Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e48056fe-8569-3be3-8219-dc569b1d718f.roa
File:                     e48056fe-8569-3be3-8219-dc569b1d718f.roa (raw, json)
Hash identifier:          JAfJfvMQeo/T4h/4gCp7VyZAL27Ye2b7vCJlWh6CLi0=
Subject key identifier:   0F:82:8A:25:19:FE:A9:3F:B6:00:47:7E:E6:57:84:09:0F:5B:1E:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DADCEFB49741418660C694080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e48056fe-8569-3be3-8219-dc569b1d718f.roa
Signing time:             Thu 30 Apr 2026 14:13:28 +0000
ROA not before:           Thu 30 Apr 2026 14:13:28 +0000
ROA not after:            Wed 29 Jul 2026 14:13:28 +0000
asID:                     397195
IP address blocks:        2001:503:83eb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:ce:fb:49:74:14:18:66:0c:69:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 30 14:13:28 2026 GMT
            Not After : Jul 29 14:13:28 2026 GMT
        Subject: CN=5c8309f7-e191-4c8e-b9be-fbb1b716b24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:72:56:bb:50:4c:72:f1:3b:6e:ab:f9:fd:
                    47:8e:99:5e:39:63:f1:a1:8e:ae:18:21:21:77:8f:
                    fb:56:a2:7c:c8:5f:10:4f:b6:90:6b:50:52:f1:99:
                    c0:12:a6:7e:09:76:49:e5:2e:19:63:bc:df:12:89:
                    36:ab:cd:73:1c:a6:f7:d6:b8:65:2c:71:b8:fb:56:
                    7c:e0:d3:52:81:2b:20:d2:46:31:cb:db:30:80:99:
                    d4:eb:34:b3:ef:6d:03:f3:d4:4d:0e:21:de:5e:e5:
                    9a:cd:85:2d:87:57:69:a6:c2:75:32:92:30:33:8f:
                    6d:8b:d0:35:d1:38:f3:bf:43:e0:19:00:89:c2:ca:
                    6e:90:80:04:24:af:27:1f:4a:8a:fe:0e:09:1f:f0:
                    d7:7f:46:af:01:ca:da:c5:de:6f:07:56:ce:a2:0f:
                    79:c2:d2:82:73:f3:86:16:52:3e:a7:5c:c5:7c:f0:
                    9e:3d:9a:c4:10:e7:c4:a1:24:ac:90:66:7d:20:23:
                    26:c8:f3:ff:6f:0b:c4:53:37:27:cc:f7:f5:29:bd:
                    57:e8:2f:f4:f3:3c:30:13:00:85:e8:21:9e:2a:b9:
                    8d:2c:09:d2:19:d3:ff:62:46:2f:96:84:f3:fd:be:
                    32:b4:b1:e0:1e:be:19:a9:76:e8:12:bb:ae:b4:3c:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:82:8A:25:19:FE:A9:3F:B6:00:47:7E:E6:57:84:09:0F:5B:1E:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e48056fe-8569-3be3-8219-dc569b1d718f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:c1:f8:85:25:ca:8f:69:02:b2:d8:58:07:7f:3f:b2:f2:e7:
         76:42:b4:1b:25:8c:6f:c2:d6:2c:e3:c1:8f:59:db:76:15:e5:
         0a:5a:0c:65:a4:19:89:a3:7b:c3:cc:ca:90:bf:fd:53:56:7c:
         5a:91:cd:f8:c7:d6:b8:90:9b:cb:1f:d6:7c:4a:90:88:d1:72:
         eb:da:67:6d:3e:5c:be:bc:11:fe:b5:49:68:08:1a:97:e5:54:
         d4:d7:1d:4f:90:af:b2:c2:e3:6e:66:fc:0b:a6:c3:53:35:d3:
         bb:87:e4:22:16:c8:96:53:4e:2f:6d:b3:ce:3d:38:7a:f5:f3:
         77:1f:0b:4b:cb:3a:d6:08:19:8d:3f:e6:c4:be:c7:d2:fd:d8:
         fd:79:33:87:13:c5:ea:a2:e2:a3:59:78:4b:42:4f:6c:04:7a:
         30:1f:51:d7:42:b9:d6:80:be:f5:46:0e:cf:ac:a5:1f:4d:b2:
         e6:ae:e8:0b:f9:c9:64:d4:61:e7:a3:76:91:c2:72:dc:3d:72:
         26:d3:47:e5:98:95:b9:38:c9:bb:99:2e:24:cf:41:bf:e0:0e:
         2c:ba:80:7a:d0:9c:44:86:8c:66:71:63:2e:42:73:25:e3:2f:
         06:3b:0b:69:99:3c:63:e7:60:ca:e3:57:f8:8d:08:46:e9:0d:
         bd:e4:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:12 2026 by rpki-client