Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c36b1bb-e18c-3155-959a-559f31095b03.roa
File:                     4c36b1bb-e18c-3155-959a-559f31095b03.roa (raw, json)
Hash identifier:          HzY/ilvbdS3w1WPkcf+qj051XgdvkkOUdxCFmkPHI9Q=
Subject key identifier:   32:B5:85:0D:50:48:B4:2F:02:43:70:B1:4A:FA:AC:33:36:20:A0:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA793A323528186535D439200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c36b1bb-e18c-3155-959a-559f31095b03.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     22547
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:a3:23:52:81:86:53:5d:43:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c3584d4e-9612-43cb-96c8-a17f3b20a075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:80:1a:7a:69:65:dc:c7:34:63:b0:50:0f:
                    fb:cd:06:ce:5d:94:45:30:86:75:08:40:b6:fa:43:
                    45:1b:8d:5d:9a:69:1a:14:ef:b9:12:9d:8a:0c:9f:
                    ff:8d:92:b8:be:00:fd:79:f7:e4:35:27:7c:ce:45:
                    47:38:a6:bb:8a:0a:5d:51:90:cd:c9:f2:1d:ae:7b:
                    97:21:bc:45:ae:a5:6c:96:f8:f1:92:6e:d6:2f:82:
                    61:e7:c9:a1:5f:dc:6d:b7:1e:95:d2:bf:9f:12:8f:
                    23:4f:5a:7d:37:4b:4f:03:8f:5a:c6:78:3c:27:52:
                    ff:ed:f1:e8:6c:dd:e5:22:9a:6d:30:10:64:1a:cf:
                    4c:b4:74:97:7d:fe:02:66:15:e5:c0:e1:8b:82:07:
                    3f:9f:fc:7d:8a:2a:04:d7:b5:10:07:de:eb:fb:c6:
                    18:d1:9e:79:5c:4c:af:1c:2c:02:ed:9f:cc:fe:42:
                    0f:4a:f9:6b:f4:26:1f:87:aa:da:52:4c:8f:ca:c8:
                    b0:b0:73:0b:16:c3:b5:9d:89:a6:3e:e4:18:6b:8f:
                    90:f2:74:d4:96:0e:d5:89:8a:c6:2e:bb:57:b5:03:
                    a4:b2:4f:19:fc:18:a5:78:6d:78:32:44:0f:6c:0d:
                    1a:81:03:f0:9d:c8:3b:ea:08:57:64:7e:aa:ef:51:
                    60:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B5:85:0D:50:48:B4:2F:02:43:70:B1:4A:FA:AC:33:36:20:A0:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c36b1bb-e18c-3155-959a-559f31095b03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:29:af:08:f8:ff:58:e0:a6:d7:29:ff:a3:93:66:4d:a4:1c:
         a8:ae:40:0b:5b:45:ee:18:3a:3a:37:d7:eb:8c:32:e0:29:35:
         32:4c:10:b7:c6:c3:84:32:ea:fc:48:19:d1:4d:fb:fc:5c:69:
         45:ba:9a:ea:ef:2a:da:3b:cb:a6:27:1e:a7:6f:8b:81:07:c9:
         75:31:5d:30:a0:24:8f:39:d5:f4:74:92:28:45:86:dd:16:de:
         28:66:da:d0:ad:b8:b3:c1:5f:88:af:de:06:5d:b4:a7:42:1f:
         cb:97:6f:96:f6:0e:2e:a4:9c:de:cd:65:d8:1e:e3:ac:4b:12:
         60:2b:62:ed:81:ec:fd:f4:44:c5:bd:18:a8:94:ce:ab:10:e3:
         ae:5b:f6:b5:4f:80:9f:50:f9:09:6c:b9:74:0f:eb:f1:ce:b5:
         76:c3:60:67:6c:5c:39:55:ae:9f:bb:55:fa:9b:e4:89:83:dd:
         8d:32:38:f5:be:10:90:f4:9c:34:cb:21:4b:ed:96:cc:fc:16:
         3c:dd:a4:b4:9a:22:8d:e8:e1:39:d6:bc:03:cf:e7:f9:0d:cd:
         d9:76:75:51:d6:fa:11:f1:84:69:35:e7:5c:66:5d:e9:97:f8:
         90:55:57:b8:80:54:ff:b6:67:23:ef:4b:0e:4e:94:a7:83:d7:
         70:ba:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:56:18 2026 by rpki-client