Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d6285d9-81c5-3396-8548-c0df7f34f82b.roa
File:                     4d6285d9-81c5-3396-8548-c0df7f34f82b.roa (raw, json)
Hash identifier:          D+Xc5sh73RFIAYKcp7TwYoJsrrWn+w4Vx9giBWq+zG0=
Subject key identifier:   AE:CD:A7:D8:53:32:33:72:1A:10:BC:FA:C1:B0:35:25:54:D0:5F:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9E06108E7B25349EA1980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d6285d9-81c5-3396-8548-c0df7f34f82b.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     396581
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:e0:61:08:e7:b2:53:49:ea:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=05e66bf9-30e9-4fae-b6a6-10b06c0040cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4a:66:52:81:73:94:92:c1:94:7d:0b:83:16:
                    e8:d8:a3:53:56:61:12:71:74:3f:66:2a:02:44:f6:
                    fc:04:56:54:13:03:d9:45:f1:b2:5b:da:49:ca:81:
                    3e:0f:0f:ba:cd:94:6e:56:ff:d0:0a:83:36:d7:b6:
                    85:c6:28:65:38:7c:e4:2e:0f:d8:8c:e5:3f:5a:3c:
                    09:8c:d4:e8:61:26:ba:d7:ad:c8:6b:41:7a:8d:9c:
                    c5:48:3f:9c:91:ad:b0:bb:39:5f:5e:f8:ee:d2:57:
                    2f:39:08:da:29:d3:98:13:44:89:16:60:ff:a0:36:
                    85:a7:cd:cb:a4:75:38:57:5e:56:6c:fa:d5:26:ca:
                    f6:a2:8b:f1:2a:cb:a5:89:26:ea:ac:2a:71:56:8d:
                    bc:89:44:38:3a:8a:96:0b:b5:7a:b2:1f:15:e8:89:
                    a9:a1:7a:de:8b:13:5c:a5:11:b9:d3:6f:cd:6f:7d:
                    a5:95:a6:d0:97:48:dd:d1:9b:b2:7a:bd:06:30:d5:
                    44:bc:f6:b7:55:56:cb:ed:4f:17:8f:96:43:c2:ca:
                    ab:95:f4:96:7f:e3:30:17:ca:95:dc:83:f2:09:d9:
                    fb:e0:71:42:c2:2e:8a:d7:8a:e1:6f:27:b1:a6:9d:
                    ca:2f:95:18:18:a5:e5:2d:93:1b:85:73:3d:1b:d9:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CD:A7:D8:53:32:33:72:1A:10:BC:FA:C1:B0:35:25:54:D0:5F:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d6285d9-81c5-3396-8548-c0df7f34f82b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:3e:38:db:79:7c:08:e6:a8:80:a4:60:c1:f4:5a:ce:fd:df:
         2e:32:fd:d1:f3:5d:84:58:f0:7b:d9:1d:44:e2:1f:03:6c:ee:
         2e:6f:6b:92:72:17:cb:ba:34:97:93:4b:ae:b5:32:8f:80:4d:
         4e:9d:c4:86:0c:ec:15:7e:92:fb:3b:c7:5f:73:7b:75:97:79:
         70:6f:0f:06:eb:98:7c:ea:53:4f:ed:99:f1:ec:c6:63:6a:d3:
         93:a0:8b:31:18:b6:bf:ea:a5:4b:78:76:98:af:0a:69:16:31:
         d9:41:a9:4d:8b:7e:8f:db:dd:78:98:be:80:d0:e5:89:c0:f4:
         4e:be:dc:25:47:c5:3d:c4:96:09:47:ad:b3:fa:02:ad:62:df:
         a5:cd:d3:c2:f9:ea:7e:34:ad:23:f4:a7:89:c1:90:38:c4:d6:
         26:58:85:84:c6:c5:eb:d8:d5:97:5e:2f:bd:2b:53:43:51:4d:
         2c:44:9f:0a:20:d3:4d:37:36:2c:c6:a8:4d:2e:f7:c9:79:f0:
         f6:af:df:07:12:df:4c:bc:02:7e:63:81:80:26:ae:79:b3:cd:
         e8:27:a9:5d:9c:c6:3e:e9:7c:a4:a4:06:80:19:73:fb:e7:fb:
         13:e3:8e:58:5c:01:c7:f0:7c:6e:f7:e7:05:a5:ac:ea:78:94:
         b3:e6:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:40:31 2026 by rpki-client