Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6ef86ca-43ad-3ee6-96e7-823a301f079e.roa
File:                     f6ef86ca-43ad-3ee6-96e7-823a301f079e.roa (raw, json)
Hash identifier:          hUo2ckIIPp+lBLkze90dbqbVBKh+wrpFRItq/7kyvD8=
Subject key identifier:   54:D3:AC:84:DC:61:22:41:0D:05:D3:62:4B:02:99:94:13:7B:6F:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE52EDE3617E475533D6780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6ef86ca-43ad-3ee6-96e7-823a301f079e.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396616
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:2e:de:36:17:e4:75:53:3d:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=e847364a-fb07-4fba-bfcd-f737f8bf0a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8e:b4:81:12:7f:d6:f5:bc:58:3e:44:19:dd:
                    60:6b:93:5c:9c:b1:f1:ac:3e:d9:04:24:6b:0f:83:
                    c0:73:04:ec:ef:89:fd:2b:48:67:69:de:23:fc:4a:
                    23:8e:ea:0c:7c:da:7a:63:90:58:88:14:3a:27:7d:
                    57:72:4d:2c:83:87:01:b1:5e:10:1a:d0:05:84:ab:
                    1d:be:ef:26:c2:f7:4d:33:58:a0:f3:18:88:9d:09:
                    7b:22:75:a6:ed:95:6d:52:d7:f8:a2:2c:9d:c1:78:
                    4c:9e:eb:3c:9d:a0:89:b4:d3:e4:04:44:02:c7:b8:
                    fa:ab:d7:98:8d:47:d2:29:d8:d2:a8:71:48:7a:70:
                    d7:fd:c9:13:68:2c:07:2b:1e:5c:31:f6:95:da:4b:
                    1e:ca:af:19:2d:a2:a9:99:5e:f3:07:59:8c:b0:84:
                    af:e0:6c:f5:d1:44:83:45:b5:2b:82:cb:81:89:be:
                    15:f4:27:a0:47:22:1e:09:6d:54:67:c4:82:70:8b:
                    65:be:59:ba:5e:e8:26:77:ea:c6:19:7c:6b:3c:eb:
                    63:88:cf:17:ae:ef:ec:77:6b:2e:49:95:0b:5e:ff:
                    6a:c5:9d:c3:b2:48:a9:cf:73:e8:01:c6:3d:41:c5:
                    58:d3:9e:1b:81:1f:56:42:94:00:2c:57:a7:e8:55:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D3:AC:84:DC:61:22:41:0D:05:D3:62:4B:02:99:94:13:7B:6F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f6ef86ca-43ad-3ee6-96e7-823a301f079e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:4c:6f:3d:cb:de:05:16:5e:af:13:cf:85:66:6b:7d:61:7a:
         77:59:4c:fc:55:ff:32:bc:26:f4:d0:ae:27:82:cc:32:79:6e:
         27:ed:5c:eb:34:60:0e:88:fc:ae:f9:06:47:d4:93:2b:a4:47:
         c1:e5:42:79:38:8c:b6:ed:36:05:d7:39:61:d5:99:3a:f7:d8:
         42:79:e5:a5:a7:39:95:ad:1f:3d:ed:e6:ee:d1:b7:9a:74:f7:
         cc:d2:ae:0a:0e:56:7e:2c:0f:4e:46:51:a8:8c:3a:0a:63:27:
         83:23:b7:f9:26:bb:cd:de:0a:94:5b:b9:f3:0b:34:c8:6c:79:
         60:bd:0c:10:5f:52:d5:28:fe:2b:93:6b:33:33:b3:cd:6f:1d:
         74:3c:55:ff:f0:ea:50:81:b5:e1:38:fc:ed:e4:ca:a9:a5:c2:
         34:fc:2f:09:3e:23:8e:bc:16:49:8b:fe:73:54:fc:97:ea:d9:
         60:51:ae:50:3e:78:11:5a:4e:2f:71:4d:40:7c:a9:7f:b7:46:
         93:00:16:1f:b5:58:2a:f3:de:6d:bd:60:18:a4:4b:e1:4f:88:
         14:f3:11:cf:b6:64:ed:42:38:7d:56:78:63:0f:9d:6e:87:21:
         f1:4f:41:35:b0:d1:6d:f5:ff:c4:51:c7:c7:4b:92:eb:bc:b0:
         2e:c4:07:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:57:33 2026 by rpki-client