Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a44518ae-49df-334e-93f8-c04eb042a41f.roa
File:                     a44518ae-49df-334e-93f8-c04eb042a41f.roa (raw, json)
Hash identifier:          f6sg2Kpa0AGPPtzgPaMlYYR7k1/VFipe8/gx8xeU+mQ=
Subject key identifier:   76:22:01:BF:81:E7:E6:A3:EB:E6:B5:B9:3D:94:AC:3A:26:43:D4:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9755538238C3F6E32C71A4FC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a44518ae-49df-334e-93f8-c04eb042a41f.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     396541
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:53:82:38:c3:f6:e3:2c:71:a4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=b555aed7-e7fa-439d-96c4-95821e9bdafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4f:2d:d3:4b:60:9d:51:87:79:eb:72:2e:c2:
                    9d:d2:89:e2:5e:4b:e8:06:97:49:75:9c:09:91:4f:
                    6c:b3:32:e7:8e:c7:f4:33:9d:45:43:5d:d6:ab:e9:
                    f9:33:96:ab:91:45:58:0e:1d:7a:16:8b:73:70:09:
                    a1:ee:2c:c2:aa:3e:88:18:0d:ac:85:24:3b:1d:87:
                    45:18:53:97:8a:3f:b8:2f:83:8e:ec:5a:10:9b:8c:
                    2b:c5:3c:34:b2:5b:2c:c7:fd:95:cd:52:22:a6:f0:
                    d9:3f:dd:7a:ea:4d:ea:4a:e5:ec:00:22:93:27:f6:
                    50:95:32:62:0b:ac:76:42:9c:94:30:73:8d:59:2c:
                    28:de:8d:42:15:15:43:ee:30:fc:43:dc:4e:40:84:
                    56:f3:59:b6:13:d5:4d:11:c3:61:ed:75:91:20:ed:
                    97:66:ce:80:1b:b8:7a:da:e4:10:68:46:26:32:1e:
                    5e:49:f3:01:00:b5:cd:ac:a9:09:84:08:f5:4f:f9:
                    94:9f:33:e2:f7:1c:e6:0d:55:19:6b:21:7c:44:e3:
                    36:32:8d:43:bb:df:3f:f4:15:eb:86:5d:8c:2f:61:
                    b2:97:75:d3:56:ff:7a:9e:90:76:92:1b:6d:d6:4c:
                    9e:1e:3f:da:2d:ea:c8:06:96:d4:f6:3c:34:43:8d:
                    3f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:22:01:BF:81:E7:E6:A3:EB:E6:B5:B9:3D:94:AC:3A:26:43:D4:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a44518ae-49df-334e-93f8-c04eb042a41f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:25:65:c0:fc:ac:13:a8:9f:46:8c:a3:b1:e4:02:a1:da:7f:
         ef:27:16:b3:d0:06:61:4e:b6:8d:1a:45:84:0b:bf:92:46:ff:
         c2:f5:46:74:8e:bc:26:e7:b3:07:35:3d:99:ff:b1:cb:fa:36:
         ba:c7:ec:4a:29:db:32:45:3b:4c:7b:de:0a:05:30:01:ad:38:
         3f:22:d8:1c:e1:11:ee:bc:5c:25:7e:e4:b0:30:b8:68:8d:48:
         03:21:96:ed:02:34:4a:7f:4c:6a:76:24:60:ca:87:30:20:63:
         12:9b:e3:aa:d2:81:95:a1:2f:6c:60:70:8b:02:f2:5c:40:84:
         97:07:5e:be:21:b4:9f:8a:f3:77:9d:f1:dc:13:97:b1:89:88:
         d8:98:f9:6d:43:15:1a:0e:2a:04:e7:3f:54:65:dc:b5:98:8c:
         76:cd:d8:49:aa:44:db:4a:34:73:e6:55:57:e0:17:df:23:f8:
         2d:06:9f:18:64:5f:cc:a5:7e:c0:a4:2f:c3:f9:4b:f3:ae:39:
         d5:1d:56:c7:3c:43:77:51:f8:3f:3c:5d:a2:58:5a:c0:85:88:
         76:53:86:ae:de:5e:cb:0b:92:f5:d4:b6:df:62:da:df:de:d2:
         34:c1:f8:37:96:e6:2c:1b:7d:1c:2d:25:85:8c:e3:4f:c9:56:
         ea:ff:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:05 2026 by rpki-client