Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6131bf64-b232-38de-8c85-5a3f9cddc284.roa
File:                     6131bf64-b232-38de-8c85-5a3f9cddc284.roa (raw, json)
Hash identifier:          ohetaj3vg7mAMwzB3FPWb8FBO2dDWVRV5UdqgSqZGxM=
Subject key identifier:   E4:FC:E4:9E:2C:9E:26:A0:99:A7:27:DE:DC:5C:F5:F2:B6:AA:8C:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA84F3034360D40C87AB21D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6131bf64-b232-38de-8c85-5a3f9cddc284.roa
Signing time:             Tue 28 Apr 2026 14:56:56 +0000
ROA not before:           Tue 28 Apr 2026 14:56:56 +0000
ROA not after:            Mon 27 Jul 2026 14:56:56 +0000
asID:                     396593
IP address blocks:        2001:503:eea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:4f:30:34:36:0d:40:c8:7a:b2:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 14:56:56 2026 GMT
            Not After : Jul 27 14:56:56 2026 GMT
        Subject: CN=26686978-4d8f-42f1-aa35-5d98c12108df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:17:2e:df:82:c8:a5:55:6f:e4:c2:da:9a:
                    fb:e6:75:37:db:e9:5a:d1:1d:b5:b2:2f:6f:83:c0:
                    2b:7c:90:30:31:7b:92:b4:90:1f:67:e7:49:76:f3:
                    35:94:e4:f3:c7:19:a8:54:cf:09:6d:76:20:64:f8:
                    b0:80:5d:e7:43:58:ae:9c:d8:f6:d0:d7:8f:eb:47:
                    5c:af:09:ee:75:2b:a3:d4:37:16:37:64:32:36:d6:
                    29:5a:2c:55:03:63:98:83:be:09:53:8d:cb:40:f4:
                    97:ff:ac:02:6f:f5:47:8c:3f:e1:af:78:16:a6:66:
                    aa:d1:5f:15:63:5e:d9:83:23:77:1a:a8:8b:a3:af:
                    07:99:f5:61:b8:1f:55:bc:73:bf:70:86:6e:f8:03:
                    3f:a7:06:48:5a:79:30:5b:dc:84:3a:a5:6d:00:af:
                    79:12:d9:3e:1d:3d:13:1d:56:c3:8c:7e:94:07:59:
                    1d:35:6f:56:f8:34:64:a2:34:ec:5a:30:c8:54:7b:
                    15:e7:bc:01:d5:fd:e2:c2:a8:aa:0c:40:3c:fe:8d:
                    b8:f1:39:d7:24:e1:55:73:9a:2f:b3:70:13:52:26:
                    5c:46:70:be:8b:41:3f:eb:91:1b:d1:59:c9:f0:e4:
                    d0:d7:ac:8a:ad:4d:88:4c:71:53:39:b1:27:bd:fd:
                    a8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:FC:E4:9E:2C:9E:26:A0:99:A7:27:DE:DC:5C:F5:F2:B6:AA:8C:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6131bf64-b232-38de-8c85-5a3f9cddc284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:0b:b8:62:f1:6a:67:72:4f:90:1f:f0:0e:e2:68:c8:63:46:
         95:06:5f:3c:d1:d2:03:de:8c:30:27:68:f3:14:19:44:24:9b:
         e7:55:b2:e2:45:b8:e4:2d:2c:ce:90:1e:cb:9b:26:88:5d:f9:
         57:16:0e:80:6b:07:8a:3d:eb:bc:94:ff:d6:23:6c:ac:d0:3d:
         8f:36:91:3d:89:f0:6c:f7:23:b7:df:60:89:27:3d:63:8c:d2:
         da:56:08:9c:67:c5:d3:94:47:ad:f4:a0:cc:df:8e:c7:84:55:
         73:26:95:cf:40:36:71:22:b2:99:e7:ce:64:4a:1e:1a:79:bb:
         7d:33:d4:3e:10:78:a9:25:4b:1a:7d:c8:b5:34:09:28:ed:26:
         ac:10:25:83:11:28:e9:76:5e:51:a9:2f:50:bc:ac:5b:ff:84:
         4f:c5:98:a8:3c:51:fc:7b:36:00:e3:2f:99:49:0c:f4:06:3a:
         f8:2d:7e:75:35:1b:b4:38:ab:71:ca:fd:90:c9:d6:8e:bd:df:
         2d:92:fc:46:33:f4:f5:ae:34:aa:76:24:2d:e2:46:65:cf:db:
         5f:b3:6a:f7:e4:b3:11:2d:30:44:30:2a:a2:da:90:e3:0d:8c:
         7a:39:7b:ca:96:c0:8e:27:00:86:2c:70:63:d5:fa:a3:be:ad:
         53:7c:1b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:37:17 2026 by rpki-client