Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06750b5b-726b-318b-be89-5f6d7047a523.roa
File:                     06750b5b-726b-318b-be89-5f6d7047a523.roa (raw, json)
Hash identifier:          3MraXog+BemD/oINN/XYQj2f0l3uH0xRwY774oYV0nY=
Subject key identifier:   AB:EC:09:E1:22:3A:61:4D:31:7F:5D:29:B3:33:F3:94:8F:75:B4:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBBA039F6DDF609EC02C0BB60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06750b5b-726b-318b-be89-5f6d7047a523.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     396602
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:39:f6:dd:f6:09:ec:02:c0:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=3762a413-5003-41f3-91f1-9669ca891531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:fb:58:f2:16:37:10:e1:ba:a1:d1:4d:d7:
                    91:ce:91:87:23:7c:93:6a:4d:ea:bb:7f:68:2a:b4:
                    a1:32:c5:c3:7f:7e:49:94:33:4a:12:f0:48:19:b1:
                    c7:75:8f:ae:cb:2c:c4:98:9b:01:51:da:f2:c7:54:
                    cc:f1:6d:cd:4d:cb:d1:3d:d3:1c:a6:da:5b:65:74:
                    96:21:9d:31:02:18:50:5a:2e:07:0c:af:ef:fc:e7:
                    c1:d5:7c:0c:d6:7e:3d:db:58:2b:54:a0:a3:25:43:
                    c1:58:ac:68:06:f2:49:f9:d1:cc:e0:ca:e2:b4:27:
                    f5:cc:d6:a5:16:e5:9e:75:6b:a2:87:36:36:d3:8a:
                    f2:ab:2a:ba:7d:f2:f2:b2:65:52:53:36:73:d8:e7:
                    23:20:e4:3e:0d:a1:bf:f4:56:b9:6f:26:c1:4f:b9:
                    a3:88:e2:13:2f:30:dd:78:34:2f:cf:bd:72:bc:54:
                    66:10:bc:1c:b2:dc:01:2c:4e:d9:48:72:80:cc:07:
                    22:c6:d3:25:ed:41:be:44:c5:14:c1:d8:7e:44:e9:
                    c4:48:38:4d:51:5b:d1:b7:8d:a2:0e:14:6f:a9:92:
                    7a:e0:ed:bb:b0:e1:35:2f:20:36:8c:3a:ef:ba:b2:
                    2b:fc:34:c4:6c:74:22:97:3f:db:32:a6:75:c6:3d:
                    9d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:EC:09:E1:22:3A:61:4D:31:7F:5D:29:B3:33:F3:94:8F:75:B4:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06750b5b-726b-318b-be89-5f6d7047a523.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d4:aa:e6:95:41:ba:c0:68:3a:4d:b9:ff:6a:e4:db:4c:c4:
         f5:ba:99:f3:af:42:37:89:a9:e3:9a:21:38:28:b4:19:39:11:
         9c:a6:31:ce:93:86:21:bc:8e:52:59:46:a6:81:d5:41:bd:cc:
         e6:ec:e6:ec:03:90:67:6d:c1:e6:0d:73:d1:f5:c5:39:9a:4f:
         2f:03:ae:81:7e:ef:59:2a:fc:53:c9:52:17:1c:cd:00:45:71:
         2e:83:7c:d2:ee:2f:dd:19:40:b0:d6:23:b0:f4:f8:b4:dd:e2:
         b4:a4:5c:dd:57:4a:93:23:50:d8:5d:e8:6c:3b:45:99:88:7e:
         ef:04:40:9c:74:81:32:ee:3e:94:72:26:9f:6a:ba:65:c4:5c:
         ca:89:cb:e6:69:3f:a8:d7:84:55:d7:c4:45:6f:38:f1:70:4d:
         95:d5:5a:8a:fa:36:a1:35:24:5b:0e:10:4e:dc:cd:30:e6:5c:
         8d:af:6e:0a:d9:15:19:04:6d:ff:50:a7:eb:0a:4b:fa:1f:cc:
         4a:e0:7d:ae:aa:22:07:a9:49:b4:2b:f2:fe:a8:07:db:b4:c8:
         4b:c6:f4:7d:57:1f:1d:f0:39:a1:01:c0:32:d8:8b:a3:7a:64:
         78:32:2a:01:e5:0c:f6:d4:25:2c:1e:30:74:d8:74:7d:9f:8b:
         f0:fc:61:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:29 2026 by rpki-client