Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c158f08-e900-3f0b-bd14-de0c55edd9d2.roa
File:                     6c158f08-e900-3f0b-bd14-de0c55edd9d2.roa (raw, json)
Hash identifier:          BUcCVswAU8/gDz2kGfiprdaQlyCxP1i9TZkWbOD3yd4=
Subject key identifier:   FE:29:63:6C:5C:2E:67:9D:C2:3F:86:94:2B:6A:AB:5C:B2:33:72:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB2B19C15EF4DFCF59E77D900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c158f08-e900-3f0b-bd14-de0c55edd9d2.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     396597
IP address blocks:        2001:503:d2d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:9c:15:ef:4d:fc:f5:9e:77:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=c59db0df-7541-437b-98cd-3008cf006a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:48:b7:de:d1:a2:a9:e7:f1:3e:5e:e6:2d:
                    ac:15:75:53:89:38:f5:a8:87:08:b3:f8:ff:37:d1:
                    c9:9a:ef:f4:10:0f:b4:1e:ad:93:89:0d:a6:2e:8c:
                    16:52:09:9f:c1:d8:af:a7:21:f9:c4:3c:59:da:5a:
                    4b:c3:c5:5f:ab:3b:6c:76:d5:b2:cf:fc:d1:7b:a1:
                    67:f3:2d:55:b2:02:bb:fd:b0:66:67:1b:96:c9:fa:
                    6b:69:0f:e1:f9:b4:93:c4:a2:6b:0d:9b:59:f7:27:
                    19:76:cc:41:fe:b2:73:fd:5b:5f:ec:84:a8:f2:d5:
                    73:d1:e5:bf:3b:1b:e1:6b:93:ca:cc:f7:33:2a:aa:
                    be:f0:db:93:06:11:1b:97:2f:83:68:80:a4:26:52:
                    64:9f:33:a7:53:88:3f:33:fd:37:a1:0c:a0:54:8e:
                    3b:37:a5:84:e4:e5:1a:92:76:7a:b4:d9:a7:a3:86:
                    bc:ec:b9:40:18:f4:af:d5:db:0b:3f:9a:dc:04:36:
                    21:72:52:42:24:c9:09:bd:5c:9d:f1:9f:03:2d:2f:
                    84:73:2c:1c:35:30:e8:06:66:fb:d7:9f:a8:a8:69:
                    f4:cb:a0:2e:75:f3:cf:2c:ce:e9:c4:2b:6f:ad:bb:
                    87:45:77:60:20:f5:25:12:6f:32:1f:93:46:03:3b:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:29:63:6C:5C:2E:67:9D:C2:3F:86:94:2B:6A:AB:5C:B2:33:72:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c158f08-e900-3f0b-bd14-de0c55edd9d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:6a:7d:15:dd:de:39:94:82:16:22:b0:99:b8:23:cf:a2:4f:
         42:82:fc:06:e8:3c:c5:88:19:7c:d6:8f:ea:96:65:9b:90:a2:
         89:9e:2f:e0:49:14:88:32:56:3f:2a:d2:4b:83:59:b5:23:89:
         91:31:9a:d0:94:f9:38:e3:5b:fc:5f:e3:d3:16:64:a5:c6:df:
         26:f7:23:6a:c4:cb:9b:67:ff:d3:78:c5:66:d6:5f:79:42:83:
         f0:32:6c:70:d3:c2:ec:2d:16:ee:97:6e:75:27:80:0e:95:6d:
         5b:39:6b:ce:5b:5d:75:73:a9:0e:6a:68:8f:cc:63:08:ed:b8:
         59:cc:62:40:00:35:5e:0c:98:3c:33:e3:77:92:9c:7a:29:f8:
         d1:53:ae:2d:90:26:af:04:4a:f8:ee:f2:8f:69:10:eb:34:44:
         e3:15:d9:6e:7c:57:b0:55:62:7e:8a:e2:8a:3e:03:59:b8:17:
         84:a4:53:87:50:a6:6f:28:5b:df:8c:b0:a7:41:ba:5b:d0:0f:
         44:7e:3c:44:ff:85:ae:b6:25:a4:f4:48:c4:02:5c:0b:2a:3f:
         62:a1:2d:66:bf:19:b0:d6:30:2d:73:26:cf:bc:3c:6b:db:15:
         cd:e2:54:f5:62:75:b9:b6:d7:db:c1:54:5b:62:3c:47:7f:f8:
         18:8d:42:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:14:32 2026 by rpki-client