Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c799a7de-f0b9-3bd5-b4c4-883f57fd88c2.roa
File:                     c799a7de-f0b9-3bd5-b4c4-883f57fd88c2.roa (raw, json)
Hash identifier:          nSHIRjWhzRogJXmujSV2ZHR5Z/u2q7GlvTbeveuecUc=
Subject key identifier:   82:C1:2E:8E:5E:82:38:AE:E5:75:65:3E:B0:48:5E:CD:65:7B:44:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6DA1A00D95E15E7C9E3A50C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c799a7de-f0b9-3bd5-b4c4-883f57fd88c2.roa
Signing time:             Tue 07 Apr 2026 14:30:20 +0000
ROA not before:           Tue 07 Apr 2026 14:30:20 +0000
ROA not after:            Mon 06 Jul 2026 14:30:20 +0000
asID:                     36623
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6d:a1:a0:0d:95:e1:5e:7c:9e:3a:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  7 14:30:20 2026 GMT
            Not After : Jul  6 14:30:20 2026 GMT
        Subject: CN=817d494b-2d64-4ccd-9ef7-7b5e31650cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2e:50:ec:e0:d3:d1:91:34:bf:a6:72:82:96:
                    45:2b:04:b5:e3:39:77:ec:6a:55:ad:df:2c:79:7f:
                    02:0a:4f:5c:1e:01:3f:65:41:92:80:c6:64:ad:b8:
                    53:39:5c:1b:05:34:d1:56:93:06:53:61:a3:f4:85:
                    36:42:a4:2f:3e:4e:e5:38:ad:1e:3d:f6:b1:c8:7e:
                    74:91:db:ec:d4:16:48:92:08:95:e9:1d:73:0b:d5:
                    12:46:bf:35:bd:ba:2e:00:47:27:af:34:44:82:0e:
                    27:0e:44:3f:74:8d:fc:d3:fb:9a:be:74:4d:55:97:
                    fa:d7:59:2c:87:61:f1:dc:62:a5:f8:f6:57:f9:42:
                    0a:0f:9d:ac:a7:f1:9c:c4:56:3e:ba:a3:c5:08:0d:
                    74:ee:db:33:c6:0d:50:88:72:64:0b:be:3f:79:5f:
                    64:07:13:6f:6d:07:25:e8:17:69:ce:59:ad:a5:ea:
                    aa:64:ad:e5:9b:d7:e0:55:e5:71:74:68:22:69:9b:
                    89:73:c0:d6:d7:37:7e:66:a9:17:66:3d:5b:d8:34:
                    74:8b:6c:d7:d3:69:e3:ab:23:e8:39:24:2e:da:32:
                    d9:a3:a9:78:23:d7:93:8c:f4:6c:ac:28:44:6b:dc:
                    aa:af:62:74:76:f0:18:32:0b:f2:8a:82:e7:79:63:
                    2c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C1:2E:8E:5E:82:38:AE:E5:75:65:3E:B0:48:5E:CD:65:7B:44:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c799a7de-f0b9-3bd5-b4c4-883f57fd88c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:70:96:d6:f4:55:4b:b5:80:0c:34:c8:da:e6:7d:ff:8a:eb:
         2a:f0:32:b6:2a:4f:a9:db:f6:59:70:69:fb:5b:4f:24:c0:ea:
         06:08:19:a7:80:1a:39:a3:50:c0:10:ed:02:a4:9f:ce:92:a2:
         57:e1:a9:6f:89:9e:b1:23:03:71:5f:6a:67:d2:44:c4:a0:2a:
         c5:7b:b6:26:dd:5e:9a:c4:f2:d1:54:49:3a:c4:b4:5b:23:cc:
         83:e8:ff:c8:3b:49:13:64:53:cb:fc:4a:81:0e:80:70:78:c8:
         fa:71:a1:64:f2:d0:e7:b9:5b:17:f6:33:da:95:fa:c9:16:7c:
         7f:e4:c2:99:0e:68:b8:c1:c5:75:dd:ba:ee:fb:3c:ab:70:c1:
         e4:ad:93:82:93:26:df:ba:6e:50:89:29:71:5f:90:b2:b1:6d:
         ba:ff:54:25:48:69:87:04:85:fb:86:2c:9f:21:84:95:bd:20:
         6a:38:43:a1:80:1f:42:17:bf:e8:09:ae:31:e1:d5:1a:15:6f:
         b7:67:20:05:97:40:c0:31:8e:0a:e9:ff:74:02:ba:6e:e9:3c:
         3b:c9:c5:df:1f:4c:33:b8:df:7e:29:c8:2b:64:f8:1c:37:4c:
         93:cb:7d:00:34:ed:2f:c2:86:43:f1:44:41:a7:60:db:e6:b1:
         32:49:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:56:41 2026 by rpki-client