Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/685354bc-30d2-308b-8a96-ef16cd02b0bc.roa
File:                     685354bc-30d2-308b-8a96-ef16cd02b0bc.roa (raw, json)
Hash identifier:          lgRQIID5M8GAhaG2dd8s/h90+bKa2L1JYJHXq91ADSA=
Subject key identifier:   E0:AC:09:4F:14:B5:D3:CC:5E:00:A4:C6:48:3C:8B:06:C1:D0:0D:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE5053B622A8BA44226F360
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/685354bc-30d2-308b-8a96-ef16cd02b0bc.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396572
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:05:3b:62:2a:8b:a4:42:26:f3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=9d6b2167-9e39-426a-8bf3-8bbab0139d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:da:3a:ed:83:34:ff:3d:a5:dc:cf:b1:c4:
                    61:9e:33:73:ae:62:c8:8e:01:f8:87:2a:dc:3f:6c:
                    48:b0:b7:c1:77:30:f5:fa:52:b2:ca:77:39:46:fd:
                    fe:2d:93:cf:51:48:1a:30:9a:e6:44:d9:ad:77:04:
                    ef:20:5a:bd:9b:ba:17:0d:2e:b4:49:0c:23:1d:d2:
                    11:cf:5c:fa:ef:d4:ed:79:45:d0:87:be:6d:fd:56:
                    98:0c:79:1d:1b:8b:f4:0b:c6:f4:21:35:78:08:b2:
                    34:bd:2c:8c:23:e1:91:2c:7a:76:82:4d:78:3e:a7:
                    2b:77:04:2a:41:ac:5e:b0:33:cf:f6:8d:80:fa:ca:
                    79:fc:54:56:73:4b:3d:1d:d2:f7:93:66:23:af:95:
                    37:95:d8:f7:4a:f1:40:76:58:0a:cd:10:77:de:aa:
                    a7:0f:ff:02:d7:ac:78:73:65:17:40:36:cb:05:c0:
                    e6:76:cd:e7:f7:52:e4:e5:41:38:b5:91:56:e8:9b:
                    b1:8c:0b:03:91:5e:1b:0e:88:68:ea:0e:39:64:ca:
                    55:ca:53:7e:89:e1:ef:83:1c:6a:2c:1d:90:70:07:
                    f5:89:19:15:98:1d:55:32:6f:29:84:0a:a3:56:2c:
                    5a:2e:86:57:58:f0:57:0f:05:c0:04:a7:72:5f:91:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AC:09:4F:14:B5:D3:CC:5E:00:A4:C6:48:3C:8B:06:C1:D0:0D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/685354bc-30d2-308b-8a96-ef16cd02b0bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ce:90:de:f6:88:60:e1:2f:35:ca:68:cb:29:bf:ed:b0:12:
         7c:d6:e9:4d:fc:f1:de:5c:f0:91:fb:d6:4d:14:40:63:75:4b:
         e7:cc:d5:98:d0:19:ee:07:5c:56:97:d9:36:5a:b4:a7:fa:75:
         09:ab:0a:d0:56:34:58:e4:30:2c:66:a8:a9:19:35:39:69:34:
         5a:7f:75:3b:ea:a4:4c:1d:5c:9d:7d:b1:8a:e4:f6:d7:fd:1c:
         2c:9d:a4:55:bf:48:0a:de:38:10:e9:e3:8e:5a:3a:e2:b1:09:
         51:e1:ab:c1:7e:20:8b:a1:e7:0c:84:80:f5:e5:58:a2:46:46:
         8f:5d:19:55:db:7a:ef:1a:eb:16:51:79:cc:52:f0:32:61:31:
         82:8e:a5:90:df:73:fd:c6:25:a3:ed:39:fe:3b:50:c0:b9:fc:
         9f:62:7b:a0:9c:d4:29:fe:71:be:ab:83:dc:d9:c6:c2:dd:12:
         c2:5f:91:ab:07:9a:94:cc:00:87:6c:f0:be:70:41:e7:25:6b:
         32:e2:40:89:eb:73:c8:ef:f5:25:71:14:52:85:9a:ab:c8:e3:
         81:82:e1:23:fc:a3:44:bb:8a:46:2d:79:69:f5:0c:01:f4:b2:
         ce:e9:3c:ec:71:10:22:f9:75:4d:b3:95:8d:ea:e8:d6:76:71:
         40:4f:24:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:37:08 2026 by rpki-client