Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0b659f9-0dd8-35c3-acc5-e20566de5ac9.roa
File:                     a0b659f9-0dd8-35c3-acc5-e20566de5ac9.roa (raw, json)
Hash identifier:          ckEEPwozgLSLogljx9GCdS4VLGvUT1tbfPsiMdJchzk=
Subject key identifier:   E3:00:08:BF:52:69:CE:0E:95:48:46:84:AD:00:10:44:B4:81:3E:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E001B554E2D2E247732A060
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0b659f9-0dd8-35c3-acc5-e20566de5ac9.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396572
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:1b:55:4e:2d:2e:24:77:32:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=9857f49b-9dbf-4c40-9760-2a26892c1854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:55:27:7e:12:14:8c:70:6e:b5:e0:8f:f5:
                    86:e9:6f:e9:58:b5:a6:62:2a:4a:39:2a:57:30:31:
                    47:f0:cf:41:06:8b:17:ac:92:70:fd:2e:f1:b7:ef:
                    e0:b4:f6:92:e3:ec:94:56:45:30:5e:c9:8a:af:28:
                    94:04:0f:c9:6d:44:d6:1a:e5:ce:d9:92:28:83:22:
                    cf:62:e9:fd:4c:ad:4b:11:df:f0:40:01:af:82:1a:
                    2f:c2:c1:a2:70:d0:7a:d3:30:ab:04:0e:f1:89:c3:
                    7e:e9:40:ea:97:09:d4:f7:ea:92:f2:0b:ae:bb:b7:
                    59:4d:89:03:e9:d1:8e:a1:15:27:52:91:83:16:c1:
                    ed:54:21:a5:56:9f:a1:1c:3f:e0:c7:ec:2a:c9:4c:
                    ef:e0:ca:06:b0:64:ee:75:a6:e5:d2:e6:0b:86:da:
                    0d:72:ea:86:8a:60:f0:ad:c1:42:88:ae:7c:35:97:
                    7e:a5:55:9f:00:02:fb:3a:9c:0e:b1:51:23:6a:cd:
                    d8:5b:f9:65:87:ce:70:1e:1b:31:13:3f:75:ea:a6:
                    d5:a1:cb:cd:3a:3e:c7:10:da:53:e0:24:8e:d0:8c:
                    32:c0:f5:d1:b7:c4:10:35:43:4a:83:6a:d2:e9:ef:
                    8b:66:87:c6:94:c0:d6:aa:0c:a5:a3:ce:b0:73:33:
                    f3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:00:08:BF:52:69:CE:0E:95:48:46:84:AD:00:10:44:B4:81:3E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0b659f9-0dd8-35c3-acc5-e20566de5ac9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:a2:fe:eb:3b:35:eb:86:79:46:8e:77:4e:3f:8d:40:1b:
         d9:de:c6:02:01:6b:49:0d:46:a4:10:d1:20:84:76:19:17:22:
         94:71:17:01:91:37:11:3f:1c:cd:b3:a4:97:9c:b2:1c:cb:83:
         25:b5:67:7d:7d:ad:a3:bc:66:6b:ce:2d:64:6c:47:a0:47:1f:
         8d:85:f3:69:27:63:30:22:a0:57:61:4d:8d:fa:31:b1:d1:04:
         e4:1b:4b:59:97:e5:ee:88:2d:41:4e:4e:65:cc:40:e8:af:eb:
         81:a9:31:a7:04:b1:15:92:c8:23:53:a9:7a:0e:b6:2d:59:23:
         62:c5:d3:8a:41:39:6f:10:e1:f7:fd:eb:ad:8d:e6:66:85:5a:
         ed:30:a1:54:37:90:77:70:5b:e5:83:0d:09:fd:87:04:4c:84:
         54:a8:77:e9:38:49:f6:b3:04:d6:f6:a3:0e:b4:f8:b7:5d:51:
         84:a3:0b:48:d9:df:45:b1:8a:5a:6d:bb:20:72:c1:f1:b4:c8:
         4a:ee:7c:4e:99:c2:a6:6f:d5:c9:19:6c:4f:86:6b:53:4b:d0:
         b0:a9:bc:a8:cd:d1:16:42:40:33:a5:15:f5:d5:f7:66:68:05:
         99:b0:62:f3:45:9d:72:58:e2:75:79:50:3f:12:63:52:d0:cf:
         76:7b:ce:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:56:35 2026 by rpki-client