Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a893d6b2-2c4b-32ec-bf4b-7229e6e4ad33.roa
File:                     a893d6b2-2c4b-32ec-bf4b-7229e6e4ad33.roa (raw, json)
Hash identifier:          rLhtDkKMKQQykcetAv0JfwQgoggCeTkhE8wL1EpazVE=
Subject key identifier:   FE:A4:69:13:2D:99:6B:99:00:D2:F3:F5:D0:28:BC:CA:E1:9C:7D:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA18DA51658BA79755CD540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a893d6b2-2c4b-32ec-bf4b-7229e6e4ad33.roa
Signing time:             Tue 07 Apr 2026 14:30:12 +0000
ROA not before:           Tue 07 Apr 2026 14:30:12 +0000
ROA not after:            Mon 06 Jul 2026 14:30:12 +0000
asID:                     396613
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:8d:a5:16:58:ba:79:75:5c:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:12 2026 GMT
            Not After : Jul  6 14:30:12 2026 GMT
        Subject: CN=75ce2200-eb7b-4651-b335-d1c09495d16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e9:fc:6c:bd:b6:98:83:51:2b:60:a3:c3:5f:
                    c5:78:dc:c6:10:86:ea:fb:fe:d8:52:6b:df:13:af:
                    44:b1:22:85:5a:24:3a:eb:c6:40:82:0c:af:57:0a:
                    37:0e:2e:44:40:8d:44:40:b6:50:07:ce:c5:f6:c4:
                    3f:66:0d:df:98:65:61:c9:3e:6a:39:8d:69:33:78:
                    1e:3c:b5:99:b9:4a:42:b8:4e:7d:6d:95:14:95:92:
                    84:9c:b0:47:e0:ea:c8:e9:39:7a:5c:3b:97:a2:bd:
                    4e:2b:9a:7b:ce:b8:4b:c2:58:a7:6a:c4:71:b8:4f:
                    0d:96:08:b6:d6:50:6e:0b:b7:e8:02:69:c8:c8:7c:
                    55:38:d2:32:27:11:ae:9a:05:9c:df:4a:cb:9b:e5:
                    cf:12:37:47:b0:60:08:cb:dd:12:db:80:9e:2c:1b:
                    d5:95:c7:6b:8d:63:10:00:a0:f1:96:c5:3d:74:d9:
                    6e:c8:10:d4:5e:c2:5a:5a:6a:84:49:96:bc:0d:f7:
                    77:90:07:94:24:1e:9a:9e:fa:6e:1c:45:4e:b3:a0:
                    f2:f8:90:e6:25:d0:9e:42:25:de:d6:fe:1d:aa:f1:
                    ce:db:1c:16:89:2b:34:6a:89:66:06:70:d2:0b:b8:
                    14:4a:94:4c:88:04:d4:7e:50:a6:d1:d5:ab:3a:ed:
                    c2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A4:69:13:2D:99:6B:99:00:D2:F3:F5:D0:28:BC:CA:E1:9C:7D:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a893d6b2-2c4b-32ec-bf4b-7229e6e4ad33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:9a:2d:89:3a:b1:60:a8:29:3c:19:05:ed:cc:2b:2b:ab:10:
         54:44:c2:d3:4b:1e:17:92:dc:ef:61:93:93:8a:33:5a:ca:b4:
         18:c0:e0:3e:99:f0:0c:02:73:e1:91:84:1c:80:32:65:9c:c7:
         42:8d:1a:37:76:c8:2f:39:4c:13:39:97:a9:ff:f6:d3:11:0e:
         8f:4c:a1:12:9e:3d:77:31:de:59:9b:cf:19:ff:6c:bc:43:77:
         1a:9c:20:ae:bc:c8:1b:b7:93:46:5b:ef:d2:21:62:57:99:d5:
         ea:3d:96:16:24:94:ac:a4:77:6b:d9:35:48:5f:82:fc:9c:34:
         7f:73:2f:8a:d8:f9:6e:60:1f:5c:11:3d:ac:88:91:e2:8e:f3:
         a9:57:52:1f:74:b7:41:8d:21:b7:bf:4a:37:78:1b:01:ac:5f:
         8c:71:8e:b9:bc:6a:40:7f:e6:09:2d:6c:c9:4d:29:d5:b6:59:
         39:c7:b0:bf:cd:6a:c7:ee:89:ef:5b:1d:9d:bb:96:d7:12:62:
         81:33:71:7a:22:a6:a4:db:fd:03:78:90:f4:e7:94:4e:df:97:
         1e:20:5d:84:89:70:80:69:28:8e:92:64:7c:75:cf:29:4d:f0:
         e5:a4:a3:f4:1e:29:b2:a8:25:d6:1c:4c:52:a0:a4:e1:6a:88:
         57:b3:1c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:15 2026 by rpki-client