Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa
File:                     a07bc41a-66df-3190-be8f-7d32ceb83809.roa (raw, json)
Hash identifier:          GYLdAOF0Y+sPBcCn2zhgARz/anPaeThmIe/YdfvdZvI=
Subject key identifier:   67:56:DD:08:18:DA:C2:75:8A:6B:A8:D1:1D:A0:A4:32:34:76:26:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E227442968B3B5799E99CE5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     36626
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:42:96:8b:3b:57:99:e9:9c:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=50af16f7-b7de-44e5-9d44-85f86f5f0f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:86:9b:7a:20:b1:e7:b1:9b:d5:8e:7d:85:
                    0e:a6:b2:33:ba:12:b0:94:b1:fd:89:0a:fc:40:e4:
                    0d:dc:6b:43:64:35:6b:6e:52:83:79:bc:47:22:9b:
                    b1:ad:16:d3:5f:4a:db:48:b2:f9:94:aa:ee:99:eb:
                    2e:66:67:83:59:58:31:08:bd:77:78:9f:79:3f:69:
                    65:45:61:44:b8:78:e8:41:4e:c7:58:0c:69:6c:be:
                    79:0a:8a:7a:09:77:58:46:aa:48:69:42:c0:4f:a3:
                    8e:2f:1c:bc:60:94:0b:85:9b:95:b4:04:15:53:76:
                    50:d7:94:f1:c7:af:59:62:37:32:73:de:88:ba:da:
                    58:e5:da:fd:50:1f:64:7a:15:e0:58:54:39:a0:ca:
                    51:90:c2:2e:03:cf:d3:f7:c7:d9:a3:55:75:78:f4:
                    7a:d3:f2:11:9b:41:b5:41:b2:8f:4b:f5:fb:83:23:
                    6e:f4:de:f0:c7:91:14:5c:dc:b3:13:6c:f2:bc:b2:
                    96:09:aa:ba:07:a1:47:fd:5c:f2:67:31:7c:75:04:
                    a1:0e:f8:b7:3b:d5:50:db:be:c3:86:71:4c:98:c4:
                    dd:ab:ce:f6:87:69:ed:ad:84:7e:f7:e5:e9:3d:39:
                    d3:03:8c:f9:b7:73:ed:0b:2c:15:1b:62:3c:b4:6c:
                    af:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:56:DD:08:18:DA:C2:75:8A:6B:A8:D1:1D:A0:A4:32:34:76:26:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:4d:97:47:6c:0d:36:01:86:38:78:9f:02:f7:35:c2:cd:d3:
         72:1e:cf:b2:6d:fa:15:85:15:e7:32:48:2d:23:9d:83:bc:b6:
         ce:67:c6:57:c9:96:41:0a:61:a2:a9:b2:e9:2d:51:ce:aa:cc:
         50:06:2e:71:b4:3e:04:e1:cd:7d:bc:23:d3:2b:ad:9c:95:5f:
         5b:df:cc:93:10:a0:06:36:05:2a:9c:d8:a4:68:4f:90:8c:32:
         6e:32:ca:aa:5d:69:cc:b3:2e:c8:a6:bd:55:57:c5:75:8a:77:
         d1:02:88:2b:ee:9f:18:73:85:dc:11:8f:34:e7:2d:aa:41:d9:
         72:12:ae:58:08:68:22:b4:67:ce:8b:e2:06:81:d8:b0:cc:e6:
         8b:59:7b:b0:af:c9:ee:47:74:ee:2c:14:32:59:0a:cb:7c:18:
         e4:64:b5:0b:9d:cb:8e:79:cb:a6:cb:60:cd:ec:b4:9b:cc:b2:
         f5:17:c8:8d:50:cf:8b:ba:77:92:bc:40:0f:cf:e7:1a:8c:d2:
         c0:3a:3c:a5:60:fb:7c:cd:33:b3:55:7a:da:78:9e:85:84:a7:
         ab:fb:15:97:50:c8:dd:50:1c:27:fb:15:78:d2:32:aa:07:d6:
         cd:88:f7:c2:49:aa:b5:62:bd:e4:15:72:bd:5d:4a:8a:b9:ba:
         b6:71:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:09 2026 by rpki-client