Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa5bec33-2d6c-3cf8-9ccb-8566b3787b21.roa
File:                     aa5bec33-2d6c-3cf8-9ccb-8566b3787b21.roa (raw, json)
Hash identifier:          N0zQVu6AjyER08dz32xqovMaOTmUXg2nsE6qm/csduA=
Subject key identifier:   78:E8:38:A0:FD:17:35:56:A7:D3:C5:E0:8C:F9:E0:F5:E8:81:6B:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DDE87FCE8C7CC9658A4293470
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa5bec33-2d6c-3cf8-9ccb-8566b3787b21.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     10515
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:87:fc:e8:c7:cc:96:58:a4:29:34:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=b749c13a-1e46-45c0-ba3c-e8707b206322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:90:7f:af:78:7c:09:78:26:c8:a2:d0:21:64:
                    34:20:06:01:0b:a3:c8:b8:da:3b:4d:4c:b1:d7:b1:
                    ba:01:11:56:b8:1f:fb:3e:dc:b6:05:89:d9:fc:95:
                    1d:20:6c:e5:de:6a:fa:09:3b:42:9b:bf:c1:a3:38:
                    c2:f3:4c:8b:13:2b:ec:37:4b:6b:4a:c0:72:cb:02:
                    bc:94:ec:67:d0:ed:d6:ea:a2:2c:7b:c0:fa:34:d4:
                    b9:f5:67:b3:14:ae:ab:f0:82:ef:46:c9:8c:23:bd:
                    07:31:53:cf:2a:b7:bd:c8:f6:e2:a9:92:b1:9a:be:
                    b2:24:9b:e7:af:b5:c1:d4:31:3f:3d:58:d3:fe:3d:
                    7e:c8:7e:3a:8c:8f:81:70:bf:1a:23:73:af:2c:25:
                    6b:db:88:47:26:50:c2:8e:7c:29:c3:fe:c9:9a:29:
                    a6:3e:ad:b4:89:db:45:07:46:2e:3a:18:a5:57:a4:
                    01:04:60:13:59:86:b8:ce:93:74:38:e1:af:44:be:
                    34:74:99:e6:3f:3c:79:ec:0d:8f:e5:4f:01:96:d9:
                    47:67:2f:d3:93:c9:fa:5f:30:d9:57:21:c0:1c:3d:
                    36:9d:de:2c:09:dc:73:84:f9:6d:39:ed:fc:bb:60:
                    1b:80:f8:48:e2:65:83:cb:d6:18:40:eb:22:27:fe:
                    f8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E8:38:A0:FD:17:35:56:A7:D3:C5:E0:8C:F9:E0:F5:E8:81:6B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa5bec33-2d6c-3cf8-9ccb-8566b3787b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:a2:9f:bb:65:38:21:ea:1b:9f:c2:49:d1:ce:0a:c9:0c:ae:
         cc:62:9d:5d:25:e0:a5:3d:69:71:b7:f6:d2:aa:2d:8a:ef:83:
         0f:44:7f:c1:de:d9:88:53:3e:73:63:05:33:6e:8a:73:60:5a:
         86:b0:73:51:9c:1a:7f:2d:1a:88:b8:5d:0c:9b:1c:c6:c8:ed:
         ec:8a:fa:77:1a:a0:e9:a0:b2:9e:70:6f:63:a4:d3:62:33:0b:
         85:ed:09:e7:f0:33:cd:24:60:31:d7:88:11:4c:5a:ea:31:b8:
         36:09:82:f7:df:09:da:c9:da:53:0d:2d:5d:a1:f2:0c:30:61:
         90:29:f7:ec:11:a7:ee:75:0c:12:17:9a:aa:ed:27:e4:93:28:
         ce:72:80:f0:69:e1:75:da:be:ec:61:8a:d7:bd:27:a1:29:5f:
         a7:af:dd:e1:24:df:09:b4:ea:17:93:01:b4:2e:3d:99:10:0c:
         5b:f2:be:94:16:b5:28:9a:24:94:5d:c9:db:39:f3:56:57:f3:
         a3:41:8c:2b:c2:b3:f1:ae:30:b6:9f:68:91:36:c0:24:81:2f:
         0b:d8:31:a5:6d:14:db:e8:90:e0:1d:6c:5b:ce:78:39:32:03:
         c8:3e:1f:80:2e:98:d8:ce:7c:41:c1:d5:20:bf:fe:6c:e0:b0:
         53:b2:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:24:20 2026 by rpki-client