Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb4c9b25-3d14-3a68-ae90-3faf1cfa5cea.roa
File:                     eb4c9b25-3d14-3a68-ae90-3faf1cfa5cea.roa (raw, json)
Hash identifier:          8RgSD73d++r8IWS4pWcqS3xH+gKMHk6x+o/QeZBFpBI=
Subject key identifier:   72:9C:82:DB:57:99:96:AC:8A:97:11:E6:A1:A2:2C:38:A0:7A:63:CC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11B6EFF726CA180B413900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb4c9b25-3d14-3a68-ae90-3faf1cfa5cea.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     396657
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:b6:ef:f7:26:ca:18:0b:41:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=fc20db08-6524-4bc7-9c4d-38ad0d989ebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9a:25:60:84:bf:df:16:5f:74:41:b8:51:13:
                    03:d6:e8:83:55:f6:93:54:b8:48:3b:d1:51:9d:cc:
                    df:ca:14:ec:e3:7b:62:1b:c4:71:50:25:a6:81:28:
                    62:49:d3:b5:f0:4c:03:d2:ad:59:a3:6e:b8:4e:08:
                    c0:69:02:9b:b4:3c:39:ba:77:47:92:a0:83:5b:2e:
                    ce:b8:f1:e1:4d:90:67:be:f8:99:6a:9b:af:40:dd:
                    0b:4c:83:05:b7:0d:cf:c4:b1:77:b0:ff:c9:86:84:
                    1e:61:4e:25:02:f5:10:39:f6:b2:45:03:e9:99:12:
                    4e:da:2c:88:98:45:f4:ea:f4:62:5f:17:7e:5c:f8:
                    39:b8:68:11:5e:a7:ae:1d:c1:a8:3b:c4:9b:27:d0:
                    00:0e:83:8a:92:df:ad:a3:97:d8:94:ce:af:b6:30:
                    46:7d:8d:79:b7:d6:1b:4e:02:b4:1b:d5:a9:76:0c:
                    77:1d:d7:17:8a:f7:43:fc:7c:5f:40:e7:fe:1f:2e:
                    97:c4:b4:70:30:35:6d:59:36:17:eb:99:20:b3:d4:
                    2a:de:3d:67:cb:b5:da:5e:c6:3a:b1:3a:c2:0d:85:
                    2c:b5:38:3f:6f:8a:1c:cf:b9:b1:1a:19:58:13:e5:
                    c1:cf:41:a2:9d:c5:b0:4c:ec:95:a5:0e:73:e6:a2:
                    24:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9C:82:DB:57:99:96:AC:8A:97:11:E6:A1:A2:2C:38:A0:7A:63:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb4c9b25-3d14-3a68-ae90-3faf1cfa5cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ec:61:41:d0:dc:7c:48:66:9d:c9:be:32:05:09:12:48:78:
         71:fd:4d:33:b7:2c:fd:d2:63:55:7f:8b:c5:66:45:bb:d4:10:
         cf:7c:ab:f4:be:c1:5b:18:e0:d4:7c:a3:a2:fb:8e:11:1d:6c:
         36:4e:31:6f:24:c4:63:2e:9d:55:05:43:88:5e:16:bb:68:4c:
         33:de:46:79:ed:d2:7a:7f:e2:02:8a:73:12:ab:57:c3:fa:14:
         ab:cc:5e:18:8e:39:4e:fd:98:45:aa:17:52:13:f1:c4:2e:d8:
         21:53:3f:78:b6:cc:df:1f:93:4d:a3:1d:41:e9:5b:11:3a:e4:
         b4:40:b5:a5:6f:06:d9:fc:0f:58:65:f8:22:27:b6:36:c2:4f:
         30:cb:b0:31:9c:29:3d:8c:80:34:01:50:82:c9:6f:59:e2:39:
         11:f0:53:60:30:a6:7c:86:a2:02:f3:ac:2a:af:08:4d:a2:a8:
         95:e8:5f:21:05:51:d0:92:77:06:a1:65:b8:eb:00:7e:bc:de:
         ce:02:66:04:16:67:2d:68:31:d0:fa:77:e4:ef:8a:a2:b5:81:
         d7:3f:f9:17:fa:48:32:1a:f8:12:69:50:d1:9f:42:cf:79:d7:
         61:5a:d3:33:76:77:35:8b:49:d9:10:86:ea:18:4f:bf:2d:a0:
         63:bf:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:52:39 2026 by rpki-client