Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9b7f352-89e9-3ae4-bf9e-227b6e83c735.roa
File:                     e9b7f352-89e9-3ae4-bf9e-227b6e83c735.roa (raw, json)
Hash identifier:          u8+gT1/eWTtQ1MvhVk/1k/nzaLln8MFYNu7xCNSoJQo=
Subject key identifier:   62:66:A6:70:3A:EF:2F:BD:8C:7B:43:D0:66:4B:9D:FD:C6:BC:14:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBBA06E56A7364B248D67ADE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9b7f352-89e9-3ae4-bf9e-227b6e83c735.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     396613
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:6e:56:a7:36:4b:24:8d:67:ad:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=119f1258-2c71-4407-a7eb-7031f7ce6701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:d1:e5:44:51:5e:cf:8c:4b:96:26:9d:99:
                    dd:3c:66:9a:7e:08:2a:c0:6d:46:92:99:5b:e5:31:
                    37:55:14:4e:23:5f:5f:4b:ea:28:44:9e:04:b1:15:
                    ab:03:71:ab:e6:c4:03:cc:ee:33:e5:f6:9c:92:9a:
                    86:4c:1a:e7:ae:1c:26:94:f2:9e:d3:ba:25:ee:74:
                    f0:5a:82:88:a6:d2:80:16:13:70:27:0a:5d:f1:02:
                    d9:27:ea:cc:56:62:52:8d:13:55:cd:22:51:ad:67:
                    da:4a:1d:e8:40:8c:83:4e:2f:23:c4:0b:dc:44:15:
                    cb:87:5b:16:f3:6b:89:11:6f:dc:2e:94:aa:9e:ef:
                    82:22:d7:8d:3d:fc:78:7c:3f:61:7e:1e:c1:6d:32:
                    9f:85:1c:53:20:a0:61:56:79:8d:51:5b:ad:ef:c2:
                    99:01:17:75:18:a1:13:10:60:f9:17:8c:9c:1e:e2:
                    fb:68:5b:b2:24:7e:be:1a:37:d0:17:27:c2:2e:0d:
                    48:98:90:67:37:ea:44:34:9d:c6:f1:2d:13:10:90:
                    d7:2a:bd:54:54:6c:eb:ad:11:4d:89:bf:f7:eb:9f:
                    e2:4b:9f:40:5f:f2:ae:b2:74:37:cb:a9:71:d0:3d:
                    48:93:7e:27:3b:7c:bd:7e:dc:55:22:4c:0c:be:ad:
                    82:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:66:A6:70:3A:EF:2F:BD:8C:7B:43:D0:66:4B:9D:FD:C6:BC:14:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e9b7f352-89e9-3ae4-bf9e-227b6e83c735.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:c8:b7:72:74:4a:47:de:40:75:7e:93:fa:f0:e1:fb:de:6d:
         be:1c:27:aa:2f:58:b9:db:f4:eb:39:6f:5c:d0:82:7b:4a:eb:
         2a:f7:a8:7e:62:35:0e:14:01:d1:d6:9d:17:08:e9:c2:24:06:
         2a:de:10:35:e5:ce:68:26:99:bb:5c:7b:7f:c5:27:4d:f6:c9:
         f3:d3:0f:c4:40:fa:62:a4:0e:4b:e4:e4:76:f2:94:76:24:20:
         bc:6c:6b:c2:53:f9:f3:1a:a4:08:5f:06:dd:43:d0:cb:6a:bb:
         46:31:79:2a:53:be:c5:94:fb:6b:ee:44:7b:4e:90:71:da:b7:
         db:db:c7:6f:ec:10:85:0c:ce:4e:ca:d4:21:e4:a5:65:22:81:
         ab:46:52:56:09:e5:9e:b6:08:30:87:99:f4:7e:97:e8:8a:08:
         21:87:67:ad:16:df:ba:4e:99:2b:5a:44:48:39:a6:07:79:c1:
         d3:8c:35:bd:a8:ee:01:1d:df:9b:ab:15:3e:d9:9e:bd:ed:15:
         06:99:ac:6f:82:31:38:b8:71:9f:eb:eb:26:e9:26:92:98:bc:
         60:fc:02:5d:5b:a3:87:99:18:c8:cf:0b:17:ec:55:ba:14:75:
         60:66:ce:5c:62:02:2f:7e:19:f8:01:dc:94:79:3d:fe:5c:a2:
         60:68:8a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:14:56 2026 by rpki-client