Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03ff62dd-46e4-31ea-9a85-5b74caa617d0.roa
File:                     03ff62dd-46e4-31ea-9a85-5b74caa617d0.roa (raw, json)
Hash identifier:          L4FOGdoixQbc7w2M7KmIPuAXK+Ad8tqVYs11AA0V780=
Subject key identifier:   41:AF:52:99:D7:89:E0:90:45:0D:FC:D5:8E:48:56:7A:91:D7:C1:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC4D71622E92455D6AE276560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03ff62dd-46e4-31ea-9a85-5b74caa617d0.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     396603
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:16:22:e9:24:55:d6:ae:27:65:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=6d1831cf-cd76-4238-86b3-d417a95988f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cf:5c:22:b2:12:f3:a7:04:35:e2:e5:b3:a4:
                    f4:f4:ce:36:58:f7:36:bd:c7:65:8e:33:23:f5:68:
                    ef:a3:03:e9:3d:91:af:7e:7d:e2:ac:59:3e:65:01:
                    d3:50:86:ff:c1:ff:29:2a:47:ce:e5:bb:5d:f2:33:
                    dd:af:77:4d:d4:9a:aa:ec:06:3c:13:9d:14:68:d4:
                    0f:c9:6b:a0:ae:f2:ba:51:81:ec:5d:64:32:4b:6a:
                    16:7f:17:4d:f4:bc:f5:9f:e1:dc:60:69:c9:20:83:
                    ad:14:0e:9d:8d:a4:a7:99:f1:d5:4e:41:5d:28:24:
                    03:ce:93:b5:ae:da:4f:66:ba:82:35:62:de:c2:29:
                    b1:77:6f:6f:41:c4:35:80:91:8e:86:a8:d9:dd:3e:
                    2c:68:ca:97:96:3f:dc:b9:e3:65:94:e3:0c:03:c8:
                    d3:01:8b:ca:50:2f:cc:c5:79:c5:9c:8c:09:f4:92:
                    44:ca:8f:ca:52:d8:83:19:3a:7b:a6:28:47:03:d5:
                    c8:0b:96:21:c8:bb:bf:a2:c0:09:55:87:68:7a:49:
                    6d:7f:c1:6b:a8:c3:70:b8:e9:66:70:ad:45:dc:b0:
                    92:67:80:96:71:7f:29:8c:d8:fe:e2:d2:3d:29:a3:
                    33:dd:5b:83:09:71:4d:c2:e5:0b:2e:e2:b5:6c:1a:
                    03:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AF:52:99:D7:89:E0:90:45:0D:FC:D5:8E:48:56:7A:91:D7:C1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03ff62dd-46e4-31ea-9a85-5b74caa617d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:c8:d4:ac:1b:ed:b7:10:4e:8a:67:21:50:16:c5:2b:b5:5e:
         5d:b1:8b:7f:33:c6:be:98:01:db:96:87:c0:91:b2:28:91:27:
         2a:65:22:79:21:fc:52:73:54:ff:6d:a3:b1:33:db:5a:96:45:
         0e:37:30:10:e4:ef:6e:82:ae:16:c3:1a:ff:c7:65:53:cd:cc:
         b5:e1:68:86:33:c0:38:62:9f:98:0f:15:f4:11:71:ab:86:69:
         aa:cc:fc:27:8d:92:84:b4:ba:34:7f:00:a2:20:5d:05:bf:ac:
         14:2f:3d:4d:d9:32:11:2b:0e:89:c2:9e:08:38:3c:09:1a:82:
         90:be:dc:91:c1:ac:69:d5:69:27:e4:46:d6:5a:89:aa:cd:e7:
         a9:fc:6e:29:f5:ec:46:c7:94:88:4e:7a:83:36:da:b0:89:b0:
         15:c8:e0:69:bb:15:54:99:1b:66:e6:98:4c:22:37:f1:61:0d:
         fa:fa:55:da:c5:81:dc:4c:d6:a9:22:c7:25:9e:6f:bd:df:9e:
         93:fa:5f:0e:7a:2b:25:82:6b:47:f5:5d:94:b0:99:2b:55:82:
         b6:d5:47:69:ee:6d:49:f7:32:20:57:b2:1e:9d:82:2f:1a:3f:
         0c:98:ac:f6:a4:65:8a:c2:3d:6a:bd:65:36:e2:67:b9:bc:a8:
         71:01:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:04:19 2026 by rpki-client