Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/876e71ef-e5b4-33e9-80bf-ccb4dcc87125.roa
File:                     876e71ef-e5b4-33e9-80bf-ccb4dcc87125.roa (raw, json)
Hash identifier:          B80hBQpC8Hd0X6M9Xiw6554Cx+zv6zXnQkkopBGBUSs=
Subject key identifier:   3E:AA:BB:92:73:99:68:2C:10:1B:FC:64:53:46:98:9F:96:EE:C1:DE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7883DDFB420F30FE9B24B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/876e71ef-e5b4-33e9-80bf-ccb4dcc87125.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396552
IP address blocks:        2001:500:856e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:3d:df:b4:20:f3:0f:e9:b2:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e4c7596d-7038-4bd7-9a10-7ca3669bbd1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0d:41:16:7e:0e:38:62:e9:97:5e:41:de:0e:
                    cd:87:ff:47:fa:dc:ac:3a:f4:77:30:d8:91:0e:25:
                    63:79:58:ff:26:89:45:cf:58:2c:53:56:7d:99:23:
                    7b:d3:60:d5:35:16:f9:3b:1f:0e:52:f7:97:a1:0a:
                    2b:32:cf:4a:1e:15:15:ed:d9:8a:61:0e:4a:0d:da:
                    4a:f6:ab:9e:c3:9c:c5:d0:9a:ec:ac:6f:38:95:ff:
                    e6:f2:4f:11:12:5a:8e:69:65:f9:64:b8:49:e8:df:
                    3a:23:51:5a:92:9a:29:f1:62:0d:b2:fc:68:20:1d:
                    e0:88:12:db:34:7e:9f:d9:87:0e:d7:45:d8:64:b7:
                    4b:db:bb:d0:80:b5:a2:c8:92:93:e9:62:dc:f1:21:
                    09:83:0c:87:2d:00:e8:b6:53:d1:ed:a3:a0:e8:31:
                    f9:d2:e7:96:fd:22:09:6d:a3:86:4d:01:6d:bc:4f:
                    4c:a7:0d:b7:5b:b8:e2:7b:d3:09:2d:ce:88:52:ba:
                    0d:03:ee:8d:d3:00:f0:50:bb:77:72:70:38:16:0d:
                    91:80:49:48:7f:fa:a2:31:14:50:88:b7:80:87:d2:
                    7a:98:bd:99:a1:34:5a:05:e3:4e:98:eb:e5:27:e6:
                    18:f6:aa:c1:9e:f1:c4:22:40:71:5f:37:bc:c0:ef:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:BB:92:73:99:68:2C:10:1B:FC:64:53:46:98:9F:96:EE:C1:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/876e71ef-e5b4-33e9-80bf-ccb4dcc87125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:95:10:0e:24:46:48:05:ed:89:a3:bb:c3:93:0e:73:99:54:
         ab:99:25:e6:05:91:f0:2f:e5:c5:90:36:d6:7e:a0:54:e5:be:
         62:fc:9e:c9:6b:07:0c:96:34:a7:70:cc:cb:73:ea:6c:d1:85:
         c4:06:c5:d1:46:c7:60:bd:09:94:f4:1f:01:2b:ff:90:a0:ab:
         6a:6a:ed:5e:c5:a1:9d:83:2b:f5:4d:99:df:f5:5c:4f:a3:87:
         fa:d0:21:9c:33:1e:08:e5:33:1d:3d:15:e5:4f:ce:d6:70:79:
         83:90:cc:2d:e6:93:01:1a:b0:fa:7f:1b:58:04:56:24:09:fc:
         86:16:e6:19:9a:ae:ba:ff:18:cc:41:de:ae:10:ac:f3:f5:49:
         45:d5:70:f4:e2:31:c9:ae:5d:1c:5f:4d:21:1b:6c:e0:d4:5d:
         ce:f8:d3:90:e0:8b:28:52:3a:b8:01:0f:88:5c:5e:9b:f6:93:
         68:f5:ed:79:89:7b:8b:e6:50:58:da:78:22:b4:62:21:dd:d7:
         b9:c3:8a:76:1f:94:e8:8e:27:23:3e:07:61:8c:61:ea:12:c9:
         04:e7:18:72:2f:cf:13:9a:0b:0e:32:be:2b:c9:63:c3:3c:b8:
         ad:f8:b9:a7:63:44:ee:48:28:ac:4c:c6:10:b3:31:08:cf:e6:
         9c:18:a4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:43:36 2026 by rpki-client