Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c9529e4-a960-3f7d-95a1-ae24ca185902.roa
File:                     5c9529e4-a960-3f7d-95a1-ae24ca185902.roa (raw, json)
Hash identifier:          M9xYB1FU0w+uYEqidrTipAqe2hFSoK6eO1kKEiM5HEA=
Subject key identifier:   E0:70:9F:F2:F9:F0:79:D0:FD:2F:A2:65:E5:97:FD:79:93:2C:CD:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1D7A9351DB96DDA4F2ECFC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c9529e4-a960-3f7d-95a1-ae24ca185902.roa
Signing time:             Tue 09 Jun 2026 14:13:56 +0000
ROA not before:           Tue 09 Jun 2026 14:13:56 +0000
ROA not after:            Mon 07 Sep 2026 14:13:56 +0000
asID:                     36629
IP address blocks:        2001:500:d937::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1d:7a:93:51:db:96:dd:a4:f2:ec:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 14:13:56 2026 GMT
            Not After : Sep  7 14:13:56 2026 GMT
        Subject: CN=f7bc389c-6f92-4f93-a199-4fcfdd4a1435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:38:34:cd:46:34:86:6c:db:eb:c8:21:0f:f8:
                    6a:2e:4c:5d:41:8f:bc:34:1d:36:bb:96:11:93:b8:
                    ee:51:c1:2a:13:9b:7a:41:93:f5:29:ae:de:0f:c3:
                    4e:4a:47:e6:cb:a7:e3:0c:36:76:2b:c4:c9:ac:13:
                    55:56:ba:8a:63:68:61:ea:54:83:5e:0e:34:21:44:
                    ad:e9:0f:0d:2e:7e:06:1e:56:14:a4:d1:f4:b2:4b:
                    65:2f:da:3f:d3:1e:96:c4:e9:fc:15:4b:a6:ab:22:
                    58:db:8f:ca:0d:2c:d2:73:72:1a:62:d3:aa:37:64:
                    65:40:c3:f9:18:7f:81:10:a7:f3:16:07:89:ed:bd:
                    3b:ae:43:58:68:98:e7:be:14:18:87:05:ad:1b:7d:
                    c0:60:36:f4:16:fc:77:8d:eb:2a:2c:6c:41:45:49:
                    47:ef:1f:0d:0a:8b:3f:52:5f:5d:f0:52:54:10:be:
                    eb:ac:45:37:b1:c8:4a:0c:df:ba:1c:14:1f:ae:6b:
                    2a:f3:3b:bc:c4:e1:f9:41:ad:3a:89:e1:85:74:82:
                    df:d1:9e:1b:08:5e:08:63:f7:5f:b6:27:fb:80:ca:
                    73:20:53:2a:0b:03:07:80:5e:28:97:51:39:3a:02:
                    7c:fb:66:00:9b:0f:1a:0e:a2:26:ae:8d:7c:99:c0:
                    19:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:70:9F:F2:F9:F0:79:D0:FD:2F:A2:65:E5:97:FD:79:93:2C:CD:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c9529e4-a960-3f7d-95a1-ae24ca185902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:b9:92:fc:96:0d:b1:80:fd:af:70:ca:8e:87:49:1a:64:5e:
         2e:4c:a7:87:a5:2c:d9:33:87:73:1c:cd:71:c6:7c:f2:e4:da:
         73:9c:d5:4b:12:da:e9:74:f0:6a:c4:3c:8e:06:9b:c0:9d:3f:
         e0:27:da:51:5f:b3:dd:af:43:ee:02:7e:10:21:24:19:6e:73:
         c8:1f:26:2f:b2:6c:5f:e6:90:b6:a3:6c:cf:af:51:e7:ee:23:
         42:76:8f:80:9e:09:02:dd:17:75:5a:d2:42:60:37:8e:25:78:
         8e:90:4c:04:3d:7f:21:0e:4c:d1:18:8b:eb:17:bc:17:be:30:
         12:56:1d:e8:f1:3e:10:ac:58:1e:f8:aa:c3:6b:ef:2b:8c:64:
         bf:c1:6b:46:34:fc:b4:4e:b9:36:47:37:70:f4:b1:96:4e:7f:
         1f:d0:fd:cb:3d:06:ba:43:9d:35:7e:ef:93:25:e9:fa:c7:eb:
         7e:65:67:f1:f7:6f:e5:4b:b6:05:f8:77:d0:4a:1e:07:fd:79:
         90:07:f9:ba:2b:f6:a1:70:4a:3f:04:ef:79:7b:e5:05:b5:52:
         f0:54:59:0b:18:1e:db:5a:c2:7a:a5:b1:3b:41:81:52:c4:da:
         5d:53:ed:2f:08:aa:a9:05:24:0d:72:d8:fb:b3:76:0b:2e:10:
         c2:6e:37:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:41:52 2026 by rpki-client