Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee2ab76a-3552-3c19-ba45-483d1fe315ce.roa
File:                     ee2ab76a-3552-3c19-ba45-483d1fe315ce.roa (raw, json)
Hash identifier:          TG6JR0PWgnskIMiaYA8q0KwasNBHA4DqBo/D/xNOI0Y=
Subject key identifier:   F1:E0:6F:18:F7:E3:F5:31:03:B1:93:D5:6E:EF:A4:B5:99:29:5D:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79A423EDDE5787CD198D140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee2ab76a-3552-3c19-ba45-483d1fe315ce.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36622
IP address blocks:        2001:500:121::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:42:3e:dd:e5:78:7c:d1:98:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ee83bd0a-1f23-43a0-896a-5fc974333076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1a:5d:cf:1c:72:e2:bf:52:47:22:09:4b:bf:
                    79:de:1c:13:3a:58:b7:30:5d:ff:0e:10:7d:03:fd:
                    db:b4:cd:8f:26:6a:23:3c:73:55:b8:29:e9:2b:7e:
                    f6:b0:92:ed:32:fb:ef:91:5e:8e:17:ef:62:e7:e5:
                    a6:f2:45:39:c0:4a:a1:93:84:02:d7:4a:36:fe:7e:
                    7d:85:a2:55:f3:cb:30:52:35:57:cd:05:d7:e3:55:
                    8e:94:2d:af:a9:2e:4d:fe:a4:62:14:5b:1c:9e:5f:
                    30:49:d9:f5:13:d4:fd:e8:0c:f5:6b:b6:f3:93:c9:
                    f5:f6:ab:59:4d:2a:cb:1c:60:f7:43:3e:c8:2e:cd:
                    a3:8e:d0:8c:11:88:eb:12:ab:cc:34:10:e2:26:db:
                    ba:9d:7d:bf:63:99:eb:55:c6:6c:00:11:d6:b6:62:
                    9c:b5:5c:73:55:1e:67:5a:41:20:fd:81:24:00:ed:
                    84:0a:fc:23:f5:61:6d:a4:92:57:ac:e2:62:99:40:
                    5b:c8:88:a8:19:aa:ab:a9:1f:50:80:3b:73:2a:b1:
                    f7:ff:c9:c5:5b:e7:6c:7c:c7:8d:6f:63:1b:d8:5e:
                    19:b4:c4:a2:43:fc:f8:f4:06:98:a8:47:5b:76:ee:
                    d7:67:8a:0c:9c:e0:f6:c6:4d:b8:ee:08:b4:85:7b:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E0:6F:18:F7:E3:F5:31:03:B1:93:D5:6E:EF:A4:B5:99:29:5D:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee2ab76a-3552-3c19-ba45-483d1fe315ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:60:3b:c6:4a:8d:ba:fa:cf:fc:7e:89:4a:5e:65:f8:b7:92:
         4b:96:93:a6:d0:b9:0e:ab:ab:04:06:3c:69:8f:78:5c:37:7d:
         df:5a:da:cd:31:9f:24:d8:7e:28:91:af:a0:bf:7b:69:18:f4:
         6c:0a:ba:ec:af:f5:ba:ff:9c:1d:ab:fa:c6:71:21:59:3a:89:
         b0:31:ba:4c:61:64:67:5c:d2:45:ba:80:b7:cd:7d:51:b3:1f:
         8a:a5:3f:9c:93:23:56:8b:41:c2:9a:b6:0a:df:68:d2:59:ad:
         cd:2e:94:da:01:8b:82:05:41:6e:6d:93:ed:19:2c:56:19:df:
         6a:3b:82:43:ad:ac:4e:bb:1c:f3:b5:1e:62:f5:f5:29:8b:78:
         79:46:06:c7:1a:c5:65:70:14:0a:b2:38:7c:e2:cb:33:57:e2:
         9c:96:37:e5:7c:60:50:22:ec:b3:5e:96:b9:c1:25:2a:c4:8d:
         8d:ff:15:0b:95:ad:0b:16:d0:9f:7e:57:74:c5:38:3a:26:3f:
         79:52:21:e4:c2:e7:d4:69:b7:47:eb:15:b4:7d:0d:c5:09:1c:
         aa:d2:6c:90:32:da:49:4f:e3:8f:da:95:22:60:f5:d5:40:99:
         3d:53:27:44:be:1d:74:05:35:6a:fb:4e:66:65:80:5b:db:8b:
         c0:9a:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:31:28 2026 by rpki-client