Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/695d8639-0c31-3642-9847-d3d36aa9ed82.roa
File:                     695d8639-0c31-3642-9847-d3d36aa9ed82.roa (raw, json)
Hash identifier:          15p3cg+T8ZVdoF6KyP4qIVNi8hBpwDLK7XefMgW/GPg=
Subject key identifier:   DF:5B:32:CA:58:FC:D0:1F:C3:53:FB:91:F8:9D:A4:2E:D2:12:12:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4E1D0A12941A3A5C9180440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/695d8639-0c31-3642-9847-d3d36aa9ed82.roa
Signing time:             Thu 14 May 2026 14:07:56 +0000
ROA not before:           Thu 14 May 2026 14:07:56 +0000
ROA not after:            Wed 12 Aug 2026 14:07:56 +0000
asID:                     36632
IP address blocks:        2001:500:30ff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:e1:d0:a1:29:41:a3:a5:c9:18:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 14:07:56 2026 GMT
            Not After : Aug 12 14:07:56 2026 GMT
        Subject: CN=a8bd4ec2-68b7-4f38-8c17-e5c62423534a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d0:ce:60:c1:55:32:42:d9:95:00:18:bc:73:
                    de:7a:dd:10:44:1d:de:8c:8a:e3:d3:db:62:d0:a8:
                    56:90:5a:58:e6:ae:8a:08:23:82:e8:a2:19:6f:c9:
                    98:36:4d:e9:32:88:59:a7:db:1b:84:da:fe:ae:e1:
                    09:6c:df:4f:75:d4:b8:e1:c5:ee:16:6b:74:1c:35:
                    b5:01:9b:fe:da:2b:76:3f:c4:83:90:28:6f:64:98:
                    d8:0b:55:63:d6:f6:24:61:8e:9e:eb:60:b3:68:5d:
                    70:42:33:93:3c:80:eb:47:66:8c:d9:a4:80:d0:45:
                    1a:67:87:31:1b:88:8b:ac:2a:cd:c4:19:e2:8a:6f:
                    6e:01:65:bc:af:ab:76:1f:58:2b:50:7c:bb:51:a1:
                    e9:b9:ae:17:3f:9b:ef:bb:b4:a4:73:df:6f:84:ed:
                    c4:cf:af:28:55:37:8c:51:43:cd:c4:70:0d:ad:fd:
                    6c:b2:2e:6b:d7:66:fc:33:54:ce:74:4b:4d:c1:91:
                    73:8f:5c:0a:64:ef:71:e2:ce:c9:4b:7b:8a:c2:5f:
                    44:a0:91:1d:5f:87:1e:82:d9:73:ac:a2:15:da:8b:
                    5b:5d:71:9a:2f:66:d4:17:e9:db:67:75:e8:d7:d2:
                    ff:90:c5:da:59:7a:e1:95:f4:e9:68:62:a9:d2:a2:
                    3b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5B:32:CA:58:FC:D0:1F:C3:53:FB:91:F8:9D:A4:2E:D2:12:12:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/695d8639-0c31-3642-9847-d3d36aa9ed82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:9f:e7:37:90:e8:bf:ef:dc:c1:17:20:60:20:11:ae:85:34:
         42:e6:ba:e9:05:a4:05:9c:07:fe:13:43:ed:d1:2a:eb:b2:54:
         c1:68:3b:40:81:65:66:4e:bb:a7:68:96:b9:da:cd:06:97:29:
         85:d9:f0:0a:84:77:e8:4f:e3:29:74:fa:e4:ac:af:52:bd:ce:
         34:f2:6e:4c:d3:7d:bd:5b:e3:0b:29:c4:c5:e3:07:68:c2:15:
         7a:c5:8f:dd:27:76:ba:2a:8f:90:69:4d:67:cb:9a:38:22:77:
         9a:e3:25:c5:4c:cf:10:75:01:c6:32:24:d2:ba:74:9a:a6:a9:
         39:ea:75:58:f2:4d:c8:60:c6:62:e6:0c:27:92:70:c7:aa:3f:
         b4:03:97:23:0f:cc:8e:cf:fb:eb:46:55:db:13:a7:20:4a:fb:
         1a:b4:4f:54:76:85:ef:0d:0b:1d:56:95:da:71:2b:d4:3f:a2:
         58:62:ca:3c:e0:db:00:76:a8:36:2c:f0:32:7a:5d:27:12:58:
         47:74:8d:70:92:5d:4e:26:24:27:1c:b9:9b:17:e9:33:17:00:
         52:b3:9f:ef:2b:6f:37:cd:58:b6:24:2e:51:ad:de:31:89:1c:
         cc:54:5e:4e:9b:a5:ea:5c:27:6a:4f:e3:7a:b9:0e:cc:8e:ce:
         21:c7:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:17:36 2026 by rpki-client