Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46f633c6-9f75-3a0f-8a9f-6de81868b4be.roa
File:                     46f633c6-9f75-3a0f-8a9f-6de81868b4be.roa (raw, json)
Hash identifier:          92opMECNj3Iz9A6t8B3PH+eYDO/ITKzC0YJUM0hZ1YQ=
Subject key identifier:   2F:D8:1D:CA:D6:B4:48:84:CD:0C:E9:6F:A1:8E:65:03:62:F7:63:F6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D422F7993E6DBA4E99D37A9D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46f633c6-9f75-3a0f-8a9f-6de81868b4be.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     397206
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:79:93:e6:db:a4:e9:9d:37:a9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=c94b9d23-a221-4c6b-b35f-c85f153b1f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a7:1c:4f:4f:0c:63:83:2b:42:e5:ff:33:5c:
                    a1:f5:c8:ff:0e:2c:29:54:24:cb:26:33:f6:ed:ae:
                    25:28:dd:67:ec:82:77:76:7a:40:ac:a5:13:b2:a9:
                    cc:4f:e5:4f:fa:59:d6:39:8b:0d:25:4e:2c:56:4d:
                    17:78:cb:73:07:66:cf:e6:93:7c:6f:0d:ad:06:50:
                    16:2c:4a:30:0d:58:94:5c:cd:b2:97:b7:de:1d:98:
                    03:14:99:5f:2b:e1:11:8d:21:86:65:03:65:41:78:
                    bd:5e:e7:80:bb:06:d3:2b:45:2f:f1:b9:a0:f8:08:
                    5b:20:17:5f:fe:45:24:cd:19:bd:75:39:be:3d:f9:
                    7c:cf:6a:26:fc:40:c2:3f:01:9e:89:d3:59:0f:ee:
                    3a:32:7f:cb:65:2f:31:94:97:d0:22:0c:52:39:b4:
                    15:ea:d6:bc:21:1e:de:f5:75:c9:19:56:d0:46:98:
                    49:42:77:6c:f0:05:90:53:fb:0a:f1:ac:5d:1b:97:
                    23:9c:3f:96:6a:3d:2d:1b:0d:9a:d7:59:9d:98:70:
                    80:0d:0e:aa:1e:96:be:7c:e5:99:07:4d:6a:79:e1:
                    db:99:9a:18:4c:56:26:b8:4c:9e:32:e2:fd:77:7c:
                    a7:bf:7e:bb:14:d5:7b:bb:7e:93:fb:bb:89:5b:0a:
                    35:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D8:1D:CA:D6:B4:48:84:CD:0C:E9:6F:A1:8E:65:03:62:F7:63:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46f633c6-9f75-3a0f-8a9f-6de81868b4be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:5b:51:74:ab:b1:6e:b2:3f:bb:81:d4:7b:0c:30:80:7f:74:
         7b:07:c6:b1:e3:9f:6b:14:91:94:74:20:ec:65:9a:1d:05:38:
         b4:12:da:6f:96:c3:a3:9f:df:ff:4d:45:3f:f4:78:f7:0f:2d:
         1d:10:d0:9c:ca:21:30:d7:cf:80:9a:4b:77:ab:c2:d8:c1:08:
         42:0c:7b:08:d0:11:bf:e0:33:ad:9d:92:75:d9:12:e3:28:d6:
         89:9e:42:b0:db:ed:09:c2:4f:fa:b5:68:0e:6a:9b:28:1e:c4:
         6d:3f:34:ad:69:43:76:39:8a:b6:34:a1:88:85:36:0b:13:0f:
         d0:4d:60:c6:ac:06:4a:de:a0:fc:40:d9:95:3b:97:9b:e4:92:
         62:da:fd:65:58:a6:32:1b:51:ad:5e:a1:c3:e3:ee:45:3a:8c:
         86:57:64:3a:0b:c9:cb:0e:ea:4f:b6:b0:a9:fe:2c:1a:3a:ee:
         9f:22:32:4c:9b:18:15:85:1e:98:30:0d:b9:7d:3f:13:b5:b9:
         6d:d8:7c:ec:a8:b9:62:63:1b:5e:71:ae:a0:70:35:7a:f9:83:
         66:6f:06:c5:be:0f:4b:ee:6b:77:b2:ab:75:f0:8a:1d:a0:23:
         35:a0:81:99:c5:e8:38:b2:7a:b8:bf:dd:81:df:20:33:df:c7:
         f2:02:52:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:01 2026 by rpki-client