Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7755a6-6e8a-3d00-8edf-24c0fb1f44e7.roa
File:                     0b7755a6-6e8a-3d00-8edf-24c0fb1f44e7.roa (raw, json)
Hash identifier:          oS4btvDpEH0HVVrGxetNC0zN5I5mPzhqf7fs93PjYpc=
Subject key identifier:   8A:F9:28:5C:B0:A3:05:98:09:90:A6:3E:6F:97:A7:E1:0A:22:9E:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C036076686BFB19B81502C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7755a6-6e8a-3d00-8edf-24c0fb1f44e7.roa
Signing time:             Tue 03 Mar 2026 15:18:05 +0000
ROA not before:           Tue 03 Mar 2026 15:18:05 +0000
ROA not after:            Mon 01 Jun 2026 14:18:05 +0000
asID:                     396581
IP address blocks:        2001:500:125::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:60:76:68:6b:fb:19:b8:15:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:05 2026 GMT
            Not After : Jun  1 14:18:05 2026 GMT
        Subject: CN=bb184acc-e00d-420f-adb1-e9f341a65d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:2d:49:e2:19:0f:40:06:33:84:21:88:94:
                    a8:15:1b:49:bc:07:a4:84:cc:3d:27:1c:84:bd:20:
                    ac:d1:b5:4c:d9:db:ea:0d:92:c7:84:8f:23:0f:89:
                    41:bf:50:17:1f:98:5a:b2:70:91:77:ef:cf:fa:31:
                    b2:dd:7f:b4:33:0e:c8:b9:c3:08:3f:52:64:b0:f8:
                    9b:fc:1c:19:05:35:5b:bb:be:ae:a7:58:8b:89:63:
                    ae:fd:fe:71:45:a6:04:e1:e2:fe:be:e5:87:10:99:
                    74:11:62:45:1f:63:87:fa:38:c4:dc:92:2d:1a:67:
                    30:6e:97:71:54:05:94:43:ed:53:d9:d5:f4:d9:80:
                    d5:d2:c5:16:2f:4a:ad:f7:65:ba:89:1e:59:70:34:
                    b8:cf:0a:e6:72:48:44:df:04:5e:1c:8f:b4:2f:38:
                    22:f5:63:c8:1e:5a:1b:4f:8f:46:25:8a:9c:23:66:
                    f3:ff:4b:54:e0:22:99:42:79:54:73:9e:35:0c:cc:
                    64:cc:a8:8a:e6:5a:43:58:90:39:5e:17:38:b0:99:
                    32:50:bb:66:5c:42:be:a3:94:d6:b7:5f:fc:1d:04:
                    7d:38:d0:f5:1e:29:4d:a2:e1:7c:41:8b:e2:66:a8:
                    1d:05:d7:aa:8a:fc:cd:51:69:a0:6a:14:96:06:d0:
                    2c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F9:28:5C:B0:A3:05:98:09:90:A6:3E:6F:97:A7:E1:0A:22:9E:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b7755a6-6e8a-3d00-8edf-24c0fb1f44e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e0:3f:68:63:f7:d0:6a:47:7f:b6:81:6d:89:9c:0b:2c:7e:
         32:0f:37:7f:af:b0:7e:4e:17:d4:88:78:27:0a:b9:4c:67:5b:
         5f:76:c4:f1:0d:2d:2b:96:76:b0:97:cc:73:c6:7c:64:98:42:
         35:d1:95:ad:97:14:79:05:b4:7c:a8:87:84:18:c5:13:d3:3e:
         58:5a:6f:e7:90:92:0f:20:b9:f5:7b:d2:46:9d:c9:10:c2:24:
         44:38:76:4d:4f:77:05:12:45:69:16:21:0f:92:36:28:17:1f:
         ae:ec:94:25:ee:26:39:25:d5:d3:d8:23:f5:42:b7:86:81:06:
         98:36:08:4e:80:34:a4:7d:3a:a8:71:69:63:2b:9c:de:c5:a2:
         2a:44:62:fc:76:00:39:cf:09:97:fc:1c:f6:eb:de:b3:48:64:
         b1:15:2d:c2:84:66:74:67:90:d4:d4:bd:48:b7:4f:cd:70:a4:
         5a:88:55:56:fd:b1:85:84:29:e6:e6:7a:51:28:7b:67:72:06:
         8a:62:88:8c:7d:62:60:6e:93:8f:4c:a0:40:c6:cd:30:7a:3d:
         93:14:13:9d:7c:67:89:e4:a3:f9:ef:26:8c:cd:ae:62:a7:9c:
         c2:bb:61:b2:bd:22:f3:7b:51:3b:ce:14:e9:29:75:eb:d5:2a:
         4f:8f:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:08:54 2026 by rpki-client