Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdf906be-2295-3650-944b-3bc41f051b9f.roa
File:                     fdf906be-2295-3650-944b-3bc41f051b9f.roa (raw, json)
Hash identifier:          UvtgdtPJhSM+XdaW9enkZFIY5NZqeByoZRUQsVgpg1c=
Subject key identifier:   9A:D6:9A:26:C2:3E:AF:98:39:AB:72:26:FF:26:4C:2D:B8:5B:64:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DBA3B0F26911F1E1AC1095B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdf906be-2295-3650-944b-3bc41f051b9f.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     396593
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:0f:26:91:1f:1e:1a:c1:09:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=ffd903da-e61f-4388-a6f9-4d95c3ae2be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:39:44:ec:4f:c4:35:08:96:d0:dc:e3:22:66:
                    5b:41:cf:e5:7a:f1:18:b1:4c:75:15:8a:50:93:fe:
                    08:a8:c8:ca:95:00:1a:e5:48:80:87:8d:b6:7d:68:
                    43:45:44:ee:61:df:15:d1:27:dc:05:1c:93:5c:ea:
                    90:be:5c:2c:1a:e2:8e:44:b2:27:ac:66:1f:30:64:
                    83:d8:9d:8c:b0:36:1a:46:8b:a8:f8:42:4a:ef:5d:
                    f6:37:28:a0:e9:84:55:89:c5:ca:ec:e6:3d:50:5b:
                    a1:82:13:e7:23:4d:6d:21:ed:bc:92:c3:19:88:02:
                    2a:97:f0:6f:aa:23:80:45:df:52:d3:bb:66:94:5f:
                    d8:e2:f3:13:87:bc:5b:a2:8f:79:76:f8:99:2d:10:
                    0d:72:a8:35:30:35:27:23:78:88:00:10:e4:95:ad:
                    34:ae:f8:d8:68:6b:dc:0c:af:32:44:a6:d1:0f:cd:
                    f9:77:50:b8:d1:36:fe:f6:a8:a3:b3:3e:be:73:67:
                    0f:73:cc:c4:fa:da:e6:42:17:d4:b8:42:4c:ef:03:
                    a0:e3:e0:f0:9e:cc:b2:1a:5b:64:ab:25:e8:3d:84:
                    df:74:40:95:e0:a1:81:ba:9f:b3:c3:7b:9b:61:93:
                    ff:2a:41:f8:e0:00:0d:c3:a9:07:40:f6:5a:9a:07:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D6:9A:26:C2:3E:AF:98:39:AB:72:26:FF:26:4C:2D:B8:5B:64:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdf906be-2295-3650-944b-3bc41f051b9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:47:09:17:1b:e8:2d:9b:24:ac:bd:4d:50:d2:6c:b2:f2:
         63:20:bb:bb:8a:ef:b5:f4:c5:12:25:31:7b:60:cf:bf:9d:dc:
         78:51:73:05:1d:88:4f:e4:29:8a:9a:cf:0e:f4:fc:52:09:82:
         d3:73:4c:34:6f:d1:80:33:2d:52:2a:d8:3d:78:38:0d:82:68:
         68:c9:f7:44:7d:f7:41:c0:4a:7d:62:47:ad:7f:f3:12:4e:b9:
         2e:52:aa:00:76:8f:72:ac:e2:c1:9f:f4:45:39:25:50:7d:cd:
         b0:f4:99:d7:fb:a5:f6:ef:b9:75:eb:c9:b6:01:b5:ac:8c:ae:
         f0:e9:aa:ff:14:84:2a:af:5e:d4:d6:f9:2f:cc:06:51:f6:8d:
         1b:47:56:d5:f4:5d:ec:7f:1c:c9:23:2f:e3:88:e4:68:d7:f9:
         14:d8:28:9d:eb:a0:f4:11:cf:1f:ce:be:9b:cd:f1:75:ef:a7:
         68:14:0d:62:39:68:79:26:3a:87:a6:40:af:c8:03:13:d9:9d:
         c4:b1:8e:db:88:ae:bf:ca:25:ac:f8:53:78:7a:d7:bb:f3:b8:
         15:c6:c1:b2:bd:59:05:be:c6:9d:1d:10:79:65:fa:6a:68:8b:
         5e:b8:b1:69:59:41:93:bc:d8:49:4b:30:95:9d:ec:3d:56:67:
         f5:be:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:02:09 2026 by rpki-client