Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad795558-eeee-30dd-9af8-d3bf242e93b2.roa
File:                     ad795558-eeee-30dd-9af8-d3bf242e93b2.roa (raw, json)
Hash identifier:          qDWmNfqBIKfrvdHUjeY1oFl8WM3k8ghcBsv2YFu/0G4=
Subject key identifier:   38:9F:14:99:57:10:6B:0A:F4:DD:1E:B9:1E:7F:66:3F:70:AA:A0:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8EF548B8A3804B3B29CF2C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad795558-eeee-30dd-9af8-d3bf242e93b2.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     396542
IP address blocks:        2001:502:8cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:48:b8:a3:80:4b:3b:29:cf:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=af57b608-25fe-41f4-a26b-28479e4eb19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:ea:89:c4:fb:87:26:82:6a:0b:23:15:1a:
                    92:a6:f9:d0:cb:6b:40:1b:82:30:ef:e5:8a:1d:d8:
                    50:d9:36:47:54:b6:d6:8b:59:28:5d:8b:a8:5c:21:
                    53:e8:60:cf:69:1a:78:f4:da:32:a4:16:da:4b:45:
                    6f:94:dd:cc:23:99:69:91:4e:f0:af:00:6b:fe:84:
                    9f:e4:a1:cd:82:1b:97:6d:0f:67:3d:51:29:ba:22:
                    a5:a6:b7:c2:5b:3c:b4:21:4a:7b:6a:a4:8f:cb:b0:
                    eb:07:6a:c0:0d:84:15:6b:08:60:73:80:1d:e6:e5:
                    20:ad:0a:34:7a:a8:a4:26:8f:dc:b7:50:a8:17:10:
                    17:4d:33:cb:5c:c5:d7:4e:87:d3:59:50:58:15:ff:
                    73:b5:6d:5e:03:d9:7f:8d:b2:8f:f1:92:e5:b9:6f:
                    ff:5c:9a:f7:46:58:b7:48:e8:6f:6b:fb:bf:df:95:
                    54:6a:f9:10:f3:72:4b:15:84:7a:ad:2a:46:78:71:
                    04:d3:50:95:a1:c9:90:76:dc:ed:58:78:02:7b:2c:
                    e8:97:f9:25:67:c8:75:a9:6b:b2:d5:f4:7b:dd:a4:
                    ca:34:ad:13:17:75:62:c4:d1:da:cd:ed:07:cb:69:
                    8b:4a:3c:f3:0f:7b:74:e9:ac:b4:4a:b9:c0:4e:90:
                    c1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9F:14:99:57:10:6B:0A:F4:DD:1E:B9:1E:7F:66:3F:70:AA:A0:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad795558-eeee-30dd-9af8-d3bf242e93b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:df:42:c1:69:87:4b:a3:c0:6b:b6:64:94:1d:00:e8:1d:7b:
         a0:8e:37:bf:22:66:70:f4:6f:94:fe:83:91:40:24:c9:ff:c0:
         da:0a:23:60:82:fe:d0:ec:1d:25:31:f6:10:b5:41:25:b0:76:
         70:81:18:3f:b5:c1:ee:4b:94:14:79:7f:a8:55:a5:f4:e0:9b:
         7f:2c:c1:6d:d2:ea:b7:a7:5b:19:9c:da:0e:67:29:51:6d:fb:
         8e:45:ed:5b:4e:7a:55:3d:d9:57:7d:05:a2:58:c4:c9:0d:1c:
         98:b6:ff:67:db:90:c2:d3:46:13:2a:69:2b:fb:78:52:1e:5e:
         dc:2f:ca:13:71:f9:03:62:c1:b5:01:f6:db:0a:1c:5e:bb:64:
         a9:a7:c6:57:30:7a:46:07:50:26:f9:ad:0a:af:48:5b:50:31:
         22:d5:14:c0:26:e5:7a:bf:c5:36:3f:97:38:69:01:fa:1e:d6:
         c3:f1:a8:dd:21:14:6c:81:0c:ba:76:1c:c0:a4:64:83:6e:d7:
         80:3a:14:2e:31:58:02:07:4e:87:01:cf:b1:b8:a8:1e:24:4f:
         5d:5c:39:a7:cb:a7:2b:a8:00:cb:6f:f4:74:05:8a:d9:b8:7c:
         8d:b4:fc:2f:eb:98:02:4d:62:e0:33:06:6f:a5:97:22:d8:ce:
         93:6d:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:35 2026 by rpki-client