Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c391dc6-3e18-3786-9261-3379e171fbd4.roa
File:                     1c391dc6-3e18-3786-9261-3379e171fbd4.roa (raw, json)
Hash identifier:          3cxpnO7GH9cs1zH6iHmFJRPan+MBPEG2GNx/2cseEJI=
Subject key identifier:   BC:5E:78:A6:76:19:A1:6E:6F:68:8A:CC:C4:16:99:2A:B1:06:04:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F75A4E2C12B532B204E4BF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c391dc6-3e18-3786-9261-3379e171fbd4.roa
Signing time:             Tue 10 Mar 2026 14:28:40 +0000
ROA not before:           Tue 10 Mar 2026 14:28:40 +0000
ROA not after:            Mon 08 Jun 2026 14:28:40 +0000
asID:                     397200
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:a4:e2:c1:2b:53:2b:20:4e:4b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:40 2026 GMT
            Not After : Jun  8 14:28:40 2026 GMT
        Subject: CN=e5d04190-50d0-4445-87dc-2ac61246a1d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:6e:3e:4b:dc:51:d4:d7:23:08:cf:81:4a:
                    7c:13:7a:e1:de:be:98:cd:8a:a3:24:8e:e3:c8:7a:
                    9e:22:4c:a5:ed:46:ab:32:cd:08:ba:6b:b2:10:3d:
                    34:b9:c2:fe:b1:dc:31:f7:d1:8a:e8:79:6e:c7:e9:
                    ab:21:7d:14:ad:13:92:4a:18:80:e7:9e:49:d5:e6:
                    cd:7d:2f:cd:54:89:56:4f:c9:88:42:40:b5:da:77:
                    a3:d0:23:36:25:88:87:46:83:8d:1c:28:1b:0f:7e:
                    f9:eb:c9:eb:d8:af:7d:8b:6d:03:49:97:73:e7:ec:
                    2f:af:ee:a0:c5:44:4b:c5:72:28:0f:2b:b4:78:8a:
                    12:62:a7:e3:b6:e0:4b:98:c1:c6:34:7d:13:8b:48:
                    34:93:08:dc:ed:36:c2:10:5f:68:ec:f8:10:d3:0d:
                    af:a3:00:00:a1:c6:de:3c:f8:af:ee:b8:a8:9c:71:
                    ae:c2:0c:e6:c6:1b:0d:77:14:28:af:49:92:c9:4f:
                    93:18:e4:bd:e9:49:9b:ef:d4:3d:4e:5c:13:b5:1f:
                    ed:3c:60:93:33:c4:9d:2b:69:bf:c7:42:8d:02:12:
                    3a:01:d2:de:51:68:ef:5e:2d:98:2d:3f:71:22:26:
                    89:cc:0c:a0:6e:c1:40:c8:fd:ee:bc:11:bd:20:31:
                    48:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5E:78:A6:76:19:A1:6E:6F:68:8A:CC:C4:16:99:2A:B1:06:04:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c391dc6-3e18-3786-9261-3379e171fbd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:9b:63:1d:76:7c:82:af:46:0d:79:b9:df:16:b4:3e:18:90:
         cd:dd:c4:e5:19:26:10:52:94:4b:0b:70:ad:4b:4f:83:b9:67:
         63:78:0f:92:56:e3:76:c3:69:6c:7c:a8:8b:53:9e:7a:57:0b:
         6a:fb:48:ff:d3:2e:d8:7d:d9:1f:fa:5d:4a:ca:76:37:02:13:
         7e:1f:66:32:e0:16:28:38:2b:e1:be:08:1c:cf:db:be:e8:e4:
         79:bf:e9:49:a7:d8:5b:7b:cf:a2:b3:69:1d:b1:f8:76:13:97:
         d4:13:80:4f:af:b3:07:df:e4:af:92:ee:2b:c5:f1:0a:36:0b:
         8e:38:51:ec:ec:ea:19:37:70:84:6d:ed:31:c0:c2:8b:83:e3:
         ef:75:b6:bb:ce:11:b3:13:fe:b1:83:b3:7f:fd:75:ad:a8:b4:
         3b:f9:78:f2:f9:2e:88:7f:9c:96:5f:f4:5e:e3:f8:c3:02:61:
         0c:2a:37:4e:a4:e9:ce:c3:97:05:1b:ed:b6:4b:89:f9:ba:0a:
         31:cc:99:d1:7f:2f:ac:05:23:39:d2:9f:30:cf:85:36:09:0a:
         e0:f3:e8:b0:f2:ee:3d:77:a5:90:72:86:70:03:52:e3:91:48:
         04:46:ff:de:f0:9d:eb:62:13:07:e2:fa:55:53:de:82:50:30:
         c7:10:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:26 2026 by rpki-client