Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a4eae5c-1a24-3da4-ab88-d7170df76ca1.roa
File:                     6a4eae5c-1a24-3da4-ab88-d7170df76ca1.roa (raw, json)
Hash identifier:          Uvi3ubBvpJADRH2ZnQ7lwcsYDrf2R3DeDJDRpbBVPKk=
Subject key identifier:   6D:35:9F:41:9D:30:73:FA:90:C8:3B:C1:11:42:F2:F7:3E:B5:3E:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0006356AE9CCAE6AC5704580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a4eae5c-1a24-3da4-ab88-d7170df76ca1.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     25485
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:35:6a:e9:cc:ae:6a:c5:70:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=73fc536d-f354-4c83-a760-e771081125ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:ab:f3:0c:a0:25:2c:14:3f:7f:62:a9:54:
                    0e:96:ef:0c:de:d9:41:c9:b7:59:60:10:bd:6a:d3:
                    f2:4d:67:fa:fd:0c:4e:92:f3:13:8c:52:5e:50:0d:
                    1a:01:d1:c2:78:2d:bb:a9:10:f7:7d:f1:d4:d6:a2:
                    f7:6e:67:5f:21:17:4c:4e:7c:a6:d5:04:ab:b2:fe:
                    10:a9:3d:1f:18:04:06:05:d6:fe:99:9b:56:c5:5b:
                    08:af:98:96:d5:32:66:59:1b:76:fa:70:5b:89:53:
                    23:c0:86:c5:33:f9:06:ea:4a:54:64:06:0e:41:b1:
                    7c:d0:91:51:f6:c7:03:5b:7c:b5:85:ba:fc:69:a1:
                    35:30:87:77:1a:f2:58:0a:d6:8c:61:da:bb:66:b6:
                    f5:06:62:59:68:50:3d:4b:88:cd:1c:43:28:1d:d0:
                    63:12:6a:4d:ae:af:87:ed:64:84:a0:6c:93:f4:02:
                    0e:17:99:5c:e5:d9:d9:9f:f0:13:55:6a:48:85:e5:
                    e9:31:9a:59:1e:7f:0e:e8:80:b6:16:7f:db:9b:c4:
                    ee:6f:7e:d6:dd:9d:84:e2:fc:9d:88:c7:6f:04:b9:
                    e4:76:43:42:16:57:6c:ca:72:08:ed:55:77:aa:30:
                    60:c7:37:e2:7a:e0:22:41:83:0f:e3:1a:3e:55:5c:
                    f3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:35:9F:41:9D:30:73:FA:90:C8:3B:C1:11:42:F2:F7:3E:B5:3E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a4eae5c-1a24-3da4-ab88-d7170df76ca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:4a:95:01:4b:ba:d9:34:15:20:7b:58:83:76:2d:ba:8f:e7:
         7a:75:8d:79:4f:4c:d9:29:ca:5b:dd:7e:23:36:70:ca:74:39:
         6b:b8:3f:e2:b1:05:64:2e:f1:a2:6b:24:1e:39:6d:b0:4d:11:
         c1:a2:e3:0a:ac:d4:55:d3:c4:28:24:bc:31:e4:ca:01:13:dc:
         ce:cb:19:64:46:25:cb:e6:85:a0:33:23:23:81:6f:d4:01:5e:
         05:1b:22:73:e9:fe:7c:c5:c7:32:b9:d7:4c:94:19:14:8e:85:
         2f:6d:58:8e:94:ea:f9:c0:8c:35:ff:e7:c3:36:7a:d6:a2:61:
         b5:d7:ad:36:09:fb:d8:82:eb:2c:a5:d9:b6:58:65:6a:fe:2b:
         fb:c6:c0:be:57:55:03:aa:6a:6a:f1:c3:44:65:ce:f2:ae:fd:
         95:3f:df:97:87:bb:20:9a:f6:d3:02:a3:19:10:79:b6:93:02:
         ec:a6:4d:c7:0b:27:e5:fa:e0:78:c5:6a:b3:17:ab:cc:b3:9c:
         bf:11:50:5f:ec:f3:99:d8:75:54:03:a2:fb:76:64:17:05:ef:
         30:d4:ac:05:4e:e0:06:3e:c7:5e:1c:a3:5f:45:53:82:53:13:
         02:52:89:d3:11:0a:1a:5c:be:e5:b8:6a:ca:0f:2a:a1:cb:62:
         15:a9:6d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:07 2026 by rpki-client