Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbbe8f97-c7eb-373f-88e0-0fed86111b1e.roa
File:                     bbbe8f97-c7eb-373f-88e0-0fed86111b1e.roa (raw, json)
Hash identifier:          7lRhHULvKmLceCI87Zoyl8Ze2BaFfCWDUCuzXDlcA+8=
Subject key identifier:   A1:1B:32:F0:D7:7B:6A:7F:A3:6A:F2:9E:A2:2E:C1:D1:2C:E9:82:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5E1A4532E44A53FCF3748CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbbe8f97-c7eb-373f-88e0-0fed86111b1e.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     396546
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:45:32:e4:4a:53:fc:f3:74:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=4dd4d907-12b7-4e71-84e1-8e8aa6df8325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:4e:92:1d:bf:a1:bc:99:5a:57:4d:85:04:
                    76:55:e8:01:fc:ed:2c:b8:3e:e6:40:7c:22:65:4e:
                    6c:c4:fc:05:a2:de:7c:41:94:24:18:ec:f0:d0:bf:
                    cd:fe:0f:cf:f8:f2:5a:a6:e7:e3:a4:5a:e0:5d:48:
                    66:41:1f:23:bd:03:09:aa:0c:b3:fc:1a:74:89:7e:
                    9f:b1:03:7f:bf:d3:0f:61:9a:b1:b3:b1:4e:c2:4b:
                    6b:b0:c6:f9:22:e0:9b:5e:1f:4d:20:a6:9c:8b:72:
                    ec:cb:ce:67:8c:60:89:27:36:31:e9:c2:79:f5:8b:
                    18:fe:77:63:4c:57:6b:82:9e:4e:d1:5f:f8:e5:30:
                    95:48:04:39:25:f4:cb:65:58:3b:fb:c8:c9:f5:89:
                    01:11:f8:4c:5b:12:36:6a:e3:36:1d:0f:fd:47:45:
                    75:c3:03:b0:12:08:27:a7:0e:c2:b0:56:19:08:c0:
                    b5:1e:67:1e:7d:9a:18:55:7e:c7:bb:69:62:36:b6:
                    03:70:43:4d:35:3b:d5:d3:ff:6e:86:87:56:9a:54:
                    b0:ba:8f:39:8f:bb:6c:ec:0c:46:97:db:f6:bd:a4:
                    dd:b6:02:18:f5:c8:49:be:be:09:08:a1:c1:ee:cd:
                    de:10:62:1d:17:48:0f:80:ee:a4:fb:93:9d:52:59:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1B:32:F0:D7:7B:6A:7F:A3:6A:F2:9E:A2:2E:C1:D1:2C:E9:82:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbbe8f97-c7eb-373f-88e0-0fed86111b1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:17:a6:7d:11:cd:a5:27:af:35:c3:bc:af:3b:48:26:fb:fd:
         7a:40:59:50:7d:21:62:7f:95:8a:cc:a0:da:e0:00:e7:93:41:
         b1:1b:ef:2c:f5:29:48:65:10:b3:a1:64:27:49:7d:0f:b2:3e:
         c1:64:e3:26:5a:44:bf:c6:2c:40:66:e2:e7:e2:29:71:9e:13:
         eb:7e:5d:ba:37:4d:e5:43:7c:b8:c8:7a:37:37:98:3b:7e:41:
         a8:7b:ac:fd:d0:e4:e7:7c:44:a7:3d:60:4d:ff:cf:c8:e4:16:
         90:b9:ff:eb:88:6a:92:fb:8a:a3:2f:9e:d5:a1:94:9b:0b:df:
         c3:10:50:b9:f5:2c:55:39:a9:68:e6:21:9e:e1:e9:77:a1:32:
         0e:4e:87:2c:3c:5d:27:23:04:fe:c6:35:61:04:0f:37:a9:c0:
         ec:27:cf:2a:d9:36:14:99:8b:58:6a:dc:3d:ec:10:4a:8b:27:
         0d:73:66:1b:77:11:47:ad:fe:1a:a7:6f:fe:71:44:49:3d:9f:
         e0:46:b3:b4:24:23:15:1a:7d:4a:6f:52:12:54:4f:40:ec:7e:
         d6:2f:26:ac:01:f6:9d:c4:21:6b:fa:32:77:d8:2c:81:f4:27:
         0c:b5:f1:29:b3:fe:ee:99:3b:e3:eb:c8:de:11:9f:9d:5c:0a:
         f9:e1:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:26:05 2026 by rpki-client