Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dca0ed1d-2677-32e4-87f2-bb0e29d278ce.roa
File:                     dca0ed1d-2677-32e4-87f2-bb0e29d278ce.roa (raw, json)
Hash identifier:          MXFADU/wLD4fCrf9f3P1RoDWPuw2lzQ9L0nkHVBCUOY=
Subject key identifier:   42:6F:D7:7D:EA:2D:2A:20:59:59:10:D8:BD:51:C1:8C:B5:80:27:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9A4B86BDC39E04695CEC6C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dca0ed1d-2677-32e4-87f2-bb0e29d278ce.roa
Signing time:             Thu 23 Apr 2026 14:28:14 +0000
ROA not before:           Thu 23 Apr 2026 14:28:14 +0000
ROA not after:            Wed 22 Jul 2026 14:28:14 +0000
asID:                     36625
IP address blocks:        2001:503:a83e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:4b:86:bd:c3:9e:04:69:5c:ec:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 23 14:28:14 2026 GMT
            Not After : Jul 22 14:28:14 2026 GMT
        Subject: CN=762881c7-fcf2-4288-be98-d10425fc8f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:62:f9:aa:8c:d4:f4:76:72:9a:d1:0c:ed:4d:
                    0d:14:bc:56:02:c1:1c:3f:4f:bb:fd:35:d0:8d:e7:
                    48:ac:d3:35:f8:91:2f:01:f0:06:79:8d:52:30:86:
                    14:e8:65:c3:b6:37:e6:04:da:53:14:6e:ce:6b:c9:
                    84:f6:c5:5c:89:c3:b0:11:aa:36:a9:a1:63:5e:37:
                    67:c9:1f:62:a5:d0:07:9c:5d:6a:19:f9:7c:e5:49:
                    64:3f:cd:6c:fd:22:e8:1e:63:ba:99:3d:37:47:a5:
                    77:82:66:3f:9b:22:ca:0a:8c:8b:61:f4:98:50:ec:
                    40:41:9b:00:ff:92:ef:5e:14:49:01:72:c8:b9:59:
                    21:e1:d6:f0:12:08:5f:f3:ed:dc:85:01:a1:4f:a3:
                    8d:14:ea:01:ce:a8:28:c8:15:ed:f7:a0:ef:dd:2e:
                    81:0e:05:af:6a:a2:78:e6:17:99:88:33:8a:69:cf:
                    fc:08:7b:12:f8:49:24:21:85:40:4a:f5:d0:be:84:
                    a6:50:0a:7e:9c:fa:27:2c:25:15:28:46:eb:16:4c:
                    35:24:11:78:9d:93:65:2b:72:73:92:0a:fe:93:c5:
                    7b:3e:c4:7c:3c:1a:38:f3:a5:f0:bb:d6:79:8a:1d:
                    ac:8d:0c:f1:0d:64:c9:3b:73:b7:28:7d:11:79:b9:
                    81:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6F:D7:7D:EA:2D:2A:20:59:59:10:D8:BD:51:C1:8C:B5:80:27:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dca0ed1d-2677-32e4-87f2-bb0e29d278ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:a83e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:11:f2:07:ae:4a:7c:d2:94:76:5a:96:de:96:2f:d0:43:b9:
         ef:0c:d2:2b:1d:de:54:91:95:9c:0d:30:df:c7:fe:f1:ca:c8:
         e1:e0:24:cc:4f:76:59:4e:cd:d9:5b:c1:50:16:58:de:95:44:
         ef:1c:17:66:d7:03:e5:75:a6:e7:dd:b1:a2:65:7b:b0:06:e8:
         13:62:bc:09:87:ff:55:b0:7d:f5:4a:05:f0:00:67:fd:6c:e3:
         31:0d:5f:1e:9b:70:e8:84:81:59:21:39:45:ee:40:ad:ef:a6:
         5d:3d:86:df:ac:f7:52:64:8e:f2:e7:6b:9e:5f:86:3e:2d:78:
         49:f9:fc:d1:be:d1:d3:55:c7:34:3c:e4:11:26:7c:81:9a:db:
         ce:b5:1f:ea:a4:f0:6e:4d:f9:17:18:77:a6:42:da:9c:93:1e:
         29:81:09:41:e6:3e:12:c5:08:0d:e4:60:ac:7f:5e:19:62:ff:
         69:3d:1a:bd:a7:d1:e9:ef:0b:06:b6:b4:d9:f6:29:90:46:a3:
         50:e6:46:82:97:64:7b:1c:d1:02:1a:68:6b:de:e2:68:de:9f:
         1b:d4:fb:d7:6c:48:39:13:6e:e9:07:39:5d:a2:4e:ae:b5:84:
         46:97:c7:19:9c:b4:8a:c3:ea:f4:48:e8:1d:c9:13:33:48:1c:
         af:0c:5e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:28 2026 by rpki-client