Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5b97968-e9fa-3cc5-a0c4-87a148defcb5.roa
File:                     a5b97968-e9fa-3cc5-a0c4-87a148defcb5.roa (raw, json)
Hash identifier:          /Gbp7iwQorih55ygTUA54aTElSXNcAaXgQ1k9fJ/Kxs=
Subject key identifier:   B4:9E:C8:46:70:37:78:16:50:AB:A3:A2:7C:C3:67:29:12:25:11:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D422F8E761EE615A9359B8FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5b97968-e9fa-3cc5-a0c4-87a148defcb5.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     396549
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:8e:76:1e:e6:15:a9:35:9b:8f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=f11e8514-c8c2-4c6e-8de6-45377ee58a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:86:4a:4c:2b:d0:31:be:f8:c4:4a:35:67:40:
                    07:32:6e:ec:73:74:f4:a6:64:48:e7:fa:87:ba:5f:
                    b8:65:76:94:d5:2a:26:76:85:50:30:17:40:01:a8:
                    ba:05:4f:c2:b5:9a:a1:17:1a:7f:0b:f7:07:33:b1:
                    ce:70:d3:b9:52:89:b1:4a:e1:25:e5:94:d1:1e:96:
                    5e:04:2f:5f:7a:16:c8:d0:c0:fe:d9:d5:1a:e7:d9:
                    db:05:c0:00:3b:3c:e5:1f:18:27:7c:0d:32:21:63:
                    e9:8b:b1:6b:dc:37:4d:c8:6b:12:87:6c:a1:4e:70:
                    b9:e4:c4:9e:fc:03:db:21:fd:09:02:14:2b:c7:d0:
                    7d:a9:c2:e4:d6:6c:58:2c:83:6a:1c:9b:51:e5:3a:
                    e7:f7:4a:03:37:6e:7b:6f:6c:e9:e9:3d:16:e0:ba:
                    d6:0d:55:59:c0:78:81:82:c6:f9:24:24:10:56:fd:
                    29:33:8b:ed:a9:35:73:05:05:94:3c:b4:ed:21:67:
                    be:7f:cd:40:ad:31:e9:39:2b:ea:2a:ac:d0:2b:97:
                    55:db:22:e5:f7:9f:3d:ff:a3:35:4c:2d:5c:06:2f:
                    4b:c8:80:e6:94:82:52:30:f1:5f:6f:70:e0:b7:cd:
                    62:96:24:45:34:52:e9:06:5a:1f:03:8f:6e:b2:43:
                    6c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9E:C8:46:70:37:78:16:50:AB:A3:A2:7C:C3:67:29:12:25:11:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a5b97968-e9fa-3cc5-a0c4-87a148defcb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:11:40:4a:da:05:63:b2:f1:e7:97:61:a8:fd:98:85:12:
         a0:b7:69:03:b5:41:b4:6c:8b:bb:4f:58:ae:be:e2:68:f1:de:
         53:4d:82:dd:8d:5f:53:b7:0e:91:b5:a2:e3:47:9c:23:74:55:
         58:f6:5f:37:71:fb:d9:c4:47:38:f5:5c:74:25:e9:e3:23:01:
         cc:8c:22:da:cb:ae:cd:38:f7:23:e6:78:ac:1a:72:08:30:57:
         5d:7c:15:79:08:6b:6e:2b:ad:30:31:33:9d:1a:26:1c:a5:29:
         e4:03:14:5b:6b:6b:16:3a:5e:6d:d3:4e:62:e1:6e:3b:e7:77:
         cb:99:41:08:f0:c9:16:60:69:c6:43:d6:58:99:87:2d:fb:dd:
         d5:1d:ff:b8:76:64:17:95:80:9e:14:a8:9b:28:74:63:5d:6e:
         03:8d:4a:89:2f:de:61:7b:f5:b0:f9:6e:fd:29:e7:46:67:d6:
         57:74:ef:a4:25:9b:a7:6b:d1:24:36:f6:23:aa:2f:6b:ab:a1:
         66:83:7b:4b:df:b8:d0:62:94:24:3a:87:24:3d:99:d1:c2:e9:
         4f:1b:10:bb:72:55:c4:ca:90:77:20:a4:91:66:9f:ad:15:02:
         d4:c1:1b:74:df:98:ca:e3:07:4f:07:85:7f:1d:2a:ec:fa:63:
         e6:df:48:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:17 2026 by rpki-client