Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de571f82-3fdf-3125-89aa-059f0e07c6c0.roa
File:                     de571f82-3fdf-3125-89aa-059f0e07c6c0.roa (raw, json)
Hash identifier:          yJq/MmTF9T+HIg94Jv1n0eSvrGHaLidFEmt/4CCkOD0=
Subject key identifier:   1D:A8:89:6F:97:86:DB:BE:3A:DB:09:DE:AA:5F:B0:94:79:FC:8E:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11C725BAFE115786DFCD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de571f82-3fdf-3125-89aa-059f0e07c6c0.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     396719
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:c7:25:ba:fe:11:57:86:df:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=5e960f9b-ace0-4c46-b7be-3371fb4b5a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:40:86:b5:b1:6e:ea:f2:ae:be:a1:59:24:53:
                    51:ec:54:83:8b:4c:9b:03:3b:37:b6:05:7f:a7:56:
                    0e:e5:02:ac:16:b8:cf:6c:82:99:d1:67:e8:bd:85:
                    f8:90:a4:df:a5:99:91:29:2a:32:b3:08:33:ac:84:
                    31:d1:f3:27:63:96:83:f9:6a:4d:47:eb:f7:8e:d9:
                    0c:e2:3b:05:77:ed:3f:a2:14:35:51:cc:a0:b3:0f:
                    02:3b:e4:b1:f4:c0:51:45:47:2c:0c:e2:cd:f0:e5:
                    a7:e1:51:7e:e7:b8:bb:87:57:43:63:76:ed:44:ad:
                    b7:a6:11:91:0c:77:51:65:46:c4:20:26:95:09:27:
                    99:ae:50:43:cb:10:86:98:8f:e3:44:63:ca:24:b8:
                    78:d4:88:0c:45:e7:fb:7d:3b:4f:8e:2e:4e:cd:80:
                    fc:6b:3c:a1:20:81:e4:1a:a5:b3:bc:f4:35:92:be:
                    28:45:db:87:d4:58:86:a6:dc:94:97:0d:69:fd:50:
                    82:d9:31:d3:5f:b4:cb:dc:66:a8:c1:62:02:42:e1:
                    8d:3e:6f:3b:2d:be:90:88:72:30:6d:30:35:fb:00:
                    2e:0c:56:4d:03:97:c3:2e:14:27:ea:bf:eb:1d:86:
                    0b:a2:aa:ab:13:00:66:72:a1:49:1a:93:b5:d9:23:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A8:89:6F:97:86:DB:BE:3A:DB:09:DE:AA:5F:B0:94:79:FC:8E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de571f82-3fdf-3125-89aa-059f0e07c6c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:12:d6:03:f6:50:2c:55:0c:ef:71:ac:36:ec:3a:3d:75:
         68:98:a3:c0:a2:2c:a9:62:fe:4f:9c:af:13:15:53:06:c6:6d:
         c8:3a:db:32:4c:bf:6f:36:7d:8f:a3:e2:ca:1f:4e:8a:64:b1:
         5a:71:8b:1f:73:35:8a:e6:e3:bf:40:77:d3:ae:e2:ff:cf:00:
         d8:49:f4:71:a3:d4:80:e5:ba:12:42:f7:26:94:89:ac:d7:0b:
         bd:04:d5:b5:04:9b:89:54:91:dc:1e:60:9c:4d:b0:a5:72:33:
         ca:91:e4:48:18:d5:cd:e7:c4:d6:91:d6:5a:a9:a2:a9:1e:51:
         f2:cf:b4:b3:7c:43:ef:a4:63:a0:28:91:b2:70:35:20:4e:d7:
         fa:1a:78:db:00:5c:a7:f5:2f:71:4b:41:88:45:f9:b2:33:8a:
         7f:f9:2e:6d:0c:21:23:06:51:78:dc:59:1b:4c:be:dc:34:8b:
         57:c0:bd:12:34:6e:38:42:f1:9c:f3:87:5b:1a:61:ff:37:39:
         22:45:68:fd:58:95:87:94:5f:28:2e:e2:01:04:9e:49:be:57:
         1c:05:da:eb:f6:12:6a:ff:bc:28:d3:61:38:88:5a:b4:7c:3f:
         62:77:83:c3:8c:7b:d7:04:ae:2a:ce:a7:cc:41:ed:c9:f4:83:
         18:79:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:58:42 2026 by rpki-client