Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1118821-6ed0-324c-8b97-1cc3534add85.roa
File:                     f1118821-6ed0-324c-8b97-1cc3534add85.roa (raw, json)
Hash identifier:          VO2ZP9+cJOHkSXGW4QeD3/t0/JSxfpIGLuHpXdZx93E=
Subject key identifier:   82:2E:68:07:50:75:FB:53:AD:34:DA:80:E8:68:96:69:A8:3D:E9:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6EDA811AB19DB81E349AD240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1118821-6ed0-324c-8b97-1cc3534add85.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     22547
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:81:1a:b1:9d:b8:1e:34:9a:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=09e23fd7-b735-4cd7-9b7e-6d5fa761ec2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4d:f0:f1:03:c2:7d:1b:3c:e7:c4:24:c2:31:
                    f0:b3:db:da:bf:b6:8c:7a:e9:a8:06:6b:09:0f:a5:
                    3d:3c:e2:6c:85:58:6c:48:2b:f8:37:5b:4e:99:a6:
                    3c:b0:57:88:45:c7:09:3a:96:a1:35:c3:d3:3b:bb:
                    ed:a9:50:77:15:cf:03:56:36:15:b0:34:e9:a7:44:
                    ed:e7:90:40:ee:ba:c5:08:de:c1:c5:77:f2:8f:82:
                    54:8b:43:24:82:d0:93:2f:0e:33:a1:99:34:83:d9:
                    d8:2a:76:4f:0d:1b:93:dc:70:be:3c:a3:ef:39:60:
                    d3:7e:dd:7f:6f:23:75:9e:69:bb:cf:6f:f6:ef:b0:
                    80:62:35:1b:88:4c:15:c4:0e:3b:17:fe:ed:da:61:
                    8d:19:2d:94:f1:e2:d9:eb:c4:d3:87:69:cd:a8:52:
                    e2:9f:4f:ee:89:a3:54:8e:3c:73:a4:77:3b:ce:54:
                    31:89:db:44:ff:bd:6b:6e:16:ba:cd:a0:17:05:49:
                    4a:8a:62:44:eb:c7:f0:db:2c:1d:5e:f2:a1:50:5d:
                    68:ec:9c:95:94:46:49:4c:4b:92:84:83:81:4d:c8:
                    14:b0:07:ad:d7:84:e4:a9:93:6f:a3:0e:5d:f9:48:
                    92:7a:2e:e8:08:87:f6:d2:b2:08:2d:7b:29:a5:a0:
                    d0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2E:68:07:50:75:FB:53:AD:34:DA:80:E8:68:96:69:A8:3D:E9:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1118821-6ed0-324c-8b97-1cc3534add85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:e4:61:49:c5:3f:0e:4e:5f:99:8a:dc:ab:29:91:9a:a6:ad:
         1f:8c:19:51:e7:95:f1:3d:c3:d0:72:83:33:11:06:76:c3:dc:
         e1:28:d7:e9:ba:da:a9:3f:f3:df:e8:d4:12:21:37:8d:d9:45:
         d9:7e:16:7d:f3:1f:cd:a7:6b:5a:4e:c5:8d:94:00:ed:6e:3d:
         c4:69:24:dc:0d:c2:ce:5c:12:81:a0:d3:80:e2:e6:2e:73:f0:
         9e:ff:63:e2:75:44:9c:d1:6c:4a:3f:1a:22:e0:33:77:77:8e:
         e4:8f:b1:62:a1:d0:a5:19:11:67:0e:0e:a2:9a:7e:0c:59:7f:
         87:db:bb:6f:07:90:db:69:19:fc:bb:b2:61:5b:79:c6:c8:33:
         f0:59:89:00:d7:dc:2c:a2:72:cd:e5:01:fb:96:2a:93:2d:b0:
         9d:59:29:c2:cf:6a:b1:c3:55:b7:f6:6b:01:76:02:de:ff:3a:
         1d:c5:c3:81:af:03:b2:da:37:c1:20:a3:6d:db:00:d6:d9:b5:
         b2:59:9d:d5:f2:9f:8d:ef:dd:37:e8:40:b0:50:12:ea:10:35:
         ad:61:1e:7b:46:2b:22:a4:f8:f1:66:4b:3d:2c:62:6d:cf:32:
         16:51:8a:a1:cf:95:7a:28:7d:60:e8:41:df:71:06:61:e2:de:
         b1:87:70:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:22:53 2026 by rpki-client