Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b3cf77-e9fe-3824-b84e-31a09bc361c4.roa
File:                     37b3cf77-e9fe-3824-b84e-31a09bc361c4.roa (raw, json)
Hash identifier:          HhhlhqThnJQh6UdJOyTHiSg0DeLKJzFC6mr3W5vq/Ws=
Subject key identifier:   DC:60:59:04:6B:18:6C:A1:28:76:C5:84:19:3A:59:CF:7F:27:CF:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7A0A04362AD230620E61A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b3cf77-e9fe-3824-b84e-31a09bc361c4.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396572
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:a0:43:62:ad:23:06:20:e6:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d726bc84-bab8-484d-a900-cbcffa4284fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:28:4f:77:d7:ac:36:de:1d:12:ee:99:04:d0:
                    77:1f:09:87:37:53:07:c5:ed:77:27:d4:3a:80:3f:
                    bb:77:f1:cf:c6:31:ce:7f:4b:77:28:08:04:d7:74:
                    ba:5f:f9:af:56:1b:33:6d:12:81:ad:84:a2:9e:65:
                    84:9f:68:e6:cd:c6:32:73:9c:52:ca:17:6b:2d:65:
                    56:8e:1b:9a:af:79:df:b2:04:48:63:fe:54:55:88:
                    f8:75:6f:a8:e4:c0:6f:0e:b3:8a:36:a1:30:2e:1a:
                    1f:e2:5c:8a:9a:a4:92:18:8c:cf:8d:96:75:2e:bc:
                    f0:f6:7a:7d:26:ce:32:85:cd:f7:31:ea:66:28:81:
                    7f:e7:74:5f:b6:3b:0a:43:d3:cf:8c:82:5a:0d:41:
                    ee:9b:b1:ab:fc:1d:bf:62:0d:be:f9:b1:d6:d1:9d:
                    65:64:b3:0a:e1:fd:e0:08:88:06:34:d1:32:e9:9a:
                    5e:04:9a:c3:4f:7e:2c:c4:ce:b5:9c:9d:4b:c6:bd:
                    3d:4b:34:24:4c:e0:b1:df:1c:53:de:0d:d5:4d:7a:
                    20:24:d8:7d:51:da:b9:5c:e4:ce:0a:79:a3:85:40:
                    9e:48:59:0f:ad:09:a3:a9:f3:94:5e:ee:61:87:11:
                    f5:e5:5e:b8:de:b3:1d:28:79:92:7f:34:85:78:01:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:60:59:04:6B:18:6C:A1:28:76:C5:84:19:3A:59:CF:7F:27:CF:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b3cf77-e9fe-3824-b84e-31a09bc361c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:77:e6:06:ad:b3:bd:3d:8d:04:fa:c0:60:9c:9e:10:81:
         66:fd:2f:86:0e:8a:6a:f1:61:c5:50:34:89:37:2c:02:c3:c7:
         28:32:5d:6c:28:c6:53:62:56:1d:68:f4:72:9a:30:2d:02:46:
         a8:90:8b:d1:fa:8e:7a:23:f2:45:f4:5c:ed:8d:e2:e0:95:e2:
         2d:2e:c4:87:2b:f7:0e:54:e9:3a:16:43:97:2b:75:0a:cf:8c:
         5f:52:2c:0e:e0:63:31:b0:73:54:57:8c:32:b5:1b:4d:5d:f1:
         61:7f:76:e2:9f:ea:6a:25:6b:de:11:5f:21:57:b0:90:78:73:
         7c:75:ff:b6:03:d5:6d:54:9b:bd:24:16:69:16:b2:a1:0e:11:
         50:c2:04:e3:98:68:69:a7:fc:71:d7:37:23:dc:30:cd:2c:a2:
         31:54:f9:a8:c2:e2:07:06:62:44:74:15:f3:74:b0:68:7d:32:
         da:3d:36:f4:e3:75:e0:28:84:79:3c:55:75:43:7e:4a:71:cf:
         06:da:dc:a6:98:d2:fa:ef:92:8a:f1:2a:42:e7:25:8e:75:ce:
         d0:d0:f0:05:1e:a7:c1:02:b2:e2:04:11:f2:0b:17:db:1e:09:
         3e:ac:e2:2e:49:ca:eb:bb:47:51:1a:69:bb:b0:c5:37:72:b0:
         00:2e:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:03:41 2026 by rpki-client