Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15543465-3ded-3956-ac0a-9fe90c0ed047.roa
File:                     15543465-3ded-3956-ac0a-9fe90c0ed047.roa (raw, json)
Hash identifier:          RYNoSphCXD+DW6VtkB9R3WcWtCxtshj/8kDeJgmqfRU=
Subject key identifier:   5C:76:A4:2C:DD:DC:EB:BA:77:D0:C3:9D:3D:0A:5D:90:6A:7A:01:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DAAE030CCE881CDFAE5CB4FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15543465-3ded-3956-ac0a-9fe90c0ed047.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     36626
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:30:cc:e8:81:cd:fa:e5:cb:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=9e312470-fc97-4cf0-b59e-ab2f3dd59e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a0:5c:49:15:bb:90:64:fd:d1:20:e9:e2:d1:
                    de:b4:6f:6d:78:12:a2:ce:5c:1a:b6:0d:83:b4:37:
                    92:df:8a:e4:d6:a8:f2:45:c0:9f:18:53:0a:f2:56:
                    3a:68:ba:15:5c:0d:d2:01:dd:0a:2b:40:2a:f6:f9:
                    15:ad:e9:81:f6:41:9a:0a:2e:0e:c8:da:28:fb:21:
                    6c:f1:58:d4:52:39:6d:72:df:5c:75:d4:00:4f:cf:
                    6f:e8:60:43:68:91:6d:49:80:0b:c2:1f:15:ce:d8:
                    b7:a9:06:c5:dd:a2:a1:47:47:73:f0:d4:ff:c9:60:
                    f7:78:4e:9b:38:1b:b1:8c:62:95:11:10:a5:4f:63:
                    b6:a4:45:51:ba:c0:3b:71:25:52:a6:15:3a:f6:88:
                    80:9f:c5:ed:15:13:44:f8:3e:32:49:25:e9:bf:3c:
                    8a:7a:c3:c0:98:08:44:d4:cb:4e:4e:35:25:6e:6d:
                    a0:67:dc:a1:2f:77:ed:28:0b:be:02:a1:b6:95:37:
                    42:d5:73:31:58:53:7c:71:c3:ae:2c:f2:ce:e4:7b:
                    4c:58:39:df:1b:38:7a:ca:32:bc:4a:0c:b6:a6:cd:
                    bd:ca:3d:a3:34:16:76:82:fb:f7:d9:ac:22:f1:92:
                    8e:ba:20:4c:c4:3d:b1:06:60:f8:4c:61:61:22:be:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:76:A4:2C:DD:DC:EB:BA:77:D0:C3:9D:3D:0A:5D:90:6A:7A:01:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15543465-3ded-3956-ac0a-9fe90c0ed047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:57:ee:61:ee:24:a2:f7:85:c9:05:bb:93:dd:e3:77:b0:3c:
         a9:78:f9:d8:6f:1d:85:f1:e0:e2:98:13:a3:18:27:9e:e1:8e:
         3f:ee:75:d6:75:e2:8b:8a:84:f5:1e:ee:51:99:41:6c:4d:3f:
         76:b8:b1:d8:85:16:0c:67:39:4b:e1:a4:d2:dc:03:5b:5b:0a:
         67:1b:29:a9:21:f2:48:03:3c:af:09:64:99:0a:1d:8f:c1:b9:
         31:3c:62:d2:6c:83:ae:5b:95:c4:c3:a8:2c:23:66:3d:f3:49:
         54:35:67:cf:51:ab:6f:1b:d1:d5:0b:31:23:4a:0b:3e:03:99:
         5e:f1:c5:1e:c6:8c:ca:09:82:a4:af:0a:cb:e8:a4:7a:46:4b:
         15:39:54:5c:e6:42:33:82:4b:29:50:e3:21:44:11:27:f4:2a:
         47:88:d5:f0:52:66:95:d4:0f:28:f1:97:07:e8:a6:90:4e:2d:
         29:3b:e4:e7:52:86:61:ca:32:a0:6e:74:92:bd:78:df:67:f3:
         aa:f3:f2:44:a4:01:03:70:47:e4:35:12:f5:e0:de:7d:4b:54:
         aa:5e:21:7e:56:00:c5:5f:c7:9d:2e:18:a3:3d:1b:97:49:fa:
         69:62:2e:27:a2:24:1e:ae:17:99:af:11:dd:46:dc:61:24:0e:
         86:da:c5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:07:02 2026 by rpki-client