Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de364d1c-bc90-37fe-b0db-82e261a77995.roa
File:                     de364d1c-bc90-37fe-b0db-82e261a77995.roa (raw, json)
Hash identifier:          n8h6Ns0mTqmpaoad3YAyMo5JSRVtRpwtwFhZh+q2zGI=
Subject key identifier:   3C:AD:62:31:F9:61:6C:5B:36:5F:14:5C:64:CC:07:BA:2B:34:2C:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D422F89AE992B2DE7320C35C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de364d1c-bc90-37fe-b0db-82e261a77995.roa
Signing time:             Mon 23 Mar 2026 01:00:32 +0000
ROA not before:           Mon 23 Mar 2026 01:00:32 +0000
ROA not after:            Sun 21 Jun 2026 01:00:32 +0000
asID:                     397212
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:42:2f:89:ae:99:2b:2d:e7:32:0c:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 23 01:00:32 2026 GMT
            Not After : Jun 21 01:00:32 2026 GMT
        Subject: CN=5ff1f1dc-c4fd-46fe-acc5-a6b9d93367df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dd:1d:a5:7e:30:c4:5c:ba:ae:9b:e6:9e:21:
                    46:97:8c:78:25:4a:c0:9f:b0:67:8c:92:cd:51:55:
                    85:01:e9:4b:f3:d0:97:c0:71:aa:b1:55:3e:33:d2:
                    bf:b4:d5:a4:9f:c7:1b:52:af:ae:45:2e:41:7f:f5:
                    b7:84:39:3e:5a:12:20:66:42:b3:aa:ec:b6:3a:e7:
                    90:c7:c0:bb:c5:bd:27:03:87:a2:bb:74:97:21:4b:
                    9e:af:6c:53:29:d0:bc:26:0f:bd:65:32:7d:f0:be:
                    68:58:41:67:c9:c0:bf:95:04:07:40:c4:c6:79:14:
                    fd:1f:8d:60:31:dc:72:0d:2b:b3:1e:f2:b6:b8:90:
                    15:40:e7:d8:a4:3f:37:6d:81:cf:22:f7:91:11:eb:
                    9a:92:0b:a8:ea:ba:31:06:f3:c0:2c:d3:b8:89:68:
                    09:5f:cc:9e:f1:df:75:b9:1e:8f:a5:bd:8b:3f:78:
                    75:c8:0a:ff:62:9b:21:20:b1:34:c4:43:48:b3:eb:
                    5d:60:ab:d1:1c:4d:3b:86:1e:c3:61:d6:8e:b0:ec:
                    e7:ec:d6:a0:e4:05:59:e6:cc:8b:57:99:7d:aa:3c:
                    d4:b5:5c:6e:eb:f9:20:b0:55:e9:46:97:dc:f7:86:
                    09:09:cd:5b:42:cf:4c:66:b1:a9:d4:c0:38:77:9f:
                    e6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:AD:62:31:F9:61:6C:5B:36:5F:14:5C:64:CC:07:BA:2B:34:2C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de364d1c-bc90-37fe-b0db-82e261a77995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:4f:da:1f:28:0f:fb:ae:3d:2d:60:d8:e0:31:d0:1e:a9:8c:
         86:45:75:ee:3e:8a:26:b9:87:7f:51:08:7d:9f:91:3d:77:bd:
         0e:a3:81:eb:28:e7:04:b8:65:e4:f2:5c:1e:cd:25:32:77:dd:
         ed:14:dc:f8:08:90:91:fa:7f:d5:71:d1:c1:c1:db:0c:6f:df:
         c5:29:3d:d4:34:00:e3:89:a0:5c:7a:31:e9:d1:b6:50:17:ed:
         5b:4c:32:6c:27:7c:02:20:18:c5:b1:e6:83:3b:e5:31:5f:a6:
         d9:4d:3e:3c:45:f2:0c:b3:90:13:a7:6b:8f:f7:79:88:86:54:
         be:c5:9a:98:ec:e5:97:f0:29:72:c3:89:30:b6:a1:74:10:f2:
         e9:be:63:df:29:33:b4:97:10:cb:c5:66:dc:12:59:8b:34:55:
         a2:a4:a5:a3:3e:cf:72:fb:0e:12:1d:05:b8:87:12:2c:ef:f2:
         2c:02:34:c5:16:4b:45:fa:db:74:e0:38:f5:c8:f5:46:ce:4f:
         90:55:db:97:1e:04:4d:7e:65:b7:f4:88:d5:f6:58:56:3f:64:
         54:7c:e0:e3:2e:2c:9a:2d:ad:98:22:87:a1:cc:4d:35:e0:86:
         9d:81:77:de:03:60:db:70:a7:c9:92:e2:da:02:8a:65:73:12:
         ca:35:ed:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:11 2026 by rpki-client