Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d5c9192-e39f-3659-81f0-2c0a90fe0c10.roa
File:                     6d5c9192-e39f-3659-81f0-2c0a90fe0c10.roa (raw, json)
Hash identifier:          A6ePtAJTxsUFt8WLDve/CyLVFQKzIEcEgcTNEH5uI4M=
Subject key identifier:   D0:47:6A:09:B4:8C:73:D7:43:9C:A4:22:8B:78:CE:AC:37:E6:1E:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D59EAAF2BBFEAB93D1C789100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d5c9192-e39f-3659-81f0-2c0a90fe0c10.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     397205
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:af:2b:bf:ea:b9:3d:1c:78:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=303edab2-b84c-4ed4-90c3-933fc16bae94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1f:3b:c3:65:43:02:27:bf:f6:b3:f5:c9:5e:
                    fe:1e:4d:a1:b7:ee:c2:56:cc:32:68:1a:eb:18:42:
                    b7:8c:54:20:f8:a2:87:ab:4a:3b:85:c9:47:b9:6b:
                    b6:ec:b1:4d:b4:98:44:f3:a7:c0:18:4f:b3:83:1b:
                    2f:38:c2:5b:56:26:71:12:21:96:59:0d:d0:1b:5f:
                    bd:b0:02:ea:d2:d2:3f:44:b6:39:3b:10:2d:a6:bb:
                    1c:c9:95:3c:5e:52:de:79:77:4f:ec:bf:4b:79:22:
                    a0:fd:55:06:38:26:64:3f:24:75:9f:89:2e:bf:3a:
                    c0:37:4a:4e:c0:8c:f5:5e:4e:2f:78:8b:fc:a5:8b:
                    7e:14:39:ec:19:c0:38:4f:b3:f7:08:80:d6:28:32:
                    08:4b:80:2d:b1:78:ff:50:00:55:b9:f1:db:8b:d4:
                    59:4f:6e:47:2c:7f:c6:70:7e:f9:6e:64:bc:38:c0:
                    75:6b:ac:6d:ce:25:72:9f:02:69:7d:e5:cb:7d:87:
                    1f:34:17:15:b8:17:9f:b6:b1:6f:80:23:68:a2:18:
                    45:5b:e4:5e:fe:f9:0a:e1:80:36:7f:ef:68:fb:22:
                    0b:5c:6f:93:9c:e6:43:89:95:df:d9:47:44:e0:34:
                    d5:be:5d:10:0c:4b:3c:54:b4:c1:21:2f:41:13:2a:
                    e6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:47:6A:09:B4:8C:73:D7:43:9C:A4:22:8B:78:CE:AC:37:E6:1E:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d5c9192-e39f-3659-81f0-2c0a90fe0c10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:09:0c:02:e7:67:e7:6e:0b:74:ff:48:cb:4a:dc:cf:9c:dd:
         d6:88:b1:9c:1d:5e:25:90:78:34:45:5b:7d:e3:ec:41:d7:95:
         17:57:6a:d0:fa:2e:e3:9e:17:2a:b8:b6:87:79:1e:d8:4f:39:
         0e:61:59:65:99:f2:e4:15:47:34:09:2d:d7:35:34:97:d7:45:
         4d:67:62:f1:ff:71:14:c6:51:13:62:a2:eb:9c:3f:d4:d3:0e:
         48:b5:76:7c:c4:82:94:c3:a7:a5:66:b2:45:73:6b:1c:f5:cd:
         a6:10:df:e3:6c:0e:03:78:45:26:52:de:9f:3f:b7:73:43:89:
         22:75:0b:4d:ec:c8:bf:87:48:7c:ce:c7:82:19:a8:ab:b8:3f:
         f2:14:ac:91:43:41:04:74:15:2d:ed:b5:d9:05:56:0f:a8:23:
         d7:0a:a9:eb:d0:18:93:3d:a6:8d:09:a7:e4:25:12:a4:75:4e:
         b3:28:da:80:29:1b:95:fa:c3:9c:78:f3:a6:e8:4e:e3:3b:f8:
         a8:da:f8:84:6e:33:a8:2f:82:c1:cf:d9:c2:2e:e6:85:e9:fa:
         df:73:a1:59:71:96:8d:a3:7c:03:cd:c0:ba:e0:1a:79:c5:88:
         6d:45:4c:11:dd:00:3a:f0:2a:e2:92:fe:23:01:48:49:b8:c4:
         50:61:bd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:34 2026 by rpki-client