Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846e936c-c924-3238-a87a-fca4fbc1f6cb.roa
File:                     846e936c-c924-3238-a87a-fca4fbc1f6cb.roa (raw, json)
Hash identifier:          xlCvG1PiXOcjAtr46H4uOuXKytHB+FD8ctDIQ8dhOao=
Subject key identifier:   BD:0E:0F:E7:13:84:3F:94:F7:D8:F8:16:D8:77:64:E1:D1:3A:FE:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA18EE1AA854B971B498130
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846e936c-c924-3238-a87a-fca4fbc1f6cb.roa
Signing time:             Tue 07 Apr 2026 14:30:12 +0000
ROA not before:           Tue 07 Apr 2026 14:30:12 +0000
ROA not after:            Mon 06 Jul 2026 14:30:12 +0000
asID:                     396590
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:8e:e1:aa:85:4b:97:1b:49:81:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:12 2026 GMT
            Not After : Jul  6 14:30:12 2026 GMT
        Subject: CN=ab39af16-04d7-4db2-91bb-139bde9bc490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:74:e3:61:a1:e7:ea:ba:55:33:ad:7e:ef:5f:
                    f3:bf:2e:9a:ef:d3:cf:63:b7:1c:ef:e3:47:34:dd:
                    27:62:da:66:3c:6c:85:45:42:c9:4c:cd:41:9f:f0:
                    42:23:c7:43:a5:fa:5c:79:62:43:9f:40:4c:e0:b9:
                    ff:54:74:54:72:31:ca:6b:e4:80:c7:13:53:03:9e:
                    5c:86:6a:a2:f1:52:0d:0e:39:47:bd:2a:0b:b4:88:
                    8d:ea:8b:4d:cf:c2:74:69:48:a7:02:08:e6:2c:e5:
                    96:6d:94:73:14:12:6b:99:78:36:a7:8c:44:dc:fe:
                    e8:71:c0:f6:e7:dd:b4:37:f4:8d:69:45:67:cc:9e:
                    a5:c8:47:a7:49:52:2c:6c:fc:c7:6d:38:be:1b:e0:
                    b6:c8:b0:a1:c6:30:c0:0e:33:5c:b8:22:19:8c:54:
                    50:80:f9:62:8f:46:ce:70:7d:b0:b1:af:0d:66:03:
                    fe:2c:5b:43:d1:c4:db:05:99:2b:88:c7:e2:df:14:
                    3a:92:56:78:24:09:a5:e6:ec:bd:e7:e7:2c:1b:87:
                    e0:da:98:25:45:91:81:19:a8:c0:8f:e9:a6:27:50:
                    01:91:e4:f7:f9:b2:1c:60:f2:1b:43:ab:59:b0:00:
                    ec:a9:38:6f:ef:5d:fb:a3:32:3b:60:2b:0d:48:90:
                    ed:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0E:0F:E7:13:84:3F:94:F7:D8:F8:16:D8:77:64:E1:D1:3A:FE:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/846e936c-c924-3238-a87a-fca4fbc1f6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:02:48:65:cd:c2:bd:20:c9:d1:72:4f:5f:bd:73:b9:ab:79:
         ab:9d:e0:e1:06:b9:e3:6a:ae:66:07:0e:4e:ca:b8:86:cb:76:
         ee:24:ed:ef:2e:f6:ad:bc:b6:51:7f:51:ad:37:c5:03:a0:a9:
         46:81:97:40:29:9f:47:33:0d:d2:ad:8b:0f:f5:52:2a:ed:be:
         5f:e0:c6:44:3a:4e:7b:90:60:b4:28:3b:60:d5:cf:e0:bd:8e:
         f3:11:7e:49:7b:bb:68:36:f8:2b:5b:36:ce:fa:ee:e8:c5:39:
         28:d8:fd:b9:78:c2:f9:34:26:6a:b4:fc:9f:79:70:0d:7f:0f:
         34:c0:47:ac:11:35:57:30:35:4d:1a:85:31:92:85:ea:a0:c2:
         5d:4b:05:bf:f7:ba:1f:91:9a:8c:48:38:b5:a3:1c:d0:44:0c:
         1e:46:a1:ac:14:7b:02:af:d9:94:ba:e6:29:8e:5a:b0:f1:d0:
         0f:b3:57:da:ba:8b:2e:3f:5f:e1:99:43:d8:c0:bd:b0:24:87:
         b7:dc:8f:fa:68:a1:7d:50:e5:97:ec:d0:f7:1b:fc:0b:2c:6c:
         3d:6a:cc:8d:7c:15:2a:c4:1e:10:16:ff:a9:05:09:77:ba:80:
         d1:e7:6f:4e:92:f2:c4:40:f1:08:83:46:92:74:35:d2:d7:1b:
         7b:31:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:57 2026 by rpki-client