Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa
File:                     ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa (raw, json)
Hash identifier:          RZX0vzNXimVFz6qNIU5AC/6noWJ9ThmL+Zw+t9C+zFg=
Subject key identifier:   14:E5:89:CC:75:27:09:8E:8D:AE:94:B0:0B:5C:8A:27:F0:40:7B:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97556D43D0DE7FC97FBC2F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     396576
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6d:43:d0:de:7f:c9:7f:bc:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=1aefaa6b-3ae7-48e3-b1f7-4c18cab25976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:61:a0:df:0f:42:08:37:fb:40:a0:96:9c:18:
                    c9:df:1e:c4:3c:ca:99:ae:f0:ce:06:82:1a:4c:5b:
                    de:af:72:e4:34:44:6f:1c:f0:86:ca:3c:a1:44:81:
                    e7:c2:ff:e1:12:ba:d4:5b:54:81:de:ac:04:30:5c:
                    92:96:35:03:34:5b:08:e5:aa:17:92:9b:5e:0a:98:
                    84:d9:9d:3f:8b:5d:a5:22:8e:e4:de:f1:87:a3:00:
                    a5:1a:b3:8a:bc:b0:1b:ce:9c:c4:05:06:be:50:f6:
                    ce:9b:09:8f:19:fe:e6:1a:7c:07:d1:7e:7b:1c:41:
                    1b:c6:a9:48:ed:c5:92:d4:f9:fe:95:49:72:35:e7:
                    28:7c:58:47:91:5b:de:a1:10:cd:14:c4:37:ff:d8:
                    1a:c0:8b:40:22:f8:d9:79:ff:96:04:20:04:9d:c5:
                    1b:3d:91:b4:e3:0a:3a:b5:ce:38:38:58:66:f3:8f:
                    58:52:f6:28:3b:ee:ea:89:84:3f:1e:50:ac:d6:a8:
                    2e:58:31:7b:f6:9d:db:59:45:5f:95:35:a8:f3:7d:
                    11:8c:1e:f9:6b:86:7a:c6:b5:b1:61:fe:10:7d:de:
                    c4:26:85:b6:9b:03:09:01:d8:36:41:f9:eb:c3:0d:
                    fa:ea:b7:23:a3:99:de:ff:a0:3c:0f:63:70:f8:2b:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E5:89:CC:75:27:09:8E:8D:AE:94:B0:0B:5C:8A:27:F0:40:7B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ee:a4:8f:3f:82:ea:fc:87:bf:80:f1:81:41:7f:b3:47:98:
         bc:7d:09:3c:0b:32:c5:96:cc:1c:b5:3d:eb:4e:36:65:ce:d0:
         dc:0d:9e:ee:56:70:a3:51:94:85:3e:1c:c6:7c:74:40:39:43:
         cc:b5:a8:e1:79:58:33:aa:b9:97:28:12:aa:12:f1:a5:19:23:
         f1:20:d5:fc:28:23:63:33:87:5b:8a:a7:96:9c:6d:a9:17:38:
         41:43:c3:89:04:df:f1:52:04:82:40:df:1d:ba:ed:e8:ea:b8:
         58:12:0a:d6:a5:56:89:94:9c:50:cc:e7:34:fe:3f:9e:18:6d:
         42:90:a5:cf:9c:3a:44:89:b7:ad:af:8b:9d:82:bb:30:26:91:
         42:ef:70:10:ce:34:d7:dc:ab:bf:de:b5:09:44:6d:e4:14:60:
         2a:27:75:45:21:e9:fd:5c:b8:1f:f0:67:e5:f0:bc:e3:30:61:
         1e:0a:54:73:5f:8f:da:e8:c6:64:ea:7d:2f:aa:2c:07:99:0b:
         7b:d1:a2:11:a2:1b:1e:4a:f9:32:31:b1:1e:7b:85:f9:f8:d7:
         68:3b:c1:da:d1:83:b0:3d:9f:f5:67:0d:f5:76:3f:e0:b1:b6:
         f0:21:32:50:cd:ec:2f:c0:c8:7b:b4:84:0d:f4:30:6b:6f:09:
         2a:38:4a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:17 2026 by rpki-client