Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d660a1e5-8f19-3f96-bd4b-49162ce6678e.roa
File:                     d660a1e5-8f19-3f96-bd4b-49162ce6678e.roa (raw, json)
Hash identifier:          YFjGoNdffKJfNq9R3ZyemxJVSXVkqZelktaYQs7qOmY=
Subject key identifier:   0C:C7:E7:FE:7A:E6:0D:80:E3:05:AF:EC:C9:7C:CE:C1:BD:B8:4D:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0F8B833FC8EA250F0807FE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d660a1e5-8f19-3f96-bd4b-49162ce6678e.roa
Signing time:             Thu 04 Jun 2026 14:26:44 +0000
ROA not before:           Thu 04 Jun 2026 14:26:44 +0000
ROA not after:            Wed 02 Sep 2026 14:26:44 +0000
asID:                     36619
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0f:8b:83:3f:c8:ea:25:0f:08:07:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  4 14:26:44 2026 GMT
            Not After : Sep  2 14:26:44 2026 GMT
        Subject: CN=8c949f43-3353-4794-8c3b-532c668125e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:d1:cc:6d:90:34:db:67:85:10:f8:02:d4:
                    c6:6e:91:df:4d:63:22:1a:f0:5c:0b:f8:cd:21:12:
                    cd:09:74:7d:e7:0e:05:ac:28:be:d6:1e:c9:cc:37:
                    bf:2f:35:53:46:69:ba:82:5a:87:e2:99:13:ca:70:
                    dd:6a:39:d3:22:59:66:8a:2c:b5:22:30:88:fb:1f:
                    10:ce:6f:2d:53:88:61:bb:2c:19:28:40:71:a8:b4:
                    77:f0:d8:41:6c:3c:b2:1b:ec:a7:c3:63:95:f0:60:
                    57:43:21:43:a0:32:21:24:b6:b5:32:1c:c7:0c:51:
                    eb:77:79:03:7b:b5:9d:02:bf:42:53:08:73:31:41:
                    2c:ce:34:b3:88:eb:41:4f:86:63:d1:f6:ce:ae:a1:
                    52:7d:fe:1d:dc:9c:96:f7:18:32:ef:1d:2e:c7:90:
                    74:a5:82:0f:dd:f9:9d:7f:0f:5b:1e:56:34:37:60:
                    78:77:4a:df:53:22:07:ed:72:94:a9:6a:17:4b:db:
                    f5:bc:48:b6:0a:36:04:6a:4a:5b:0f:b2:dc:51:ff:
                    63:c7:05:a8:94:b4:94:81:54:5d:c1:25:86:3e:57:
                    cf:4d:69:3e:7f:bd:c3:75:b0:be:24:8b:f0:49:e0:
                    07:2b:00:af:79:6d:d5:25:5f:a2:ab:ea:a8:ff:0c:
                    1b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C7:E7:FE:7A:E6:0D:80:E3:05:AF:EC:C9:7C:CE:C1:BD:B8:4D:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d660a1e5-8f19-3f96-bd4b-49162ce6678e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:5c:2a:9b:6b:dc:2f:1d:84:38:7f:8d:7c:62:71:08:5f:ea:
         e9:67:88:5d:2b:22:a8:92:ef:6a:2b:77:f6:a3:85:2e:ad:a5:
         b5:bf:a8:85:bb:9a:cd:4a:b4:e0:6c:e1:dc:fe:32:f9:c0:9a:
         e0:1a:21:79:53:5f:ed:33:c7:d3:b8:44:a5:d3:ef:f6:36:57:
         6b:70:1e:1d:56:9e:c7:ec:29:11:d6:27:23:04:c5:f1:bf:2f:
         83:eb:33:5a:eb:a6:60:53:5a:7d:52:e3:c2:32:de:ec:ad:0e:
         9a:9e:17:d4:ac:8b:1c:f0:5e:01:5c:3a:58:92:e6:06:f0:fc:
         38:03:80:31:88:b1:c7:ab:9f:58:e6:7c:cc:37:2e:0a:a4:fc:
         3b:12:a1:61:88:4c:78:0f:97:7e:08:bb:bb:81:15:a3:d4:cc:
         9e:17:3b:46:33:3c:8d:98:27:d9:55:fb:c9:5a:3a:16:68:80:
         85:2d:10:a1:25:50:e6:f9:57:f2:b7:9d:1e:d3:34:0f:28:d6:
         92:56:c2:84:5e:52:e7:2f:c3:ab:cb:e5:07:00:59:c7:2b:68:
         e7:70:27:98:e9:eb:54:09:18:2a:df:6e:0a:bf:32:d8:4d:b1:
         cf:bb:e1:2b:12:b0:c1:0e:7f:e1:ea:67:0f:7f:1d:8e:d7:3b:
         05:43:28:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:29:46 2026 by rpki-client