Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4735855-7d99-3761-868c-62bc6ab415e9.roa
File:                     f4735855-7d99-3761-868c-62bc6ab415e9.roa (raw, json)
Hash identifier:          gZeFet0rsAQcoQ7AzzE+431hciOUh1XB+JzhJdaM5C4=
Subject key identifier:   69:C9:24:48:89:C2:09:A4:5E:CD:9E:7C:13:6A:DE:94:96:85:CA:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4E1CCAF3ECCDA1B90E4C200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4735855-7d99-3761-868c-62bc6ab415e9.roa
Signing time:             Thu 14 May 2026 14:07:54 +0000
ROA not before:           Thu 14 May 2026 14:07:54 +0000
ROA not after:            Wed 12 Aug 2026 14:07:54 +0000
asID:                     396581
IP address blocks:        2001:500:856e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:e1:cc:af:3e:cc:da:1b:90:e4:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 14:07:54 2026 GMT
            Not After : Aug 12 14:07:54 2026 GMT
        Subject: CN=13b3d73d-db60-40dd-8837-670244bf5ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c1:4c:9f:27:d2:2b:e8:8c:6d:fd:3d:aa:11:
                    ea:b7:a6:17:fa:99:5d:1a:80:f2:8d:1e:99:28:93:
                    02:e8:08:cd:d5:6d:5f:39:97:37:07:36:ba:9b:9d:
                    13:bf:ba:85:e1:e5:23:e4:32:85:d1:8c:3c:a0:d3:
                    f5:0b:9f:be:45:3c:06:22:b9:83:cf:17:8a:ff:02:
                    3e:21:32:97:e9:d0:a1:13:76:59:b3:ac:1f:87:5c:
                    e7:f8:7c:ce:92:b0:79:4a:59:72:84:30:6f:46:f1:
                    76:e3:c9:65:63:ed:eb:b3:15:60:1c:7b:83:d0:8f:
                    77:86:0a:30:cc:ad:5e:71:03:5e:19:40:e9:71:fc:
                    e3:0c:b2:50:90:c5:a8:03:e3:32:cb:4a:62:87:01:
                    17:63:dc:81:1f:e4:31:32:18:9f:b6:90:25:a1:d6:
                    de:1e:15:12:69:17:02:b4:f5:50:e0:3a:86:ac:e3:
                    07:26:c0:d8:bf:b7:9a:cc:20:02:0e:a9:6b:a2:99:
                    70:dd:7b:63:51:2b:55:dd:bf:cd:36:cf:30:cc:74:
                    c0:ea:d6:fe:2b:6c:2b:99:60:1e:3f:2a:e2:5c:2d:
                    89:13:00:83:e2:c7:41:db:81:a2:94:bd:47:60:d4:
                    b6:15:df:6f:e1:25:ed:ab:e4:d9:56:d0:49:95:c3:
                    80:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C9:24:48:89:C2:09:A4:5E:CD:9E:7C:13:6A:DE:94:96:85:CA:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4735855-7d99-3761-868c-62bc6ab415e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:06:40:8d:08:de:88:a1:d2:c6:21:12:31:cc:e5:96:fc:1b:
         e5:53:20:a2:a4:76:ee:52:81:78:70:67:4b:df:f8:b9:57:f3:
         05:1d:14:8d:01:9b:78:0f:e0:fb:42:87:89:cb:17:2f:0d:b9:
         b1:8e:58:64:55:10:ea:19:91:0e:1d:87:1b:20:51:e4:85:55:
         9e:ff:84:80:66:d7:31:10:39:b3:77:81:a7:57:a7:01:13:f9:
         9e:14:ea:a2:3e:51:0e:45:51:07:f6:5d:20:bb:41:98:e3:df:
         d6:df:2f:fc:d0:39:bd:03:a4:98:7f:b7:84:81:bd:60:c5:e2:
         0f:e0:83:54:42:4a:36:ec:e1:e0:75:45:f2:87:84:46:e1:5c:
         63:39:0f:01:fd:36:d5:c8:4b:fb:a4:12:9c:ad:68:8d:0a:5e:
         18:2f:d9:36:45:79:1f:39:7a:3b:ec:6e:72:8e:95:de:a0:01:
         1f:5c:d6:35:9a:03:00:67:69:70:aa:cd:28:4e:49:0b:45:4e:
         12:fe:6e:32:16:e5:23:2d:d5:df:8d:7e:8c:e1:d0:44:90:20:
         d1:a2:1c:e8:f3:b6:f5:82:6e:69:f3:65:cd:26:ef:fe:95:7c:
         5c:de:19:86:60:99:87:de:32:b4:47:e1:37:2d:71:66:6a:83:
         3d:03:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:55:57 2026 by rpki-client