Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64e33835-7fc7-30bc-8b8b-0534140c6bd1.roa
File:                     64e33835-7fc7-30bc-8b8b-0534140c6bd1.roa (raw, json)
Hash identifier:          P9+cPZMd3oAWAzvCW0AsbLOWq9GpeTPzgOlFgM5PuBc=
Subject key identifier:   2B:AD:F6:6C:C7:B5:20:3C:E4:5C:3C:8B:8D:D1:FA:EC:64:61:23:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DADCEFEDBF97FAE155A71A380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64e33835-7fc7-30bc-8b8b-0534140c6bd1.roa
Signing time:             Thu 30 Apr 2026 14:13:29 +0000
ROA not before:           Thu 30 Apr 2026 14:13:29 +0000
ROA not after:            Wed 29 Jul 2026 14:13:29 +0000
asID:                     36617
IP address blocks:        2001:503:83eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:ce:fe:db:f9:7f:ae:15:5a:71:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 30 14:13:29 2026 GMT
            Not After : Jul 29 14:13:29 2026 GMT
        Subject: CN=eb3d3c3e-df78-45cf-a5e4-8ff3da1f651f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cc:84:89:7d:6b:0a:6b:d4:d3:67:3f:e3:09:
                    a6:c0:c2:cc:72:2f:0d:6b:b8:96:09:df:9a:de:fb:
                    bf:ad:14:67:f1:9a:cc:2d:02:76:fe:e9:43:c3:a3:
                    95:7b:d8:07:00:b7:9f:57:35:3d:cb:5f:62:73:09:
                    55:05:a6:f5:10:75:97:4a:01:9a:63:1c:71:68:e0:
                    ba:ed:d1:24:db:b0:1a:d1:81:23:d9:ac:31:c2:6e:
                    b2:14:4b:ab:80:c1:47:ad:34:48:32:f5:0a:9a:06:
                    0c:23:a9:5f:a1:9c:bb:8b:2c:59:ad:4b:dd:8b:95:
                    55:8d:87:64:1c:e3:c1:b1:1f:04:4b:58:21:50:91:
                    21:65:ac:c4:dd:c6:0a:a4:ef:04:7d:b1:7a:0e:fd:
                    90:3d:fc:36:f3:f5:ce:25:7a:64:35:1f:e6:4f:ba:
                    51:b0:96:f1:8f:ff:6e:c3:a4:a0:60:ec:a0:0c:15:
                    ad:79:33:78:af:c5:97:b3:af:3c:53:4e:5a:c0:9c:
                    06:b6:96:fa:f2:09:4c:22:3c:9e:40:55:4b:2f:e5:
                    e4:c3:cf:10:c3:eb:0b:78:eb:ed:08:cd:e8:7a:8d:
                    3c:21:9a:cb:25:35:1b:12:35:f9:0f:85:80:a9:c7:
                    05:1a:62:fb:bb:4c:df:c9:93:e3:7c:e6:a3:4e:26:
                    eb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AD:F6:6C:C7:B5:20:3C:E4:5C:3C:8B:8D:D1:FA:EC:64:61:23:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64e33835-7fc7-30bc-8b8b-0534140c6bd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:a5:44:5a:e2:08:84:56:ef:c5:f2:3d:4a:12:8a:47:45:55:
         cb:5a:16:2d:ae:49:fc:71:81:bc:ac:aa:c2:1a:48:77:d8:f8:
         05:03:57:17:78:88:57:66:14:94:0e:7e:2c:ab:93:83:55:75:
         8e:86:37:20:8c:90:b3:fd:be:2d:fd:8d:42:b9:2a:9b:f2:83:
         cf:b4:ab:9b:4f:2a:92:c9:36:11:79:f6:6c:f8:f3:c1:93:27:
         a2:3e:05:a5:78:09:e9:21:26:3d:cd:0f:dd:77:7f:bc:c2:43:
         72:a8:34:ba:d8:70:bf:77:46:62:df:7e:e0:52:bb:46:bc:8d:
         07:b6:eb:2a:25:d9:c8:0d:f5:99:0a:07:2e:33:6f:05:e2:0e:
         9e:e5:3d:0a:ea:1b:af:68:00:98:f0:04:43:c0:8e:9b:f7:f4:
         ff:4e:c3:87:79:eb:67:22:08:a4:65:af:80:5c:f1:49:d6:fc:
         78:9c:50:6a:04:5a:d7:b2:ef:a0:81:3e:65:28:75:b3:95:29:
         47:c1:29:79:2b:07:31:47:a6:32:25:04:d6:ec:6b:3f:7c:cf:
         40:a0:2d:31:0d:50:39:06:b7:fc:ca:18:31:0e:63:32:19:be:
         59:03:48:32:48:4e:8d:fe:5e:c8:2c:40:46:93:7b:5e:d2:87:
         46:ef:43:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:22 2026 by rpki-client