Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c486917d-0dd4-3f79-add9-aade1b70ebab.roa
File:                     c486917d-0dd4-3f79-add9-aade1b70ebab.roa (raw, json)
Hash identifier:          FkK4Ied4n/pYhWcvghho9d433DUmm5xwcanHUJiDneM=
Subject key identifier:   49:0E:FA:9B:04:C5:AE:C1:5E:E2:FD:80:5F:AB:E9:CA:28:F7:3C:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA788D4466C49A5C4314183C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c486917d-0dd4-3f79-add9-aade1b70ebab.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397212
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:d4:46:6c:49:a5:c4:31:41:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=10046c5d-2960-4122-a054-70ddedda8ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d5:34:a1:19:9a:c5:68:c3:94:40:d8:ec:bb:
                    52:09:c1:3f:43:d2:db:e5:e0:05:18:aa:17:f3:62:
                    de:f1:48:97:db:ef:3f:63:67:c5:17:1c:93:e9:c8:
                    32:19:3e:57:ea:7a:fe:e8:53:50:e4:45:e7:67:6a:
                    cd:5b:2c:35:bc:6a:a1:59:ac:5c:ed:6f:8d:4f:f6:
                    20:5a:e7:a5:79:fc:ba:e7:71:5c:e7:d3:1c:16:ab:
                    b2:43:3a:bd:52:22:95:d8:ac:dc:5b:dc:60:3c:d4:
                    4b:45:df:a8:22:b9:a0:7a:e5:d9:82:0d:79:91:32:
                    23:a4:58:f5:f5:2b:bf:e3:67:ff:f7:f4:3a:94:25:
                    1e:34:29:f1:c0:75:e0:a6:0e:f6:6f:b6:0f:1f:d3:
                    72:88:53:4e:1a:12:1e:b9:d2:7a:70:40:5c:62:c7:
                    07:57:2d:1a:da:f1:cb:04:02:ff:3f:47:09:10:1f:
                    bc:de:37:00:2c:a6:9e:39:06:52:1e:20:a2:16:4c:
                    60:c3:18:9d:ba:93:43:7e:3e:39:4c:66:05:bc:bd:
                    94:73:4e:37:8d:e0:b3:2b:6c:28:22:a4:14:d2:59:
                    0e:be:b1:f4:68:e7:bf:60:95:a6:76:e6:8d:a8:98:
                    86:51:4a:b5:bb:50:23:58:9f:39:ab:65:6b:cb:d4:
                    4c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0E:FA:9B:04:C5:AE:C1:5E:E2:FD:80:5F:AB:E9:CA:28:F7:3C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c486917d-0dd4-3f79-add9-aade1b70ebab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a4:a3:a4:a0:d4:19:81:35:03:0d:f3:15:8a:49:12:3b:d6:
         af:5c:2c:df:86:eb:80:d1:fc:e9:8e:f1:62:ab:e6:15:a0:2c:
         6d:7e:37:34:b2:68:b6:ea:62:b1:a4:1d:34:11:97:51:d5:52:
         64:33:f3:93:e8:7c:29:27:ff:0a:e9:b8:15:70:8f:19:b8:e8:
         9b:1b:0d:92:f5:cf:e8:93:5b:b4:0a:11:81:20:5d:13:e0:52:
         79:dd:a8:67:ca:54:bd:b0:cb:b2:5f:fe:e5:29:de:6b:d3:01:
         51:ea:86:06:fc:78:a4:24:b5:4c:55:13:69:82:91:b8:d0:06:
         56:6a:93:9d:67:4c:56:68:67:92:01:62:11:3d:8a:24:e6:5e:
         88:6a:1a:7f:8c:7c:c8:d0:b3:14:37:38:63:1b:bc:10:52:11:
         4e:42:45:30:ed:a4:65:01:53:87:bf:7f:75:e4:12:e3:78:5e:
         a9:26:79:47:02:c5:07:b8:ed:5e:c4:35:bb:91:80:40:98:5a:
         bd:5c:43:1a:36:4f:0a:c4:f3:87:c5:89:2f:5f:eb:c3:84:08:
         1e:5c:67:ca:91:34:5b:f7:b1:71:de:c2:e3:a0:39:4e:5d:9d:
         67:9b:33:a5:bf:84:97:61:1e:73:f1:e2:db:a0:a4:4c:99:53:
         ef:b9:eb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:17:19 2026 by rpki-client