Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/735c6b65-82cb-321d-8c5b-11374f517297.roa
File:                     735c6b65-82cb-321d-8c5b-11374f517297.roa (raw, json)
Hash identifier:          IzslJMzxLuGkFrQ9vbTNMVFqP4cTIMzUPMvf21FQhUk=
Subject key identifier:   50:D8:96:38:E6:65:22:34:29:C3:98:3E:E6:98:3D:F7:A9:B1:E6:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E09F2567423954D79251D4980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/735c6b65-82cb-321d-8c5b-11374f517297.roa
Signing time:             Tue 02 Jun 2026 14:19:04 +0000
ROA not before:           Tue 02 Jun 2026 14:19:04 +0000
ROA not after:            Mon 31 Aug 2026 14:19:04 +0000
asID:                     396583
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:f2:56:74:23:95:4d:79:25:1d:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 14:19:04 2026 GMT
            Not After : Aug 31 14:19:04 2026 GMT
        Subject: CN=aa5aa605-5e4f-48af-827b-9983e07e8e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:db:83:d7:9f:0b:2c:9c:9c:c5:8e:89:a5:9b:
                    1d:a8:2c:8d:30:6e:ce:32:4d:32:e8:f7:8f:de:c9:
                    d5:7b:1c:73:fe:85:c1:9d:7a:0b:10:00:bf:a7:98:
                    3a:f1:b8:53:37:66:92:9c:cd:4b:9a:9d:c0:73:c3:
                    bc:87:a6:91:35:a4:21:7b:a7:d5:1d:bc:7b:50:14:
                    ec:c7:d1:11:54:1f:29:d1:15:e9:9c:2d:7b:e6:a0:
                    d7:a3:f9:18:e1:fe:18:6c:bb:2c:1d:58:05:23:42:
                    63:5e:81:ad:56:2e:21:26:0f:e9:2f:0a:3e:65:67:
                    02:3b:3f:0a:0c:54:6c:e0:f3:6f:09:ed:7c:ee:48:
                    d9:37:81:35:13:e2:fa:e4:eb:ef:29:e9:ab:0e:d7:
                    be:fe:1f:fd:18:86:d3:f4:20:d2:fb:8e:88:5d:45:
                    f2:17:ee:13:69:ac:56:e5:01:69:47:d2:77:e1:42:
                    5d:71:62:f2:50:44:3b:58:81:36:36:72:5e:41:6f:
                    67:1a:f4:35:dc:82:6b:62:c3:fd:a1:1a:69:ca:32:
                    56:a7:49:52:f6:37:ac:19:c9:b9:64:ea:d8:32:78:
                    51:4f:18:cc:45:24:9e:9e:9c:09:3c:46:fa:31:cd:
                    15:66:38:41:2e:e6:11:c2:10:c0:69:47:1a:23:17:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D8:96:38:E6:65:22:34:29:C3:98:3E:E6:98:3D:F7:A9:B1:E6:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/735c6b65-82cb-321d-8c5b-11374f517297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c4:3b:b2:fb:59:e9:4f:d1:18:cc:ea:cc:e7:17:9d:17:c4:
         d0:d2:6a:20:14:16:08:77:10:c4:67:d3:44:0f:0e:28:f7:bd:
         ff:39:22:e3:ab:68:a0:94:18:cb:cf:42:36:48:00:c8:85:cb:
         5d:f3:22:9f:45:fa:bf:e9:15:c3:8e:b8:7d:ad:fb:ae:19:54:
         f9:63:36:d3:d1:10:fb:38:33:bb:6d:57:35:fc:59:f4:4e:7f:
         01:5c:55:0b:b7:bc:80:1e:f1:ab:84:aa:5e:77:0f:14:64:ba:
         a1:5c:a3:62:62:87:1c:ae:32:58:ef:aa:26:a6:a9:62:2e:cb:
         74:74:b2:e7:81:fd:ad:a6:d1:6a:2c:63:6a:37:4a:f8:03:ce:
         f7:b3:ed:65:24:00:09:51:c2:94:76:6b:af:de:ec:db:9f:fd:
         d2:ab:dc:45:cb:7a:03:ee:0d:ee:52:c3:2e:5a:33:29:60:e8:
         c5:a0:d4:2b:a0:5c:70:d6:31:6b:00:13:d5:f4:4d:ec:4b:2c:
         3e:e7:6d:25:36:13:4a:89:a1:b6:0d:c8:c8:02:b4:02:ba:04:
         e7:39:c4:0c:c3:bd:b2:50:6a:84:08:39:21:19:e1:e5:c9:66:
         fb:89:24:15:52:63:78:db:9f:b2:8c:44:e0:e6:3f:1a:bf:59:
         0e:29:ce:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:51:24 2026 by rpki-client