Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/463b6460-cff7-3534-8e35-e68add44c199.roa
File:                     463b6460-cff7-3534-8e35-e68add44c199.roa (raw, json)
Hash identifier:          R1uxWVmIUBJHsU1VskxZo+p1VdQDNCSGw9OGNzPsqBI=
Subject key identifier:   72:7C:8F:71:FF:CB:A2:01:8B:11:41:19:26:5C:79:1C:9E:0A:FC:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EDC91E6DDF04452DCE5AD0A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/463b6460-cff7-3534-8e35-e68add44c199.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     36620
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e6:dd:f0:44:52:dc:e5:ad:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=89e76f3b-4136-4844-b721-aa5bc51be62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:3f:2f:c4:fd:11:8c:03:5b:79:b6:d6:f7:
                    a7:14:cb:cb:e4:6b:1e:f5:37:b9:d1:05:2d:f0:a5:
                    fe:38:46:a4:34:6e:8e:63:88:d7:3c:95:f6:77:0a:
                    04:5f:82:10:95:09:7b:e3:ec:13:84:7f:6c:f8:fe:
                    41:aa:00:27:37:39:23:da:84:aa:f3:a7:74:35:11:
                    2a:04:c2:c0:e3:f5:90:a0:73:6c:7b:a8:7c:1a:66:
                    9f:b8:80:98:e2:1e:49:20:f5:7e:d8:fb:f8:6c:d8:
                    d5:2b:a8:78:80:98:52:8a:b9:0e:aa:58:38:e5:d2:
                    39:67:d6:03:60:41:45:07:c8:9f:72:0f:a2:f3:02:
                    37:a7:5f:e7:a2:99:f3:25:9e:f2:cf:15:b5:3e:31:
                    45:61:14:1a:ba:bf:02:1c:6b:75:7c:ce:4e:da:3e:
                    14:7d:1c:5a:75:a5:a5:05:8a:c6:4a:28:5d:36:c6:
                    18:a0:fb:b9:fc:d2:c0:22:a5:e9:cf:a2:5e:83:f5:
                    b9:94:fd:bc:00:1c:d3:2a:fc:87:89:ca:a9:c0:58:
                    da:59:57:d2:ad:22:a5:86:0b:01:c0:d2:8a:78:a0:
                    51:5b:96:b4:b8:d1:3c:f3:b3:ae:bc:8a:82:b4:03:
                    19:43:12:63:db:bc:5e:8d:00:d0:3e:09:d5:c4:91:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7C:8F:71:FF:CB:A2:01:8B:11:41:19:26:5C:79:1C:9E:0A:FC:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/463b6460-cff7-3534-8e35-e68add44c199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:cc:84:bf:37:fd:78:ba:ce:62:98:a1:60:2f:ae:46:f0:c6:
         96:cd:b5:96:fb:8a:4d:aa:ce:d7:c1:9c:2c:f2:6b:fa:b0:47:
         56:1b:1c:96:39:ff:89:ea:37:8c:be:e9:28:98:c2:05:52:42:
         85:60:2a:3a:73:d4:4f:25:28:6c:6b:8b:fa:e6:c9:80:3c:98:
         70:1f:12:3e:9f:30:13:1e:a1:12:62:73:38:0c:4a:1f:61:0e:
         59:30:56:52:ad:7f:4a:28:10:3e:5b:fe:70:d3:18:8f:ee:6f:
         5e:66:88:11:de:8c:f0:fa:0d:46:ad:d7:dc:9f:be:5e:7c:16:
         27:44:78:98:09:fd:35:09:e4:b7:54:1f:0b:b3:a8:02:57:81:
         8b:d5:5e:b3:f0:53:1c:3e:0c:a8:75:a5:c9:c1:cf:e6:60:ff:
         ab:5f:fb:f8:0d:bc:a8:8f:58:93:ac:e7:9f:5b:b7:86:ba:5e:
         79:35:9f:ce:fa:fc:05:60:d6:9d:a0:f2:e0:34:80:36:86:6d:
         12:3b:82:28:22:01:b6:92:56:3b:13:f3:4b:0a:e2:30:38:24:
         26:ef:97:f4:6e:64:e1:be:38:03:0f:6f:91:ae:83:79:5c:de:
         90:97:10:ef:a3:80:69:9a:ff:fd:65:67:33:61:9c:31:94:bd:
         ba:2c:82:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:04:42 2026 by rpki-client