Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0033946-d4ca-37d6-be20-8141a512d285.roa
File:                     a0033946-d4ca-37d6-be20-8141a512d285.roa (raw, json)
Hash identifier:          l0YM2ZihsLDMoBFw7Vk1yv41B61qK97l3lQUkTlidWA=
Subject key identifier:   68:4F:DA:A5:16:C6:4A:C9:80:FB:59:85:74:F9:5F:E0:CB:E4:13:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7964A5A36844353BDB25140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0033946-d4ca-37d6-be20-8141a512d285.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396604
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:4a:5a:36:84:43:53:bd:b2:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=42fbc76c-b52b-4f54-af52-b47da9c76746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f7:af:1b:65:2a:da:d1:49:5b:75:cd:79:bb:
                    54:65:d3:9a:0c:2f:12:51:32:d3:0e:da:d3:c8:27:
                    91:a5:da:65:4e:de:2b:4f:70:f8:57:2f:90:30:13:
                    c1:64:6f:95:d6:3f:46:6c:3d:9b:6f:be:3b:1d:36:
                    6f:5c:ad:b8:5c:c9:d3:6f:90:04:d4:17:2d:6f:66:
                    b0:69:d8:c0:84:00:d1:0b:fb:92:7d:29:72:3f:0e:
                    78:41:89:0c:1a:cf:e5:a9:21:1f:44:66:04:7f:4a:
                    1e:dc:a1:56:c1:bd:c0:2c:b5:13:2e:46:5e:ae:05:
                    71:2a:83:23:9a:10:23:2b:21:d7:8b:81:84:f5:27:
                    80:8e:f4:33:3a:0f:57:83:6c:01:b4:34:09:9f:1f:
                    17:01:18:a2:20:2f:29:8a:b4:dc:c1:d9:73:1f:1c:
                    53:77:93:9b:8a:36:b6:61:bc:0b:92:10:8b:fc:24:
                    3c:24:74:3e:5a:2a:1a:9a:ca:ab:3b:eb:70:44:d5:
                    ad:ca:51:e6:e1:a6:85:4c:f7:68:be:20:67:36:8d:
                    cf:8a:fb:d9:8e:bf:23:6e:08:a7:54:2e:91:fd:95:
                    ab:64:79:d4:8a:49:f2:a3:f5:4d:10:89:d5:ca:59:
                    5e:f9:62:5a:7a:c2:f0:a8:7b:1f:2c:9e:c5:e8:2b:
                    56:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4F:DA:A5:16:C6:4A:C9:80:FB:59:85:74:F9:5F:E0:CB:E4:13:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0033946-d4ca-37d6-be20-8141a512d285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:43:92:58:50:b4:b2:06:d6:64:ac:b1:48:cb:3a:34:00:08:
         50:06:53:56:8d:0a:48:0d:89:e3:73:d7:2d:31:0d:c5:e1:eb:
         ab:fb:5c:c4:f0:d2:09:8a:d3:53:f1:48:cc:94:32:9e:ce:bd:
         86:25:00:93:44:4f:32:3f:d0:b3:f4:f8:d2:35:4b:a5:13:3d:
         10:cc:95:a7:78:51:da:ad:32:ed:f4:1b:a5:ec:7b:5a:be:ca:
         75:40:b7:ae:94:f8:1b:b0:44:1c:f0:b8:3a:59:4c:20:a0:92:
         0a:d0:c2:71:d3:1a:62:96:c3:6d:74:8b:b6:38:b1:a3:8d:d7:
         bd:e9:58:60:31:4f:dc:76:3f:a7:14:12:f1:dd:64:14:75:e3:
         32:70:bf:bb:1b:2c:d3:b8:f4:53:41:3f:64:21:ed:ca:e0:ff:
         45:b8:c6:48:25:06:1a:ed:f0:9d:91:d1:20:d7:1e:65:98:30:
         8c:e9:f0:4e:70:d6:d0:fe:44:53:f3:32:3e:c0:e9:b8:6e:33:
         1b:62:48:c4:a0:d9:39:fc:b0:07:dc:b4:a8:77:ce:4b:9e:ba:
         3c:02:b5:b9:92:76:8b:0c:d4:5b:0b:14:fa:3b:c0:ea:2a:33:
         51:ab:7e:38:1b:79:d4:eb:f0:94:73:05:43:41:be:42:1e:cc:
         65:67:22:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:35:20 2026 by rpki-client