Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8904cb7-bab9-31df-b3d3-17c3ea2d2f16.roa
File:                     b8904cb7-bab9-31df-b3d3-17c3ea2d2f16.roa (raw, json)
Hash identifier:          720no/5ADUCKyymjdbeU3X7QX1Q8gKDR+PoAIvxqkPk=
Subject key identifier:   3E:DA:C5:17:B3:C1:23:ED:F5:0B:E4:D6:B7:26:A3:3A:B5:12:CF:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF1821DDC21284085B6029680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8904cb7-bab9-31df-b3d3-17c3ea2d2f16.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     397204
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:1d:dc:21:28:40:85:b6:02:96:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=035f1a6c-76eb-409b-a4c3-2502e3badc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:0b:92:74:52:43:af:d5:25:ac:2d:2c:35:
                    9b:7e:de:aa:11:25:45:78:11:b4:55:24:f2:56:d1:
                    9f:ff:f8:9f:ba:32:86:e7:8f:20:a3:1b:87:8b:4e:
                    63:6b:2f:84:02:7e:31:cd:15:67:d0:ad:17:1f:ce:
                    62:d7:f6:bf:27:0c:76:2b:9b:03:b0:7c:96:b6:4c:
                    8d:de:b7:9d:ab:df:21:18:e2:a6:7a:36:f5:ab:74:
                    05:d1:35:8c:e9:46:d7:bf:46:e3:0c:26:3a:eb:e3:
                    ed:31:7a:ef:a8:73:3a:68:89:42:62:5b:70:28:7c:
                    90:da:ba:0e:a3:f1:36:54:12:be:a2:96:78:34:07:
                    98:90:4e:4a:04:63:7b:61:fe:38:4b:ef:c8:c3:6a:
                    3a:e9:73:bc:43:d1:2f:be:e3:80:84:ce:1b:be:ee:
                    45:2b:1f:0d:6a:db:62:ff:72:c6:49:06:95:d5:80:
                    d9:1c:14:41:4e:fa:65:fa:b9:6c:ed:ed:49:6b:f8:
                    ca:e9:3c:ed:b7:51:5f:4d:15:e0:51:85:1c:19:7a:
                    f5:24:41:44:c1:ef:72:88:8a:34:64:d2:f9:34:af:
                    c0:4a:2e:1c:47:17:5c:f0:dd:8d:97:12:09:63:09:
                    52:95:0b:c6:90:5b:9d:18:ee:18:fe:4c:3b:bb:62:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DA:C5:17:B3:C1:23:ED:F5:0B:E4:D6:B7:26:A3:3A:B5:12:CF:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8904cb7-bab9-31df-b3d3-17c3ea2d2f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:45:02:1d:f3:09:fa:60:57:0c:a0:82:ca:3a:1b:dd:e6:aa:
         72:0f:22:b6:fc:37:f6:dd:ae:4a:32:bd:fd:bd:d5:0d:d9:04:
         e4:44:2c:e2:d7:f1:db:3e:1c:71:ba:e2:11:d1:22:65:5e:41:
         18:9b:b6:f5:a5:c7:23:80:5f:d8:1c:c5:6b:60:1e:fc:8a:4a:
         7d:84:93:fe:ce:8b:04:ce:e7:d7:0c:a9:42:ce:4e:0c:23:53:
         19:40:aa:ab:0e:49:18:91:3d:57:cc:39:05:2c:01:40:b9:d8:
         64:d3:85:6c:49:cb:46:3e:7a:91:f7:20:fc:09:bb:28:71:2e:
         ac:6b:0b:db:b2:ac:46:36:bd:3c:ff:d6:5d:c8:35:20:ef:56:
         52:15:cd:f5:c2:b3:a1:47:9c:55:8f:41:4e:8b:54:64:8f:ce:
         17:2b:98:27:31:b0:70:81:b7:e1:f0:c9:3e:07:38:fe:26:62:
         69:0c:ab:73:ca:86:b3:dc:db:bf:ee:f7:a0:a6:b4:41:69:a9:
         aa:18:84:07:fe:37:1c:99:3c:15:d2:92:28:f8:4f:b7:05:59:
         0a:fc:82:79:6b:b3:25:9a:31:5f:ad:3e:76:57:e5:8e:bc:96:
         d1:2c:e4:ba:15:7a:59:87:5a:9e:af:54:db:46:be:29:44:bb:
         47:5f:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:58:00 2026 by rpki-client