Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a556502-419f-3bd7-afd4-3376a485fa78.roa
File:                     5a556502-419f-3bd7-afd4-3376a485fa78.roa (raw, json)
Hash identifier:          Ir7qdPRyA6edduLNj+9IAoBaR93qPb3MExJXIqTkVxg=
Subject key identifier:   CF:BC:74:DA:0E:B8:1A:23:7B:8F:F2:01:5B:CC:85:EF:1C:D0:A9:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D422F8C59A16C3F5433017680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a556502-419f-3bd7-afd4-3376a485fa78.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     396596
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:8c:59:a1:6c:3f:54:33:01:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=800e89a0-2bf6-4dd6-9496-195f38ca83d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5c:3c:62:8c:17:e2:15:04:a3:d7:42:51:95:
                    9b:b7:e4:de:46:45:51:84:5e:6b:84:e8:9f:05:00:
                    1a:75:04:69:40:30:66:f4:20:91:6f:4c:60:6c:68:
                    67:f0:03:d9:9f:c7:29:fb:e2:3c:74:aa:88:fc:a4:
                    b7:46:e3:e9:e3:ef:35:0d:53:7c:37:df:21:f3:49:
                    13:51:65:61:90:9d:96:1c:2c:dd:bb:86:5c:80:89:
                    09:e2:9a:12:8a:6a:9e:3f:a2:9e:5a:a3:13:4a:5c:
                    6d:67:8f:e0:e5:96:f0:c4:1c:1c:27:a5:55:76:d9:
                    0f:a4:bc:3b:ba:4a:bd:6e:8a:3f:7c:65:47:61:71:
                    90:4f:f8:e1:4e:18:fb:16:3f:b6:77:c9:cf:c1:1b:
                    6a:7d:87:e7:8b:18:20:8a:bb:67:b8:e4:12:5d:05:
                    53:84:32:d8:40:23:d6:a8:b9:b8:08:af:8a:0a:06:
                    46:46:d8:5c:b4:d1:bc:e3:15:6c:90:c3:57:a1:0d:
                    0c:7c:a5:01:5f:6b:11:5c:52:08:1c:69:8c:c8:17:
                    9a:b5:93:be:10:23:14:20:14:83:5e:cc:33:c5:21:
                    b0:68:84:8b:c1:6d:63:b0:19:09:e3:ca:1e:7c:6f:
                    b7:a3:50:f5:dc:2a:86:aa:97:52:bb:bf:53:06:82:
                    06:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BC:74:DA:0E:B8:1A:23:7B:8F:F2:01:5B:CC:85:EF:1C:D0:A9:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a556502-419f-3bd7-afd4-3376a485fa78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:06:ea:4b:84:4b:32:9b:91:af:15:00:14:ef:31:e2:cd:31:
         bd:1a:54:67:ac:91:5d:c6:f4:03:a2:5a:1e:82:4d:40:32:14:
         69:e1:f6:fc:36:c8:6c:80:32:2a:cf:14:50:4b:04:94:8d:e0:
         14:3a:c6:06:c5:69:09:f5:7c:4f:65:8c:06:1b:c8:22:21:af:
         be:b6:81:9d:0c:2f:f7:42:61:6e:4f:96:88:2d:e5:cb:fd:95:
         dd:a9:93:b6:a4:11:95:13:e2:6d:19:54:f7:e0:c7:28:7d:c4:
         5e:d8:f7:85:5b:2f:fb:c6:06:9b:07:ae:40:49:2d:07:5b:99:
         ef:5d:b8:71:af:90:35:ca:26:62:28:02:6d:7f:2f:19:59:bc:
         da:f5:6c:36:9f:21:37:4c:ae:51:b6:a0:b7:e3:5e:0c:2c:fe:
         ff:7c:cc:33:74:52:cf:88:42:67:6e:f0:01:54:15:66:30:a4:
         42:40:80:bf:a7:24:28:b3:c6:f5:5d:3c:b4:74:66:08:cf:e0:
         d1:92:dc:f2:57:87:7a:4d:4a:69:ce:81:b1:75:5a:00:e5:99:
         40:a8:81:ba:4c:b4:14:2a:c2:32:ee:ad:78:c6:98:9d:b7:6f:
         d5:7b:81:5a:13:c4:57:f3:65:61:90:a3:0c:1e:85:31:9e:bd:
         93:83:93:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:46 2026 by rpki-client