Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fab8717e-8b5f-3af4-b86e-fa5c9d2a345a.roa
File:                     fab8717e-8b5f-3af4-b86e-fa5c9d2a345a.roa (raw, json)
Hash identifier:          UY8UgUPXsFcZ9vWSZ3dBANH8RAIXYBcBeNde6BZVXbI=
Subject key identifier:   35:AB:24:B0:21:CC:51:F3:CA:39:EA:BD:01:5B:F7:CC:71:29:39:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE2D89C35B2923A11CAC26C60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fab8717e-8b5f-3af4-b86e-fa5c9d2a345a.roa
Signing time:             Tue 19 May 2026 14:10:42 +0000
ROA not before:           Tue 19 May 2026 14:10:42 +0000
ROA not after:            Mon 17 Aug 2026 14:10:42 +0000
asID:                     36632
IP address blocks:        2001:503:d414::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:d8:9c:35:b2:92:3a:11:ca:c2:6c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 19 14:10:42 2026 GMT
            Not After : Aug 17 14:10:42 2026 GMT
        Subject: CN=2665e1e0-6023-437c-be5d-73f9bef4a1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:00:0f:ab:88:2a:4f:81:1a:d3:5b:14:60:
                    8d:4e:7e:0d:7f:c2:bc:91:fa:9d:f7:b8:4e:0c:b5:
                    7d:2f:c1:54:b8:c6:49:6e:df:ff:4e:d3:48:6a:a7:
                    54:d2:f9:cd:bd:2e:ab:e3:de:ef:d7:eb:e2:97:4a:
                    13:e1:81:62:fd:99:5a:5a:a9:38:18:26:ec:79:11:
                    2a:ee:69:2e:06:e5:b5:17:d6:c4:81:f3:c0:b2:df:
                    15:31:81:4b:1b:43:7c:38:c5:7b:9b:01:39:42:70:
                    89:6b:48:e3:56:a6:cf:47:89:ca:ad:4d:50:a1:9f:
                    a6:8c:1f:8c:9c:99:7a:b3:99:f7:3b:f7:22:fc:ae:
                    07:28:9c:82:ec:e8:45:6c:53:e5:f8:b7:b5:be:7b:
                    ce:ee:92:fc:c9:9a:55:06:dc:88:ee:70:5e:a6:d3:
                    fc:d0:a0:8b:bc:73:b6:f9:a9:3c:80:a7:2e:cb:02:
                    80:fa:7f:8c:c0:1c:97:57:cc:61:22:e5:50:19:39:
                    7c:de:4f:6f:5b:37:51:74:59:47:4c:8f:32:50:a1:
                    90:43:cd:45:5d:a6:7b:ba:f8:87:dd:c7:38:71:f1:
                    6f:ca:70:e9:e3:11:d7:9d:18:a8:72:4b:3c:13:dd:
                    0b:e2:f8:19:a3:13:a1:00:e4:75:ed:00:57:b5:94:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AB:24:B0:21:CC:51:F3:CA:39:EA:BD:01:5B:F7:CC:71:29:39:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fab8717e-8b5f-3af4-b86e-fa5c9d2a345a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bb:d6:26:5a:b9:59:73:03:41:d9:a1:29:79:22:63:12:c3:
         cc:30:0f:44:9f:fa:26:79:12:7b:0d:dd:b8:2d:e3:0a:4f:de:
         7b:e7:f7:76:4b:11:6c:17:fc:3a:40:6f:c1:9c:6e:0e:0d:d6:
         22:b8:c6:8c:9b:5f:9e:cf:13:93:ed:60:f0:9e:aa:95:8a:81:
         fd:68:92:8e:ba:2c:2f:1d:0b:cd:76:bd:ed:41:6d:0c:30:f5:
         50:4a:54:88:05:ba:42:4a:66:bb:f6:6b:7a:05:2e:66:13:75:
         7b:83:4c:53:d7:e6:d8:92:92:84:1b:df:0c:e9:4b:2e:6d:5a:
         7d:78:42:e9:a3:09:55:82:b5:c4:d1:7d:f2:a3:28:78:45:23:
         c2:88:6c:d6:08:42:2c:82:f7:8c:ea:00:53:b0:68:91:82:e4:
         65:3e:1d:29:23:a4:25:eb:78:44:06:77:a6:18:ab:cc:06:a4:
         4e:2f:40:b6:52:e3:67:e0:e0:27:b5:04:aa:cb:3a:3d:d6:c1:
         1f:69:18:ab:a2:df:ef:5b:4f:e2:f3:8b:93:47:8c:b7:1a:50:
         f1:21:6e:30:a3:e5:44:6e:19:57:dd:27:38:41:b1:46:88:b4:
         75:81:d5:85:ec:14:5e:da:e5:a0:d9:f1:64:e3:f2:6c:5a:e9:
         d8:17:8b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:17:02 2026 by rpki-client