Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afaef57b-2d92-3e0d-92de-0c38987db3bf.roa
File:                     afaef57b-2d92-3e0d-92de-0c38987db3bf.roa (raw, json)
Hash identifier:          J4W7mxeNyzDm7VIG8IeA8wkCPGhaiWQy7868uYmX90Q=
Subject key identifier:   2E:28:E5:E3:34:BC:8B:19:90:74:C5:85:6E:F3:8B:2D:9A:1B:08:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D250C35B831D00868EB6E4D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afaef57b-2d92-3e0d-92de-0c38987db3bf.roa
Signing time:             Thu 12 Mar 2026 14:31:05 +0000
ROA not before:           Thu 12 Mar 2026 14:31:05 +0000
ROA not after:            Wed 10 Jun 2026 14:31:05 +0000
asID:                     36617
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:25:0c:35:b8:31:d0:08:68:eb:6e:4d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 14:31:05 2026 GMT
            Not After : Jun 10 14:31:05 2026 GMT
        Subject: CN=73022c1a-b6fd-4f7b-bce6-6eb7296afa06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:76:fa:be:e6:9b:4e:30:3b:96:c7:1c:16:
                    1c:02:09:d6:ea:1d:d2:d4:55:e1:f4:7f:59:02:c5:
                    29:3b:6b:db:2f:ec:05:f1:ed:02:57:04:6d:a5:e2:
                    c8:97:17:f1:18:99:7f:37:5c:11:33:22:e3:08:ab:
                    d8:4b:31:66:c4:29:27:9a:61:fc:c3:47:1a:fa:02:
                    02:ab:7d:67:a6:a8:00:d2:5d:a4:5a:d9:92:d8:26:
                    f4:f1:f7:97:a7:a6:a3:44:28:92:0c:f2:54:3f:ef:
                    fa:6d:4b:d5:6d:d1:5f:cb:0a:9b:54:1b:8e:06:aa:
                    d7:a5:5c:b8:37:71:49:59:a8:16:44:a3:26:07:49:
                    18:d7:ba:82:26:cf:25:b0:cb:9e:98:f9:a6:4d:cb:
                    3c:de:b4:e2:5f:2c:9d:35:f3:0d:f6:b6:77:34:4d:
                    99:d5:22:2c:c9:ef:4e:13:62:fe:e9:3f:06:a4:6c:
                    75:29:f0:45:80:ed:df:a3:aa:9c:23:c2:55:d7:67:
                    7d:8f:22:66:02:63:45:9c:0c:47:ba:5e:1d:9a:21:
                    6c:b4:a4:58:b4:d1:78:93:88:35:73:61:3d:19:0b:
                    b0:fd:ee:e8:f3:c7:be:db:29:a5:c6:a0:59:41:fb:
                    86:6e:7f:1d:32:9f:ad:0c:5e:cb:72:a8:08:35:44:
                    ff:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:28:E5:E3:34:BC:8B:19:90:74:C5:85:6E:F3:8B:2D:9A:1B:08:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/afaef57b-2d92-3e0d-92de-0c38987db3bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9b:96:03:89:bf:15:9c:ee:d5:e2:2a:e5:3c:68:b6:9c:67:
         29:1d:08:d6:e8:72:12:79:34:37:87:29:30:f8:cc:90:dd:53:
         b6:a4:11:53:e2:24:81:0e:fa:9a:04:30:e8:5d:d3:3b:3d:84:
         e0:67:c3:b9:af:5c:ba:65:8c:aa:9c:ff:62:fb:27:5e:6b:60:
         51:79:77:c1:c5:c3:4f:96:0f:5e:e6:f7:e5:6b:79:10:9e:1c:
         24:fc:c5:d2:49:9b:77:a1:4d:a5:43:9e:82:11:7f:a0:8a:67:
         fb:38:91:38:e9:a8:f4:aa:40:9d:90:bb:b5:d0:3f:04:d9:60:
         06:d8:6d:e5:d6:f9:c2:53:8c:a9:37:5c:0e:b5:9c:3c:16:17:
         6a:cd:2c:a1:66:0c:de:85:ab:52:57:f4:42:c5:89:1c:18:5a:
         06:d3:fa:75:bd:29:b5:bd:1c:83:cc:0f:f9:dd:ba:48:cd:7d:
         3f:2d:26:bd:39:8b:0b:e8:3b:d5:fb:21:38:26:29:3c:20:16:
         5f:70:a9:ff:fb:0a:c2:fb:d9:72:42:12:d5:0c:e3:d1:63:83:
         6a:99:d2:bb:72:e6:90:94:b7:d6:4b:63:f0:6b:ac:b7:0c:14:
         97:61:14:a6:17:59:2b:ed:14:91:80:6d:d3:62:da:b4:98:43:
         f3:5f:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:40:57 2026 by rpki-client