea:9b:
                    21:90:70:23:eb:b4:98:ee:cf:68:36:fd:77:29:ba:
                    07:7f:30:ff:b5:ca:59:9c:d6:54:ed:ef:34:44:9d:
                    e2:a8:f9:2b:8a:ac:07:a8:25:52:9e:03:39:9a:ed:
                    97:92:d1:0a:71:67:dc:90:d5:f6:70:94:fa:02:a9:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DD:30:69:AF:C5:2D:17:4B:BA:73:A6:7E:09:0D:A4:8D:85:D6:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37a672da-6764-3821-8b78-d384eadf2304.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:04:07:a5:6f:a0:2a:45:d5:80:7c:2c:c2:96:6b:25:1b:
         ef:53:61:6d:22:79:37:fe:fa:ee:98:5b:c4:c2:c8:39:f6:06:
         98:a8:ce:ba:f9:87:53:ef:b2:df:e4:93:82:7c:10:bf:5b:88:
         a7:fd:66:cf:3d:61:20:51:98:d3:22:82:99:ca:eb:9c:0b:de:
         aa:ee:c5:5e:62:7b:9c:0c:25:db:b2:dd:f0:b2:8b:01:73:65:
         0e:90:dc:cb:45:b4:70:c7:1d:aa:dc:89:37:21:7b:34:a1:63:
         49:30:45:29:fa:8d:dc:72:e0:f6:7d:cd:5b:44:cb:2f:5f:ef:
         bb:68:27:c9:4c:f8:c1:35:65:4b:9b:65:3f:d6:91:00:17:ae:
         b4:a5:32:08:0e:e7:65:66:1d:2a:7b:f6:72:45:0e:16:66:31:
         0e:21:94:1d:7c:ed:86:23:22:18:4f:82:7e:bb:3f:07:80:30:
         04:09:4c:f7:64:91:cc:7c:6f:9a:49:9c:d1:73:bb:24:0e:c5:
         8b:c9:e3:4a:65:ab:cb:c7:f3:d1:3e:15:17:d3:94:f0:ed:f9:
         7d:37:49:6e:6f:1e:18:6a:83:41:1c:fd:3f:dc:93:62:ae:52:
         5b:d9:88:9c:8c:41:56:d4:53:2d:43:38:b9:e9:02:26:27:e8:
         f0:dc:c4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:11 2026 by rpki-client