Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5b47bb3-098c-3349-8901-108ce84db641.roa
File:                     f5b47bb3-098c-3349-8901-108ce84db641.roa (raw, json)
Hash identifier:          48iiw1xop/paXG/+q5lct1geJlsqXtTo4kRi0cpzozI=
Subject key identifier:   99:F9:05:FE:6A:F8:68:16:BC:F5:67:D1:BA:B7:D8:F1:F3:7F:07:38
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EBB11CAF9D6748ED67D3F6140
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5b47bb3-098c-3349-8901-108ce84db641.roa
Signing time:             Wed 05 Aug 2026 01:00:12 +0000
ROA not before:           Wed 05 Aug 2026 01:00:12 +0000
ROA not after:            Tue 03 Nov 2026 02:00:12 +0000
asID:                     10515
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bb:11:ca:f9:d6:74:8e:d6:7d:3f:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  5 01:00:12 2026 GMT
            Not After : Nov  3 02:00:12 2026 GMT
        Subject: CN=31ea1121-502a-4a11-bd31-ec4da03c39dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:8b:88:a1:87:88:65:8d:fd:5b:bc:d3:28:
                    4d:e6:b5:0a:01:be:78:40:a1:cd:1c:2a:78:03:ab:
                    6b:81:85:19:6e:a0:7b:08:85:55:0e:4a:a9:31:9d:
                    2a:e4:4e:e1:d5:da:70:3a:6b:b8:c3:c0:6d:5e:70:
                    ec:59:04:f6:e5:d9:cc:a8:17:72:8e:e1:2f:87:bc:
                    e0:3a:0d:48:cf:22:4b:23:7c:37:d7:75:bd:4c:26:
                    3a:84:bb:36:ce:a0:a0:8f:c1:26:aa:fc:47:af:f0:
                    7a:2d:f4:f5:67:19:a4:e3:f8:fa:f7:d3:a1:f6:64:
                    b6:9b:d5:c6:2a:16:fa:9a:15:ae:00:94:27:d7:e8:
                    cc:6a:ac:e3:da:ab:ce:39:8c:40:7e:b9:8c:3f:9e:
                    4f:9b:2b:8b:a5:e6:a2:cc:3d:4b:0f:86:27:a7:f3:
                    f8:fe:ae:c0:d1:f8:b4:a6:c1:56:92:23:1c:05:51:
                    d7:c8:b1:7d:c0:b2:70:46:be:85:43:3b:4d:bb:f2:
                    c9:3d:33:59:e0:7d:c9:db:b2:36:6c:b7:98:1c:7a:
                    1a:40:ed:14:f1:40:3d:46:ba:53:61:c5:c6:ec:e6:
                    e2:f1:f5:34:75:84:6d:5d:bb:71:53:b2:78:b4:42:
                    cb:e6:14:1c:41:48:2e:f8:a9:24:d7:be:46:45:62:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F9:05:FE:6A:F8:68:16:BC:F5:67:D1:BA:B7:D8:F1:F3:7F:07:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5b47bb3-098c-3349-8901-108ce84db641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:89:7b:95:f5:66:fb:5d:6b:a5:92:b3:04:cf:0e:83:d0:19:
         13:b0:4e:5f:08:5b:bb:b2:ef:79:68:38:95:85:80:a1:5d:5c:
         e6:11:20:46:c8:8f:93:b3:1f:fc:18:6b:7c:f1:d4:08:0b:fc:
         eb:24:7b:20:11:69:28:70:19:43:db:05:ba:c7:df:15:b2:89:
         22:25:77:cb:6a:0d:8c:fc:3c:66:13:91:b3:92:6e:39:28:9c:
         a3:bc:4a:14:18:6d:1a:7f:39:57:3f:3f:6e:0b:91:ad:d4:06:
         3b:5f:9d:7f:dc:07:14:72:c9:bf:d4:aa:30:66:53:6f:61:74:
         12:fc:c6:52:24:ea:53:a2:f5:ee:14:3f:a3:34:5b:89:13:e3:
         1b:f7:4d:0c:b7:e2:11:c0:65:5b:9d:9f:ba:37:e5:c3:48:8b:
         01:00:f0:2a:58:cb:de:97:7a:2d:21:41:18:5a:c6:1f:da:8a:
         bd:33:a8:a6:64:91:be:bc:33:8d:47:33:80:cb:78:b9:88:32:
         ff:74:ac:b0:f7:55:d6:4f:b8:79:a6:4a:99:41:1e:41:5c:2a:
         05:7c:ca:90:9d:8e:75:6b:ca:ef:50:a2:09:53:64:84:fa:ea:
         11:9c:1e:96:01:07:8f:30:44:8b:9b:52:1d:2e:00:de:a6:e8:
         56:da:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:47 2026 by rpki-client