Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa
File:                     43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa (raw, json)
Hash identifier:          RQkO320Lp4Ta/Wb5MFCeIgGtKrrSyLZU4vKpbVLkjGc=
Subject key identifier:   38:7A:30:E5:D8:62:CB:31:79:D0:46:03:B1:DA:1E:4B:E8:B1:CB:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E070086B33CD3CB854E024B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa
Signing time:             Mon 01 Jun 2026 13:00:10 +0000
ROA not before:           Mon 01 Jun 2026 13:00:10 +0000
ROA not after:            Sun 30 Aug 2026 13:00:10 +0000
asID:                     397203
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:07:00:86:b3:3c:d3:cb:85:4e:02:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  1 13:00:10 2026 GMT
            Not After : Aug 30 13:00:10 2026 GMT
        Subject: CN=40170147-48a1-40b8-8679-b00a0e700588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:9e:1b:54:22:69:f7:92:e2:6d:62:cb:51:
                    7d:64:a9:30:d2:ce:66:6a:8a:80:20:62:ae:98:1e:
                    07:99:db:34:86:1a:89:b5:e7:19:b7:a7:fe:f8:58:
                    ee:7f:fd:79:c4:ac:41:3e:c9:8c:06:b9:f7:88:dd:
                    fd:3d:77:ea:57:81:14:f4:b8:89:87:a7:9e:d3:e8:
                    1d:26:da:11:a4:71:79:ce:8d:fe:bf:31:24:92:58:
                    3d:56:3d:50:07:96:6f:80:a9:5e:86:f9:ae:7f:e6:
                    70:9a:54:b4:c0:ac:8f:b3:51:5a:19:34:10:fb:b9:
                    f4:de:d8:99:ec:ae:2b:03:fa:95:78:77:24:01:07:
                    22:d9:3e:85:7d:cf:71:26:1c:9e:c7:91:83:5b:b0:
                    68:12:22:78:0f:c5:e6:1c:32:ac:48:6f:60:3e:d6:
                    f2:29:54:0d:cf:c9:bc:22:a1:05:d5:f5:da:41:fb:
                    62:cd:ab:8f:23:7a:79:6f:02:63:36:dd:79:ca:e1:
                    51:92:41:67:47:40:e1:49:ee:96:92:39:a6:76:00:
                    6a:ad:f9:6a:d4:75:cc:53:e6:03:ce:7d:60:4d:16:
                    7a:7d:17:c2:fb:b4:4a:60:0c:87:27:41:ab:09:72:
                    27:99:e6:5e:11:07:87:e2:fc:d8:45:93:8c:6d:bb:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7A:30:E5:D8:62:CB:31:79:D0:46:03:B1:DA:1E:4B:E8:B1:CB:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b0:0d:e9:f2:7c:0e:9b:b9:e1:83:6a:f5:9e:05:58:54:69:
         5c:7e:95:2c:58:3c:f0:b0:b4:fd:8f:70:89:62:c4:aa:81:c3:
         ba:43:ce:e8:fc:46:bb:a5:da:e5:a3:76:66:c4:c1:17:5b:0f:
         e0:f0:25:35:91:3e:d2:72:22:73:eb:21:e1:2f:10:73:42:22:
         1d:35:21:c5:2e:c8:26:2d:9e:a0:cd:b5:4f:e2:d5:b9:9a:c9:
         76:25:3c:28:a3:03:22:71:b5:9c:ec:2f:d2:e3:51:ca:ec:61:
         d6:62:a9:48:ec:70:00:75:73:75:cc:b4:fc:a1:e9:ac:68:6f:
         7c:49:5d:de:48:4c:4c:d4:f6:7c:1d:3e:6a:35:76:1a:cd:8b:
         58:2b:b6:bd:24:5e:f3:4c:7c:91:4c:28:eb:4f:04:80:7e:0f:
         07:90:a2:11:24:6c:bf:11:ef:34:3e:69:25:52:91:c1:82:47:
         3b:38:73:a4:0f:67:37:c2:c1:8e:a8:90:84:86:cf:b9:0d:8d:
         eb:c4:02:2b:84:4a:97:f7:8c:22:84:b4:9d:d9:98:54:fd:3b:
         29:19:fb:52:d5:8f:bb:9b:08:15:fd:51:35:11:71:7d:a3:72:
         71:78:ec:f5:2c:a3:c6:1e:8f:b0:7d:32:df:54:37:fc:a9:74:
         fa:db:7c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:45:43 2026 by rpki-client