Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10d93636-43b0-3644-9250-19e55a66ecf6.roa
File:                     10d93636-43b0-3644-9250-19e55a66ecf6.roa (raw, json)
Hash identifier:          J9qCZx79D08zRempmEqVC7XtyMV7168Urntg/ZGhXIk=
Subject key identifier:   6C:24:BE:54:DC:C8:04:19:19:0C:CA:BC:6F:86:7A:FC:40:DB:B2:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7E94FF6A3D30A996D6C41738
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10d93636-43b0-3644-9250-19e55a66ecf6.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     7342
IP address blocks:        2001:503:ff39::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:ff:6a:3d:30:a9:96:d6:c4:17:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=59e6215f-36ca-4ebd-b7ba-76902f077d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2f:27:7d:32:d8:f4:80:a8:f7:dd:76:a5:06:
                    cd:8b:6a:c4:01:97:05:6b:93:b8:63:85:60:49:38:
                    ee:61:9c:84:94:63:66:14:eb:9e:9a:2c:cb:f0:4b:
                    3f:ec:63:ec:55:18:60:07:dc:8f:89:5e:bb:32:a0:
                    1c:f2:85:a7:9b:09:1e:2c:3b:70:63:71:ee:b9:95:
                    a6:2c:d0:80:1d:7c:9e:2b:d3:4c:d3:f8:e1:dd:62:
                    49:2c:e9:ad:dc:6f:e3:a0:6f:1d:3a:d7:dc:01:32:
                    c9:a2:54:0a:9b:18:3f:f2:8a:d2:e8:a5:4b:5a:a9:
                    a5:93:9b:74:da:a1:23:3a:f3:5b:fb:08:de:c3:b0:
                    bc:21:9c:a8:5a:19:3e:b6:7f:d8:ac:dd:d9:9e:bd:
                    ae:7a:d0:90:10:9d:69:d4:72:05:ab:45:76:f4:14:
                    b8:23:9d:26:d7:7f:88:52:ae:2a:dd:04:f6:21:76:
                    57:8a:de:32:d0:9d:b1:3d:49:74:86:a6:a5:57:3c:
                    b1:06:3b:13:30:f5:ef:d9:f6:52:f4:4e:7a:a2:ae:
                    da:74:b7:81:2f:c8:d5:d0:6b:2a:e6:18:63:2a:ec:
                    51:aa:c9:9d:cb:cc:f5:39:26:d2:c7:b1:c8:39:99:
                    20:5b:16:c7:a3:46:82:87:eb:6a:4a:38:a3:ea:22:
                    a6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:24:BE:54:DC:C8:04:19:19:0C:CA:BC:6F:86:7A:FC:40:DB:B2:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/10d93636-43b0-3644-9250-19e55a66ecf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ff39::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:d4:62:ab:64:a2:83:2e:79:30:07:bb:d2:10:dc:80:61:b5:
         a3:52:7a:58:ce:80:3e:ea:3d:1a:65:80:c7:3d:b4:ff:6c:53:
         7d:ed:aa:6c:f5:c5:55:12:50:db:56:13:52:8a:fb:bc:65:27:
         82:4f:df:8a:b6:e9:3f:4c:be:78:69:02:6f:e4:6d:e1:cd:8c:
         a1:38:8d:64:98:f7:a2:1b:4d:d8:8d:00:13:a7:a6:1e:04:6c:
         d7:70:48:cc:b5:74:27:1e:50:49:e7:39:ed:c7:17:77:66:0e:
         4a:89:84:de:e1:4c:a8:36:14:fe:ee:43:0b:c8:5b:76:71:dc:
         6b:23:3c:b6:c4:26:d4:68:53:9e:a4:d5:2d:43:79:38:1d:b6:
         0c:64:ec:0e:b3:50:84:5c:d9:db:7c:1a:17:7b:be:d6:0c:6d:
         09:c6:47:bf:2a:4b:5b:89:1a:37:e8:87:c6:b5:80:36:7b:bc:
         f0:8a:b1:27:b9:7b:2c:07:75:4f:5a:0a:08:03:09:0c:21:c8:
         14:1a:ce:6e:47:03:c1:58:0a:ae:98:c1:d7:ad:b2:17:f8:76:
         f4:22:43:76:b3:9a:48:5a:b6:47:17:4f:66:30:a4:b6:ea:14:
         22:e2:cf:cc:fa:45:1c:e0:cb:e5:29:5c:0f:cd:d2:e4:39:54:
         c1:82:74:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:11 2026 by rpki-client