Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fee12b1-52ef-3e51-b367-9a3d642b1775.roa
File:                     4fee12b1-52ef-3e51-b367-9a3d642b1775.roa (raw, json)
Hash identifier:          90/titx7lrEOQPmkTcDlRyqymb95wtOCrOGne67IrAA=
Subject key identifier:   D9:C0:90:AB:7B:79:2D:11:8A:33:16:97:F7:E3:F1:F6:71:99:FB:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79636B74F3C64542B83AF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fee12b1-52ef-3e51-b367-9a3d642b1775.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396593
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:36:b7:4f:3c:64:54:2b:83:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2ca138e2-d7fe-4e72-8454-a94bf75893f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:54:e2:85:6c:e8:5b:4e:cb:4b:13:2b:4c:
                    00:52:a8:e4:07:4f:c9:d8:46:ea:9e:21:ab:dc:fe:
                    d0:3e:9a:65:b2:73:96:c0:48:a1:d8:7e:33:15:1e:
                    28:0b:4d:b1:e7:76:09:4e:ee:be:1c:5d:cd:05:63:
                    af:1e:1e:e9:1b:b5:27:9d:0b:2a:f2:b0:1b:11:81:
                    aa:f1:12:86:f4:16:72:db:68:79:c5:51:8d:30:0a:
                    3b:67:f5:dd:c8:10:5c:7b:7f:e7:db:8e:b7:45:c1:
                    93:6b:17:2f:db:38:97:40:f6:bd:e1:4c:91:5d:54:
                    00:5e:f5:f3:9a:59:4a:f9:92:50:f3:69:f3:dc:9e:
                    d3:b9:c5:cd:17:64:a1:05:ac:dc:a0:a4:c6:0d:4a:
                    26:4c:0e:d2:8e:2b:3d:3e:e2:7e:ca:34:58:57:fe:
                    1e:f7:5f:78:ad:64:cb:22:f8:a4:70:61:c5:76:b7:
                    46:85:e5:c2:e1:0e:de:7e:e0:b3:2d:fd:db:02:06:
                    7e:f2:69:20:fd:93:f8:f6:72:68:1d:79:8b:ce:3a:
                    e1:a3:9e:9f:42:bc:87:b6:54:82:ad:ba:a1:c1:39:
                    96:f8:e8:1a:07:55:c9:7b:5f:db:fe:d8:ff:58:5f:
                    fb:a5:36:f5:61:47:04:a1:f4:c4:5b:34:e1:24:dc:
                    1a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C0:90:AB:7B:79:2D:11:8A:33:16:97:F7:E3:F1:F6:71:99:FB:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fee12b1-52ef-3e51-b367-9a3d642b1775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:fd:16:44:b8:f2:ce:0f:49:dd:50:66:a6:0a:ec:89:a4:76:
         88:6a:b8:fc:2f:e4:da:f8:81:e4:56:c8:a4:59:fd:19:55:95:
         4b:d3:49:56:28:d6:d3:26:79:cd:aa:c8:52:30:68:56:d0:90:
         be:2b:dd:56:81:e8:fb:0e:89:7c:14:36:3b:08:78:d9:bb:3e:
         f2:5c:41:73:e3:66:98:b4:68:59:f4:54:fe:d0:96:85:4c:4a:
         c8:84:99:f8:48:ae:b3:46:92:cd:57:ec:b5:47:48:80:ef:3a:
         4a:e9:aa:10:bc:80:31:d4:f0:b3:38:c5:85:a8:94:5f:82:97:
         bf:a6:53:0b:39:5d:d8:eb:5a:bf:02:9f:16:13:d3:3b:3a:6c:
         18:0e:cf:22:3e:d9:95:b2:2b:9f:25:2a:4a:41:1f:84:10:a5:
         55:d2:28:b9:9b:a5:ee:56:13:0c:7b:77:dc:a4:46:64:63:cd:
         5f:d6:c8:53:b3:9e:f8:64:bd:68:68:1d:09:c9:6b:c3:15:52:
         59:48:5f:11:26:6a:3b:03:85:be:44:b9:d2:a2:a8:44:ff:b3:
         c2:e7:d4:b6:bd:4c:c5:ad:40:6b:6c:a6:d0:67:f4:06:5e:2b:
         5c:72:ca:e3:22:51:1d:f3:f0:0a:ba:10:8b:b1:93:2a:62:f2:
         78:1a:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:23:53 2026 by rpki-client