Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d0567e-91a1-3a7c-b3ed-37ae3c8a93ba.roa
File:                     b2d0567e-91a1-3a7c-b3ed-37ae3c8a93ba.roa (raw, json)
Hash identifier:          5Isc7EOhSwhcaiFEC4NJxuUYNqWUPwk+RXI1BYj2xBY=
Subject key identifier:   2F:A8:9B:54:12:C2:99:6E:87:F2:2F:71:FA:AD:5B:5E:AF:B5:D5:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBA3B0E672A3EDE7A4AE9A620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d0567e-91a1-3a7c-b3ed-37ae3c8a93ba.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     25485
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:0e:67:2a:3e:de:7a:4a:e9:a6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=319dd626-1993-484b-82f3-3380149c3f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6d:23:4f:87:34:1e:b3:c4:13:e1:49:69:22:
                    f5:7a:72:43:50:23:b6:b6:16:0b:38:bf:17:bf:e7:
                    07:cd:5e:23:74:6c:39:92:bb:1a:f9:98:5c:eb:5b:
                    85:bf:dc:b0:3d:d2:35:fa:0b:c8:70:e5:a3:fc:27:
                    f0:05:13:28:db:08:e4:02:08:c2:c9:b8:62:06:20:
                    3e:78:4a:6a:32:ce:93:a2:20:91:15:56:8a:59:f0:
                    7a:e1:11:7c:b5:5f:35:aa:f7:6f:14:b3:4c:8d:97:
                    e6:35:cb:e5:a9:17:d3:41:e8:ad:8f:ab:88:63:92:
                    0b:9e:16:0c:59:d9:7f:9f:a0:f6:f4:f0:f2:0d:c4:
                    d9:b9:ad:a4:bd:df:25:59:fb:ce:33:ea:1a:3e:94:
                    c5:74:78:ea:ed:a5:77:b7:18:1f:6c:b7:25:2f:a9:
                    47:d2:c6:3d:21:2e:f1:30:ac:c0:7d:b8:11:7d:13:
                    23:5e:78:bb:18:1c:61:bb:2f:a4:75:c9:b4:0e:75:
                    1e:89:ab:39:b2:74:20:13:3e:f2:8b:7d:9a:c4:26:
                    3b:57:d0:c2:03:18:6d:0a:6f:e1:3e:67:2e:55:8f:
                    42:33:de:65:9d:84:46:ba:fe:c4:84:4c:97:db:43:
                    13:e7:34:eb:8a:b6:29:ae:64:f6:3d:ca:4f:0d:aa:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A8:9B:54:12:C2:99:6E:87:F2:2F:71:FA:AD:5B:5E:AF:B5:D5:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b2d0567e-91a1-3a7c-b3ed-37ae3c8a93ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:b7:25:24:9c:29:8b:d4:c2:d5:4f:2f:e9:ca:da:a6:b5:3b:
         0d:7d:38:03:3f:ac:0a:17:bf:0a:28:46:0d:8a:99:70:d1:19:
         a7:ad:e4:35:1b:10:6d:64:95:e6:d5:cd:d7:b9:28:15:46:ed:
         e4:c4:3e:97:5d:d7:f9:57:10:54:a7:20:9a:16:4e:98:ea:c1:
         76:f2:36:ef:c9:4c:02:ad:68:d6:0b:dc:ab:bf:c7:73:1d:20:
         e1:22:30:96:28:00:8e:3b:f2:4b:03:79:66:a7:52:26:5b:c4:
         d2:56:59:ea:3d:12:2c:09:40:72:00:62:f1:40:f1:c3:32:4e:
         e7:bd:84:c8:f3:c1:9e:40:35:a2:1e:37:3c:59:97:b8:07:19:
         fd:8c:85:7b:00:b3:3d:80:c6:c1:63:16:de:da:4a:8f:7d:5d:
         28:72:33:dc:59:2c:78:ef:4d:db:90:11:1b:ad:75:1c:98:36:
         43:14:16:e4:58:8d:e7:87:f2:fc:89:a0:f5:59:a2:6e:e5:7c:
         14:24:91:67:dc:1f:24:7b:b6:9d:ca:2d:a2:a8:3a:b7:45:fd:
         f6:4d:b7:db:8b:ff:9f:9e:f7:9a:c8:94:c3:31:7d:77:57:d1:
         84:ff:d2:51:be:51:63:a1:16:63:34:9a:9f:79:ea:60:1d:44:
         48:ec:2f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:21 2026 by rpki-client