Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa
File:                     ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa (raw, json)
Hash identifier:          QbmQ536EHmEnPfws9pJrjAZ45jX948ECSvjx4s/L88I=
Subject key identifier:   33:80:84:DB:F9:24:E2:F4:4E:1C:17:92:B1:62:52:84:A5:1B:26:CE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D975569F596A46F6BE2571E20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     396551
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:69:f5:96:a4:6f:6b:e2:57:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=97166c99-b145-4982-9b4b-b1de431ec75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b6:29:f0:38:9b:ec:39:73:26:27:12:3b:12:
                    f7:8c:3d:7d:1d:d1:a2:66:31:14:69:e3:b7:96:c6:
                    a8:47:66:6f:f1:62:b1:b8:01:15:56:6b:76:bb:04:
                    88:ab:cb:9b:b5:1c:7e:1d:7f:64:cf:4d:0a:f2:86:
                    95:2b:47:45:86:67:a2:bb:7e:8c:da:16:de:a8:76:
                    a6:87:3a:df:01:17:b4:00:77:bd:d6:fa:51:88:6b:
                    c4:ff:fe:63:c8:d2:0a:94:a5:a7:8c:ec:4e:9a:61:
                    4a:33:40:2b:73:d7:78:53:7a:3c:4b:78:5d:c1:fc:
                    1c:36:29:f5:8f:d7:44:fb:ef:1d:03:99:25:7a:c7:
                    4e:4a:5a:7d:03:7b:46:b9:65:56:3d:e2:7f:b3:8d:
                    f8:ee:92:10:a9:c5:72:f9:d9:67:36:1a:fc:9d:1e:
                    aa:b7:cf:21:a1:2e:55:2c:ba:92:c0:b9:69:24:0d:
                    ba:a3:20:62:28:46:f4:d7:bd:d7:6a:7c:3b:b3:16:
                    db:1b:96:29:2c:0e:3b:86:c3:5b:5c:87:7e:6c:69:
                    54:2c:46:6c:bd:00:b5:92:a4:29:48:99:1f:8a:01:
                    d4:10:a5:a0:0a:0c:06:a6:a3:d6:6d:d9:4d:3a:58:
                    a9:1d:8a:6e:74:b4:d7:5b:b2:72:78:9b:0b:dd:da:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:80:84:DB:F9:24:E2:F4:4E:1C:17:92:B1:62:52:84:A5:1B:26:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff0bb352-c6e5-3f7f-b56b-058be8dc8e21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:66:ed:1a:b6:2c:e0:7b:4a:fb:27:64:66:38:4c:cf:b0:04:
         40:5c:b4:f1:4b:86:89:dc:af:52:3b:0a:4e:ba:87:f2:17:3a:
         be:3f:b5:70:fe:ad:c0:03:d6:0a:56:12:0a:74:58:49:92:20:
         1b:91:af:db:4c:62:e0:25:08:1f:1d:54:50:5c:d7:d9:3e:2a:
         79:89:70:d4:8f:c7:e6:e2:cb:a2:16:8e:7f:01:ed:8f:4a:d6:
         af:ad:76:3b:4b:73:0a:df:aa:a4:bb:15:3c:f9:5a:b6:fc:8d:
         cb:a5:5a:7c:e6:d3:b1:0e:ad:6b:56:be:bd:9f:14:5c:7f:04:
         3d:b1:d5:d4:46:83:54:54:6d:2c:63:1b:9a:ba:79:5e:86:1e:
         52:d9:ab:06:4a:45:2b:ab:49:89:76:b8:cf:2e:b9:7b:19:e9:
         0b:3b:b6:a7:ab:82:37:5b:b0:01:d0:9e:e9:14:df:0a:83:d0:
         73:bf:7e:40:de:42:c5:50:7a:2d:33:bf:7a:de:a5:f0:b6:63:
         73:65:e3:68:64:78:34:62:59:d3:d9:36:a5:8b:16:8a:c3:07:
         90:a2:63:6a:d0:f2:ca:36:a9:de:8f:b0:12:01:24:4b:0e:16:
         5a:de:1b:19:ae:5c:d4:5e:68:e5:4a:11:86:50:b5:2e:7d:22:
         b0:0e:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:11 2026 by rpki-client