Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60261fbd-95ad-314c-ac5c-065ac90d49cf.roa
File:                     60261fbd-95ad-314c-ac5c-065ac90d49cf.roa (raw, json)
Hash identifier:          zoXqPIhphbeImFN9gPcqYrbQ9TIqMS9HrH1D4TsyRC4=
Subject key identifier:   08:6C:0B:C0:6C:57:95:A6:21:43:BF:22:9B:6E:B4:39:78:5E:31:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA183DF4854164CF2399BF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60261fbd-95ad-314c-ac5c-065ac90d49cf.roa
Signing time:             Tue 07 Apr 2026 14:30:07 +0000
ROA not before:           Tue 07 Apr 2026 14:30:07 +0000
ROA not after:            Mon 06 Jul 2026 14:30:07 +0000
asID:                     36627
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:83:df:48:54:16:4c:f2:39:9b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:07 2026 GMT
            Not After : Jul  6 14:30:07 2026 GMT
        Subject: CN=43f3b461-4f69-4a26-9bb7-6669c5ec09cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:22:41:e8:03:c9:29:3d:65:36:5a:f0:de:
                    44:3a:3f:42:11:21:8e:b6:e0:66:3b:93:fd:33:12:
                    96:26:17:12:76:26:e0:3a:4e:d7:f5:b9:32:1b:ea:
                    33:39:c6:29:11:ca:c6:c8:43:3b:a0:de:c9:04:b7:
                    d3:91:88:99:3b:68:fb:4f:ab:44:bb:47:ca:32:75:
                    76:a2:78:56:a9:7f:68:4b:db:7b:d4:ab:c2:f2:9a:
                    27:a0:78:3b:54:19:19:57:29:44:3b:ef:f9:ee:e0:
                    7e:d8:e3:86:b2:df:7c:e1:81:02:26:72:ad:69:3f:
                    9d:be:84:c0:80:c4:3c:4a:06:59:4e:3d:8f:f0:02:
                    e4:02:14:d2:3e:ba:d8:53:00:a3:60:f4:16:c2:4d:
                    55:6e:ca:39:c5:00:ee:d0:d6:93:20:5c:71:71:83:
                    8b:3a:5f:c0:7b:d5:5d:27:71:8f:0f:0e:2a:c6:c1:
                    dc:33:da:2d:eb:c4:03:ca:ff:b7:ba:c5:09:97:ee:
                    fe:b5:6b:e0:bc:1e:93:bd:2e:58:7a:1a:aa:32:db:
                    2b:a6:ef:b3:eb:3b:17:77:dd:d7:04:57:44:25:bb:
                    a3:f7:86:49:05:0b:53:71:2e:7d:ae:3b:e6:25:db:
                    80:2a:13:ac:16:c0:fe:46:2e:dd:8d:c8:09:9e:9e:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6C:0B:C0:6C:57:95:A6:21:43:BF:22:9B:6E:B4:39:78:5E:31:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60261fbd-95ad-314c-ac5c-065ac90d49cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:3c:17:2f:d0:d2:30:de:46:51:cc:af:c2:5e:01:9f:14:35:
         23:6f:e1:87:2d:90:76:b1:23:5c:39:c7:49:31:26:85:07:cc:
         39:23:6b:63:b9:2d:8f:12:75:08:b2:36:d5:71:ae:c6:4b:ca:
         bb:72:02:dc:24:13:aa:b2:43:6f:80:e7:5d:92:70:0d:af:21:
         66:da:27:b0:22:e1:8d:d6:bd:7f:ff:02:67:7e:41:03:27:f5:
         c7:16:da:dc:8b:18:48:5b:95:fc:24:4f:6c:13:2d:30:81:b5:
         a8:1d:67:6f:4f:17:f0:62:6d:1d:f3:3e:94:99:bf:ff:af:b6:
         83:60:ce:08:33:63:30:7e:4e:19:79:5c:0b:45:a5:cf:c6:36:
         81:13:15:b5:dd:9e:95:f2:74:10:25:68:e0:d5:68:30:c1:47:
         8c:e3:c8:33:92:e5:dc:86:47:e4:88:85:70:b3:d9:be:3b:46:
         aa:48:dd:31:c7:44:db:4f:4c:92:0e:ce:a3:69:43:72:0a:9d:
         7f:2f:77:29:3f:b8:77:06:ab:f9:4d:c2:83:9e:13:7e:ec:95:
         af:ed:00:ea:79:cc:e5:33:89:86:8b:70:72:a9:c8:b0:0c:30:
         4d:8e:1d:4d:9b:92:e9:e8:12:e1:85:6d:ec:09:ca:f2:d5:7e:
         55:09:bf:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:52 2026 by rpki-client