Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5de353e1-cf8c-35e2-8ca4-9dbc5d3c6f77.roa
File:                     5de353e1-cf8c-35e2-8ca4-9dbc5d3c6f77.roa (raw, json)
Hash identifier:          tW5KSSVW18r/qu4wNNllbPYpFtCFkYVuNjEGQFcKgVg=
Subject key identifier:   A5:4A:D2:EF:89:AE:7D:C0:49:97:80:00:D2:83:DC:99:42:58:07:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7964680251BDEC39CCCE300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5de353e1-cf8c-35e2-8ca4-9dbc5d3c6f77.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397211
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:46:80:25:1b:de:c3:9c:cc:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c17cee5e-c090-423b-80e2-426aa5981f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:98:f2:bc:f9:a7:c2:cb:2e:c6:8b:c7:16:
                    01:9c:98:80:b3:28:27:0f:5a:41:71:e2:79:bb:fb:
                    5b:39:c1:84:49:82:6d:ae:ba:c4:c5:37:88:a0:93:
                    02:5c:e2:06:8a:5d:23:f2:80:4b:40:02:31:dc:09:
                    ff:11:5e:1a:68:92:58:fe:b5:20:e3:b9:a6:63:f4:
                    59:10:d9:8b:92:b0:fa:29:53:3e:c3:0b:2d:43:5d:
                    9d:45:88:42:fd:a9:ad:09:6c:6f:1e:bd:d6:e2:44:
                    20:8b:6c:69:9c:b9:08:82:fb:82:f8:31:07:b0:98:
                    d8:f7:ff:0a:5a:f6:44:3a:1e:13:12:a8:85:2f:8f:
                    3d:2f:9c:90:9f:6c:35:db:c2:13:24:54:f6:fe:ad:
                    71:77:4d:31:19:cf:8b:12:b5:87:ed:6a:55:e7:a6:
                    8d:be:28:4f:f0:bb:5a:97:4f:56:d1:f2:d7:b1:3d:
                    09:69:a8:60:62:03:5e:2e:55:fd:06:35:03:c5:d1:
                    83:7d:2d:45:ac:33:a6:8e:69:06:59:c3:98:69:5d:
                    b6:05:9b:32:8a:07:23:0e:39:23:44:62:9b:72:ea:
                    ca:c5:15:62:dc:6c:f6:bd:f3:74:93:0c:94:27:df:
                    73:57:8a:98:9d:31:d0:6f:89:44:3f:7b:7e:c0:45:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4A:D2:EF:89:AE:7D:C0:49:97:80:00:D2:83:DC:99:42:58:07:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5de353e1-cf8c-35e2-8ca4-9dbc5d3c6f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b8:fc:b2:91:9a:05:c4:d1:5c:31:fe:87:63:2a:92:35:a7:
         c5:13:7a:02:db:74:ad:2b:ed:86:32:d9:bc:bd:1c:5a:87:66:
         dd:89:97:33:5b:48:ea:5f:69:89:dc:b1:83:f4:2d:07:c7:0e:
         8a:0c:32:84:2a:e0:31:2c:14:4b:b8:6f:b1:f3:1e:51:3b:12:
         b5:dd:35:47:d5:06:db:d7:0c:0f:da:9e:11:4d:c3:29:72:7e:
         6b:3b:6a:81:65:4b:8e:ae:8a:51:19:31:9c:19:c2:59:5b:21:
         c7:23:9c:c8:43:8e:a2:c3:27:51:5c:5a:99:b7:3c:83:a4:fa:
         6f:55:81:8c:2d:b2:67:f5:7c:b7:c0:65:b5:3c:15:ad:ca:36:
         13:93:54:84:80:3a:29:79:c8:c5:d2:56:ba:f3:83:5f:6d:b2:
         c6:3a:10:f0:f2:e7:fe:c1:2c:7e:e7:ab:e3:8f:34:08:51:5d:
         d6:e5:73:df:70:d7:a4:a3:99:25:73:74:fd:35:92:1d:bc:17:
         6f:8d:48:09:7e:2d:4a:55:cf:20:e6:fd:9e:70:8a:1b:5c:12:
         86:53:0b:3f:35:1f:7d:78:8f:3b:25:44:e3:c4:b1:c3:81:76:
         9d:b2:70:ef:9f:ff:9c:f0:f2:7f:63:02:d5:c4:c5:b7:db:a3:
         d1:dc:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:30:46 2026 by rpki-client