Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22675b6e-df80-3548-ba19-bc8c165c7803.roa
File:                     22675b6e-df80-3548-ba19-bc8c165c7803.roa (raw, json)
Hash identifier:          KRHlrQW+Jfwu/SvtwMpIjCfGKON6aCHKPljtQzuHJZ4=
Subject key identifier:   3B:4B:27:C4:CF:6F:86:2D:F2:FB:FF:4E:10:78:FB:AC:51:80:07:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D7810E38D29399C0B7980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22675b6e-df80-3548-ba19-bc8c165c7803.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     396613
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:78:10:e3:8d:29:39:9c:0b:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=0580a6cd-4c57-43fb-b8f7-37b29954119c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cf:00:a0:8a:c9:2b:ad:28:a2:d8:44:ae:b8:
                    e4:a5:ca:54:9c:23:7e:31:bf:ed:0a:36:08:94:97:
                    71:5c:52:37:74:a3:a3:25:54:b8:ae:0b:57:9f:74:
                    d2:bd:e0:a9:e0:56:c6:a8:37:fd:95:51:6d:43:ed:
                    25:da:5c:d7:6b:0c:0b:71:db:99:e5:06:95:4e:34:
                    ff:b3:89:71:9a:fe:8d:05:6c:18:f5:28:89:7a:52:
                    d2:bc:6c:d6:2e:29:45:92:46:90:98:51:12:54:d2:
                    e9:7c:5c:b8:6d:c9:fb:f5:a1:de:6c:0b:a2:fc:2e:
                    14:01:b5:11:45:47:90:59:7c:6c:7b:6d:d1:db:dc:
                    c2:3a:04:dd:53:30:5d:33:48:3a:92:66:97:ea:bc:
                    4c:cc:b6:ce:b7:51:d8:fc:29:93:ab:87:fc:27:c9:
                    46:6b:5e:96:36:ef:08:0d:3c:f4:44:af:08:e4:4b:
                    ba:c2:2d:ce:0e:72:64:95:42:40:29:09:6a:d2:8a:
                    4c:a9:15:88:29:a6:bf:cd:e5:e6:c1:fc:30:f1:35:
                    cb:3c:e7:31:06:95:3a:28:a2:fa:a8:0d:63:27:ec:
                    8a:39:6b:97:19:b5:90:ab:d3:46:a8:77:b5:25:f1:
                    24:d2:cf:c1:63:b2:ca:92:45:36:99:43:ea:75:a8:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4B:27:C4:CF:6F:86:2D:F2:FB:FF:4E:10:78:FB:AC:51:80:07:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/22675b6e-df80-3548-ba19-bc8c165c7803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:3d:cf:2c:2b:7f:60:2e:74:c6:49:1d:27:a3:22:23:3e:f3:
         a3:12:9e:87:c4:04:3f:0b:bc:1b:ee:2e:8c:cb:a0:00:41:04:
         01:34:06:be:a2:1c:ff:86:81:f8:7c:9b:59:20:55:e9:02:15:
         82:0d:de:77:3e:5b:89:f7:c8:54:f1:9f:18:e1:7b:75:55:e9:
         bb:8e:06:91:de:87:18:92:42:83:7c:fb:35:eb:60:47:3f:a5:
         80:a2:ef:33:5e:2f:b4:cf:44:e0:c3:d2:de:e9:10:e6:fc:37:
         d6:f9:72:43:db:02:4d:df:f0:78:98:b5:ba:4a:c2:7d:95:2c:
         0f:77:fe:19:ac:8c:46:4f:4e:0f:ad:8f:46:be:05:ec:ae:1a:
         7e:6a:11:8c:b2:45:2c:13:e7:5e:d7:cd:0f:e6:77:a3:bf:0f:
         96:a1:f7:08:61:43:42:b2:1c:5f:83:17:15:5b:4c:96:2e:b1:
         21:20:ad:71:cd:6b:b7:1a:03:aa:83:35:83:0e:a9:a3:3d:c6:
         2f:63:48:53:17:79:4d:45:d9:4c:e6:e4:85:9c:45:92:9e:e9:
         23:c2:ea:9b:2a:c2:53:7b:22:76:41:a7:e9:c1:ad:cf:1b:46:
         59:ea:5f:04:73:24:a4:6b:9a:ca:db:e4:d4:d4:47:fc:4d:69:
         72:43:40:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:49:29 2026 by rpki-client