Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/242799cc-dbcd-33b4-8429-932b0763ee93.roa
File:                     242799cc-dbcd-33b4-8429-932b0763ee93.roa (raw, json)
Hash identifier:          pQmni6wgf7i7Bk3hnX0k9iNuyJ/oBDLniBJg1bnb/70=
Subject key identifier:   EE:D2:B1:AE:C3:CB:51:33:3B:01:A2:3F:08:A3:C1:4D:C4:27:E6:E5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA84F49589D20A681419AA380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/242799cc-dbcd-33b4-8429-932b0763ee93.roa
Signing time:             Tue 28 Apr 2026 14:57:08 +0000
ROA not before:           Tue 28 Apr 2026 14:57:08 +0000
ROA not after:            Mon 27 Jul 2026 14:57:08 +0000
asID:                     397206
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:4f:49:58:9d:20:a6:81:41:9a:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 14:57:08 2026 GMT
            Not After : Jul 27 14:57:08 2026 GMT
        Subject: CN=00f53579-e512-4cdd-9cd1-2d9c69ec31a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:43:79:b7:83:39:e6:25:86:ea:bb:26:c8:
                    0f:cf:dc:11:3e:45:c2:9e:d3:6d:1b:a7:d6:3d:a6:
                    0c:3d:1b:e2:8a:7b:9a:ce:5b:b1:c8:45:fb:4b:04:
                    33:43:f6:28:95:f4:06:8e:c6:31:c5:40:2d:48:94:
                    58:12:a3:60:3f:16:ad:95:af:6c:6b:e9:11:72:01:
                    e2:7a:5e:66:67:9f:d2:bb:5b:5e:3e:7b:3f:1b:03:
                    f0:f6:4e:28:5b:12:56:58:d4:a4:b0:23:c5:72:9f:
                    fa:af:1e:17:20:fd:cd:d2:be:76:79:90:e0:f3:cd:
                    93:a6:47:1b:d7:0f:fa:cb:0b:e2:ad:40:24:53:a1:
                    24:93:ba:ec:a7:93:a9:8b:09:25:0c:de:30:4e:a7:
                    2a:dd:9e:40:ca:6f:3d:09:2d:36:19:52:bc:9b:40:
                    47:39:d1:a2:6e:fe:46:71:fd:92:d4:d4:97:8f:f7:
                    0c:d5:1b:1c:7e:40:c1:f6:85:b8:dc:f9:c9:7d:9a:
                    80:1f:57:18:6b:ec:34:40:6d:cd:9e:f0:37:3f:ba:
                    df:f7:84:b7:8a:95:48:2c:f9:42:0c:a6:ff:3f:6c:
                    8c:f6:3d:c7:31:89:42:41:fd:23:71:cf:9a:27:f6:
                    30:c9:ba:84:93:8b:dd:5b:be:f2:d8:5d:8b:a7:0f:
                    89:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D2:B1:AE:C3:CB:51:33:3B:01:A2:3F:08:A3:C1:4D:C4:27:E6:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/242799cc-dbcd-33b4-8429-932b0763ee93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:2a:74:91:ca:67:8e:b0:c9:f2:7d:4c:48:4d:23:cf:35:0d:
         bd:c5:4a:fd:b0:ef:62:f0:e5:63:96:40:84:99:aa:63:17:56:
         cc:1b:ab:dd:bc:7f:fe:7c:0b:9f:c2:64:14:ea:61:70:2f:b6:
         91:e5:53:fe:e2:12:a9:3b:6f:aa:88:d8:b1:d6:18:43:30:ea:
         40:73:10:54:6f:d3:64:2b:2d:d5:46:a5:bd:71:2f:43:8f:cc:
         e8:31:b4:0e:a2:88:23:91:74:3e:87:83:2e:76:f6:99:5e:14:
         c8:51:5b:3f:6c:44:f1:62:39:f2:bb:65:09:4a:77:d7:0b:09:
         d2:10:34:f8:da:42:d4:7d:33:9d:23:8e:fa:cc:9c:ca:01:ea:
         bc:ba:ea:9d:e1:68:43:bd:ec:23:4b:61:01:ac:bc:46:47:68:
         c0:47:01:fd:8e:b2:01:9c:c9:87:8a:e4:0c:b5:59:7e:b2:4d:
         67:c3:4e:dd:40:49:c2:79:4d:ae:80:e8:64:e5:1b:4e:a6:76:
         10:54:9c:35:19:54:2c:31:9a:28:4a:37:1b:33:99:33:b9:0b:
         51:77:85:17:e9:7c:6d:9e:be:85:3e:14:82:29:71:19:34:41:
         7f:85:f7:b8:51:74:32:aa:d1:65:75:07:0d:66:07:ea:b5:90:
         e0:f6:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:29 2026 by rpki-client