Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e3128fb-7a5f-3adf-824f-55abbfeb8f50.roa
File:                     1e3128fb-7a5f-3adf-824f-55abbfeb8f50.roa (raw, json)
Hash identifier:          oE9pLVGJ/s0TK5t4eQrU67dSICtCTPDLwbfUXKKLa9A=
Subject key identifier:   EF:B6:86:E7:A9:65:D6:EF:FE:D7:F3:7B:49:AC:CF:08:26:3E:5A:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBA3B11A1E6D08323F42F1980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e3128fb-7a5f-3adf-824f-55abbfeb8f50.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     20172
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:11:a1:e6:d0:83:23:f4:2f:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=0ef147df-4c7f-4748-9478-a30b950c16da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:30:5e:7e:37:82:36:22:d8:6f:12:0e:0e:45:
                    da:22:a6:fe:ab:db:83:6d:7d:2a:82:41:ae:ca:28:
                    9d:22:13:59:dd:cb:c5:1e:5e:36:81:0f:ec:e4:92:
                    81:f8:ac:9c:cb:fb:46:65:a3:a1:6c:08:1f:44:af:
                    e1:71:4b:c8:b8:99:f4:10:cc:74:c4:0b:f0:c5:31:
                    22:f7:b0:07:00:c0:bb:27:90:1a:b9:f0:68:5a:d4:
                    98:95:db:d4:d0:e8:e8:00:19:56:7d:2a:1a:2f:4b:
                    da:87:94:10:aa:da:83:71:1e:56:3e:9d:a3:7a:fd:
                    1d:d7:06:2a:98:e7:40:ec:1e:58:88:51:a2:4b:16:
                    6e:3d:ef:e1:c0:ca:89:af:a5:55:27:d0:42:d4:1c:
                    2b:4d:06:08:b3:03:8c:1a:00:0e:98:cb:a9:4f:75:
                    82:fe:48:4e:19:43:7f:e8:f1:f6:b3:f8:62:6a:27:
                    a3:eb:21:68:49:d1:3b:42:84:96:0f:70:88:46:99:
                    1c:59:cf:d9:30:0b:2b:d8:ab:1a:7f:33:1c:26:33:
                    76:48:38:27:f9:bf:b8:19:ff:ef:9f:fb:b8:78:f1:
                    32:0c:c8:81:d5:f3:42:c3:ed:9d:aa:a5:8b:f6:b0:
                    30:c6:2e:4c:25:64:62:17:15:a0:ab:34:81:8b:e4:
                    f3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B6:86:E7:A9:65:D6:EF:FE:D7:F3:7B:49:AC:CF:08:26:3E:5A:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e3128fb-7a5f-3adf-824f-55abbfeb8f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:c7:32:07:7c:c2:1f:2f:3f:a2:ed:1e:8b:f9:02:fc:49:98:
         7b:c5:e3:b9:fb:53:2b:e0:4c:78:9d:03:6e:cc:5e:31:91:aa:
         f3:f6:7b:e6:e6:55:b2:13:e1:0a:e3:b4:42:2f:32:4e:ab:5f:
         68:cf:43:4f:47:61:86:31:01:8e:e2:01:2e:9c:cf:83:e2:55:
         57:13:34:83:3d:22:54:d3:c0:16:d7:3c:73:e9:63:c3:59:4b:
         2f:9f:70:cd:7d:ac:00:ba:4c:f3:7e:dc:4b:cf:ac:89:85:22:
         42:86:d1:73:fa:cb:a2:89:e6:67:17:a6:09:c0:29:01:30:51:
         3a:07:18:af:13:26:fb:2e:df:ca:85:9f:c0:c3:8c:a1:d2:9e:
         7b:2d:11:7a:08:63:45:6b:73:49:b2:1b:8e:7c:0a:05:bd:98:
         c8:d7:02:89:d4:ea:a1:36:10:ed:d6:b7:d8:1d:7e:9b:cb:cf:
         81:c0:8a:4d:50:56:90:0a:37:96:d0:0f:cb:0e:8b:a8:ad:85:
         f6:fa:a8:6c:15:05:7f:8c:e9:5c:13:fb:40:4d:99:79:c5:75:
         69:b7:da:3a:5e:fc:55:ff:8d:c6:b3:79:2c:3e:a3:a1:0e:2d:
         10:16:9f:dc:fd:15:42:96:1c:3e:63:e6:95:d8:67:76:c2:c5:
         8e:52:c9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:01:32 2026 by rpki-client