Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/707f0bd5-1cea-3891-84d3-18b231a0d140.roa
File:                     707f0bd5-1cea-3891-84d3-18b231a0d140.roa (raw, json)
Hash identifier:          tB6CsucWj1nKz+eKz7/aWOxzUrdVJGwjMA/NwxjfB24=
Subject key identifier:   D9:5A:8C:60:16:75:5A:0A:C9:61:54:AA:26:BB:2C:A4:33:F3:1D:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2644D06C2B83D77E812E5CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/707f0bd5-1cea-3891-84d3-18b231a0d140.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     396545
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:d0:6c:2b:83:d7:7e:81:2e:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=5d35605c-22d6-482a-ad85-01438242cbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f6:62:18:bd:9d:38:93:9b:b0:d9:52:42:10:
                    23:a1:e7:fb:e9:e6:e2:18:a9:c7:1c:ca:af:1a:ca:
                    c8:04:01:a3:c0:4b:a7:6e:6f:7b:a7:4e:a4:10:9b:
                    ee:df:1e:08:49:f7:9e:76:0d:58:b3:7a:ce:65:24:
                    07:8f:98:12:ab:56:6b:76:67:07:a1:35:ab:2e:37:
                    52:03:48:a7:ff:31:9f:17:50:cc:3d:53:09:35:69:
                    e9:19:40:67:5d:1b:ed:17:97:92:81:50:ef:4d:97:
                    90:2e:79:2e:24:f2:87:e3:21:fc:a4:6c:b0:11:f1:
                    38:a7:c5:21:c0:34:74:7c:4b:6d:e9:b8:35:99:88:
                    60:3c:f2:16:f5:cd:06:0c:2b:12:ff:3f:91:b5:46:
                    fa:ec:b5:d6:11:d1:db:92:ba:99:a6:60:b7:f8:79:
                    e3:34:42:1d:ca:d7:59:37:da:11:30:de:55:7e:c0:
                    68:9d:cb:26:a6:93:9b:1c:28:80:31:45:94:4e:ce:
                    1f:46:20:da:89:45:84:12:a5:28:2d:e3:7b:d2:db:
                    40:dc:06:e6:36:2e:5a:42:a7:35:e0:d0:ed:36:69:
                    59:72:68:1a:59:8b:c3:19:6d:45:13:cc:9b:ce:ce:
                    b3:59:f3:7f:0c:43:34:a5:47:7c:1f:81:8d:4a:c5:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5A:8C:60:16:75:5A:0A:C9:61:54:AA:26:BB:2C:A4:33:F3:1D:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/707f0bd5-1cea-3891-84d3-18b231a0d140.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ca:e5:74:a3:0e:c9:97:2b:6f:cf:c2:36:e8:f1:3d:1c:fd:
         f7:ea:45:52:0d:a6:18:eb:7a:8e:4d:cb:89:f0:f8:1f:68:6f:
         18:7a:52:4f:f1:32:b5:ec:6d:2e:9f:3b:44:df:b8:b1:2d:76:
         e2:df:7c:87:80:03:78:5c:49:a6:d9:8f:82:f9:44:8b:17:f1:
         ba:e3:eb:9b:f5:c5:74:73:3c:70:d5:1a:a3:10:ae:34:ad:c2:
         b8:6d:37:9c:be:f6:41:d9:06:ea:bb:78:b1:73:be:9e:4b:1d:
         9f:b2:23:86:c9:d2:62:1e:5b:3d:cb:42:e1:79:09:91:c8:6e:
         b2:57:b9:aa:c1:28:c1:de:21:a4:74:11:81:6a:67:7e:f3:77:
         6f:33:22:9e:4e:8a:29:08:d4:50:61:ba:61:89:8f:ab:bf:01:
         a6:96:f7:fa:87:57:6c:9a:77:d5:1c:de:db:48:2d:7f:b8:dd:
         28:de:2a:5c:f4:e9:a2:c2:ae:1b:d4:0a:1f:50:0e:29:81:23:
         a3:97:4e:93:97:f4:57:dd:e1:7e:61:64:11:4d:6c:aa:6c:62:
         f3:00:33:d9:44:d6:be:2e:4e:e4:01:2e:6e:74:1a:fe:04:c4:
         2e:c0:a0:12:d3:6d:6f:00:eb:32:a6:b7:41:b1:ac:d4:dc:3f:
         92:1b:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:50 2026 by rpki-client