Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17ebb508-6689-39b4-9e32-6b9c5b761b14.roa
File:                     17ebb508-6689-39b4-9e32-6b9c5b761b14.roa (raw, json)
Hash identifier:          GMcCvW8PbN7thKSuiC2+IcED6DL0T+OgNhQ/0rdrwGw=
Subject key identifier:   F3:4A:BF:BD:8F:FE:A9:36:37:BB:E7:A9:E6:46:22:E8:47:7B:6E:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE0C1F9F842AA7D952EC93E68
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17ebb508-6689-39b4-9e32-6b9c5b761b14.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     36627
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:f9:f8:42:aa:7d:95:2e:c9:3e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=aa15316c-5d4b-4a89-ae26-aa14de8f31fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:43:6e:d5:40:20:a0:03:51:30:37:cf:03:57:
                    3e:35:9d:dd:2a:86:ce:59:bd:d7:38:38:50:20:60:
                    16:05:e6:83:ca:bf:6c:d1:e1:e3:5c:43:3a:c1:38:
                    51:d2:a7:4a:e3:b7:d0:45:f5:3f:1a:d9:3e:c7:f0:
                    b6:8d:5c:10:64:0a:e2:4e:d9:5e:c4:e7:0a:c0:e7:
                    9e:d3:21:03:ef:28:83:e0:73:77:78:21:cb:12:23:
                    2b:bf:5c:5b:20:8f:9a:de:6f:8d:a1:55:31:88:38:
                    a4:09:4a:52:ea:e3:29:97:a7:a9:84:a5:93:01:37:
                    f4:08:57:3f:f6:cf:32:c7:c5:81:fb:bc:a5:27:f8:
                    25:7a:06:2d:29:35:9e:22:e7:19:19:8e:7c:9f:23:
                    ee:27:d5:29:47:6f:e5:31:04:4a:bf:38:f9:6a:8b:
                    20:87:6b:20:c1:9c:19:00:9f:11:8a:72:37:38:16:
                    70:dc:74:f3:5e:ae:a0:5b:79:34:b7:d3:00:a3:8f:
                    36:ff:c5:6e:f8:6c:fe:97:4c:bc:3e:88:99:48:44:
                    fd:f6:7a:e6:16:9f:96:9e:e0:cb:55:a7:27:c5:b7:
                    5c:d0:89:80:91:a2:e3:42:e4:6e:aa:eb:eb:af:a8:
                    6b:28:26:b3:9e:b3:a2:d5:8b:94:32:20:8c:60:5d:
                    30:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4A:BF:BD:8F:FE:A9:36:37:BB:E7:A9:E6:46:22:E8:47:7B:6E:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17ebb508-6689-39b4-9e32-6b9c5b761b14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d0:4d:2e:c0:18:12:2d:74:ef:c2:f3:8e:61:79:69:af:ae:
         62:d6:4c:76:26:da:ae:11:f8:cf:f1:c9:ce:9f:7a:9a:dc:85:
         20:91:46:f2:a6:3a:cf:ce:e4:60:95:42:fa:da:95:25:b2:51:
         62:4d:58:8a:7a:2c:ae:e9:59:e4:3f:17:65:1f:c2:70:36:d4:
         45:98:a3:ed:09:56:0a:c9:b9:1f:24:b1:5d:bb:17:81:4b:c1:
         4d:ea:e5:e3:06:cb:6c:be:a1:51:1d:a3:9c:27:cd:ed:d1:35:
         2a:06:cc:32:49:1b:2f:f5:17:1a:d6:9b:da:d4:74:1a:ee:3d:
         56:8d:4f:4d:5f:ab:e0:66:35:d3:f5:8b:68:35:4e:eb:fd:6f:
         fe:ff:c7:4c:b1:98:27:fb:07:71:78:de:51:6e:68:3f:12:92:
         c2:6c:6d:ff:d8:9c:ec:fa:60:cd:a2:08:fe:2e:bd:f6:f5:00:
         fe:24:3a:4d:4d:0d:1d:fe:6d:86:62:db:dd:a8:2f:88:59:c2:
         16:1a:c7:ee:b5:af:ce:ac:c4:7d:34:bb:89:38:ae:f4:44:cb:
         bb:d6:7d:04:70:45:34:24:33:d9:5d:e7:9c:bb:89:4f:8c:1d:
         8c:91:9c:06:38:9a:48:c4:a5:b4:ce:34:eb:80:50:2e:df:df:
         c5:bd:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:07:55 2026 by rpki-client