Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45a4fa8a-dd41-3cdd-88f0-bb56969ef514.roa
File:                     45a4fa8a-dd41-3cdd-88f0-bb56969ef514.roa (raw, json)
Hash identifier:          932m+/B4ylNROpdNO/BHlEtZQUWeZYeZdYvVdfgX5dY=
Subject key identifier:   C4:55:6C:59:F3:63:8F:2E:0E:E4:89:95:4B:01:91:3E:6F:09:6F:94
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA84F481DA751636943AEFB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45a4fa8a-dd41-3cdd-88f0-bb56969ef514.roa
Signing time:             Tue 28 Apr 2026 14:57:07 +0000
ROA not before:           Tue 28 Apr 2026 14:57:07 +0000
ROA not after:            Mon 27 Jul 2026 14:57:07 +0000
asID:                     396606
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:4f:48:1d:a7:51:63:69:43:ae:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 14:57:07 2026 GMT
            Not After : Jul 27 14:57:07 2026 GMT
        Subject: CN=ab679ac8-69c3-4bd5-914f-4b9e3bee9459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:22:27:72:ba:7e:a3:a8:30:ff:04:82:b0:
                    a9:73:65:b5:2b:0f:68:de:8a:21:5b:ee:d3:c6:e4:
                    a5:8e:1a:36:9b:d3:c6:6e:fb:69:08:6b:97:57:67:
                    88:a5:1b:13:bc:12:18:bb:3c:28:46:34:33:68:92:
                    23:64:9b:64:3b:ea:ec:0e:52:f4:4f:ec:a4:d6:2e:
                    76:29:e4:55:ee:54:33:50:65:1b:aa:d7:79:2f:22:
                    32:a7:66:9b:2c:03:05:43:92:24:6d:c2:c1:16:74:
                    d2:3a:a1:05:e4:70:03:cc:e5:53:d8:0c:3a:0b:07:
                    ae:98:38:09:64:b5:bb:5f:c3:05:cb:97:b6:3a:3e:
                    de:62:10:f0:b1:6f:f4:d3:28:ec:74:f2:f3:84:47:
                    29:85:b4:c4:82:71:13:e8:56:4f:d6:72:62:62:2a:
                    93:30:9a:ca:45:54:75:34:b6:cd:92:36:7c:ec:8c:
                    04:cd:aa:5b:ef:20:5b:aa:d6:74:1b:c4:0d:d6:15:
                    27:ae:3b:dd:a3:bf:eb:bb:65:1a:18:5f:04:d6:ed:
                    9b:6f:81:e3:cf:65:6e:9f:eb:71:39:3d:45:a2:ed:
                    90:5c:42:75:b6:76:30:e3:d7:b4:93:55:a0:d5:45:
                    6d:b7:03:b8:26:cf:fa:0a:03:f4:b5:c2:02:93:1c:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:6C:59:F3:63:8F:2E:0E:E4:89:95:4B:01:91:3E:6F:09:6F:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/45a4fa8a-dd41-3cdd-88f0-bb56969ef514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fa:4f:36:b0:ee:65:0f:15:f2:a3:46:51:cf:ef:54:6b:4a:
         99:fc:ab:43:ed:13:2c:af:2f:5c:da:11:e4:b0:7d:78:1f:d3:
         2c:ea:ef:21:82:04:c4:da:29:37:2f:3e:44:99:d4:23:bc:f3:
         45:9e:7b:0a:50:48:e8:45:c1:c9:88:93:15:39:0d:df:4d:c1:
         67:1a:c0:89:6b:74:a1:ba:81:24:f9:8b:fb:1f:cc:a6:b8:4b:
         0b:3d:67:08:55:01:99:f9:1b:38:a6:a1:47:e1:61:94:c5:9a:
         da:c1:ba:d6:7a:5c:13:2b:f0:db:36:b4:33:7f:26:f3:de:80:
         27:db:43:cc:80:f5:a4:ce:46:99:94:24:ec:db:50:e9:02:41:
         68:9e:55:89:d2:b7:3c:d7:33:59:bc:e5:4d:ba:f1:bc:fa:ea:
         91:a1:28:3f:39:72:a6:c0:66:3a:cd:41:de:94:6a:84:b7:38:
         b9:cf:f1:04:9e:16:f9:37:26:1e:4b:4e:ea:c1:fb:c1:2c:e9:
         86:0d:5a:e7:7b:ca:9f:36:37:74:22:72:f7:c2:27:76:c1:7e:
         4d:4d:63:72:20:90:83:4e:df:96:55:bb:12:4a:0a:9a:2a:31:
         ce:12:b9:bf:20:e1:75:f4:6d:1b:57:4b:70:4f:40:83:a5:f5:
         86:fc:90:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:15:06 2026 by rpki-client