Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/590545ca-64c2-3393-820f-99dc88cda4d9.roa
File:                     590545ca-64c2-3393-820f-99dc88cda4d9.roa (raw, json)
Hash identifier:          DSY+bZLGwSsvkQXK43Qv7IgJ89W+Pt6zvoEXmH3dw2A=
Subject key identifier:   3F:00:A1:DD:56:1F:C9:43:0B:4B:07:43:30:50:03:A7:E8:34:2E:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4DB9F27C886C3DFEBB1A3700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/590545ca-64c2-3393-820f-99dc88cda4d9.roa
Signing time:             Fri 26 Jun 2026 21:00:11 +0000
ROA not before:           Fri 26 Jun 2026 21:00:11 +0000
ROA not after:            Thu 24 Sep 2026 21:00:11 +0000
asID:                     397198
IP address blocks:        2001:500:13f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4d:b9:f2:7c:88:6c:3d:fe:bb:1a:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 21:00:11 2026 GMT
            Not After : Sep 24 21:00:11 2026 GMT
        Subject: CN=2b996ea4-c717-46a2-a813-7576d0bf64aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1f:04:1f:b4:11:83:b7:4d:b8:e1:c7:4a:d5:
                    3f:8a:30:8e:26:a9:76:94:eb:75:e3:0b:9f:41:a3:
                    d5:c5:bc:54:b6:41:ae:2b:1f:4e:c0:2f:23:bc:1c:
                    2c:26:53:a9:a8:ab:5c:3f:e7:19:72:c0:55:a7:90:
                    f8:8b:e1:28:2b:a4:a0:a6:ab:a1:2a:39:8b:4a:11:
                    08:02:59:62:51:14:83:59:6c:39:b1:60:b2:ff:43:
                    62:00:19:d4:6f:0d:a4:1c:32:f6:96:f7:43:d2:8a:
                    40:83:a2:79:98:da:ae:ea:4a:85:42:27:00:5e:e1:
                    8a:be:d2:1b:fa:a7:f7:14:b7:42:5e:c8:9e:22:1e:
                    62:30:52:e5:d5:9d:2d:52:cf:81:ff:72:9a:da:9c:
                    d6:89:4a:7b:7c:c0:63:b6:19:93:26:8c:91:56:e5:
                    56:6b:69:75:dc:39:0f:4e:47:b9:62:d9:70:99:92:
                    19:64:9b:fc:db:ee:61:06:18:f7:19:82:95:9d:2a:
                    53:e6:84:5b:85:f3:bf:ec:f7:b8:bf:8b:0e:20:42:
                    20:1a:74:59:01:ee:25:3a:bb:6c:b8:61:c2:1d:97:
                    6a:91:7e:ab:b9:68:a9:eb:de:b9:67:3b:10:16:26:
                    ea:a2:73:24:69:86:ce:13:96:35:6d:f7:81:e9:59:
                    99:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:00:A1:DD:56:1F:C9:43:0B:4B:07:43:30:50:03:A7:E8:34:2E:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/590545ca-64c2-3393-820f-99dc88cda4d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:13f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d7:76:88:4b:51:e6:d1:e2:9f:f8:7e:32:6f:b6:01:d3:3f:
         6f:51:88:c6:e1:df:83:61:f0:b5:90:60:c3:33:b0:93:ae:d3:
         65:87:7f:a5:2b:09:3d:49:8e:ef:d1:ca:ef:3a:a0:3c:ec:e4:
         5b:fb:e2:ad:58:ea:8b:91:17:4f:74:ac:38:c5:25:44:b7:ee:
         8f:6b:79:b4:6c:ec:77:67:75:8e:3e:0a:1f:02:c1:74:ce:3c:
         fb:24:3b:99:4e:e2:0c:b1:03:c9:d6:ee:7d:5b:45:21:e7:96:
         73:4d:25:d2:65:ef:8c:39:56:f8:48:10:95:5a:85:7c:6d:89:
         04:96:10:7e:84:32:27:07:80:f6:45:b2:c4:67:73:7b:aa:4c:
         57:3d:4f:70:7d:7c:23:fb:7f:de:6f:d9:bc:c5:d3:94:14:16:
         e7:b5:43:76:c6:f7:31:a2:ed:dc:d2:66:01:fc:08:84:1a:a8:
         00:10:37:ba:11:06:da:e2:cc:15:22:48:57:72:c3:e9:5b:f0:
         b2:12:22:9e:fe:df:e1:8a:ad:92:6c:5f:f1:92:0c:bf:cb:26:
         33:13:90:0d:ae:b7:e1:00:cc:a1:17:0c:f7:f8:79:f3:58:15:
         b4:84:7f:8a:8d:74:4b:ac:65:4b:25:f0:3d:e6:e7:20:af:e4:
         3d:25:ed:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:39:54 2026 by rpki-client