Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/500f1e44-901c-32e8-a39d-93576acf6a4f.roa
File:                     500f1e44-901c-32e8-a39d-93576acf6a4f.roa (raw, json)
Hash identifier:          I73K+rxx9Mnkqqd+FYn43o31s0r5xI6aS9sOWDVcScc=
Subject key identifier:   7B:B5:D6:5B:CD:6E:CD:27:EF:C5:50:99:E1:63:52:98:CF:08:1E:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1F75A76DDC7A63546CE6C180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/500f1e44-901c-32e8-a39d-93576acf6a4f.roa
Signing time:             Tue 10 Mar 2026 14:28:42 +0000
ROA not before:           Tue 10 Mar 2026 14:28:42 +0000
ROA not after:            Mon 08 Jun 2026 14:28:42 +0000
asID:                     36621
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:75:a7:6d:dc:7a:63:54:6c:e6:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 14:28:42 2026 GMT
            Not After : Jun  8 14:28:42 2026 GMT
        Subject: CN=e0658023-a771-4137-8f81-469e8d534f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e1:6f:6e:64:13:46:88:05:d8:b1:dd:67:2f:
                    6d:db:49:af:6f:71:39:02:28:8c:ba:62:45:3f:5c:
                    1e:b4:35:ae:81:67:da:d3:00:84:b8:82:2a:fa:b9:
                    9a:a0:bf:1c:14:1c:de:96:8f:5e:a4:29:fd:94:eb:
                    d1:fb:ed:86:83:a8:99:db:58:e3:4a:03:71:6b:b6:
                    df:2e:9e:b8:15:63:62:10:2e:9f:e9:81:e0:d7:5e:
                    6d:bc:6a:21:e0:cc:fa:3b:db:d6:a6:69:3e:37:a5:
                    e9:3a:94:4c:a9:4d:c5:2c:10:d3:67:3f:b1:ea:df:
                    97:41:be:33:98:e4:48:5a:8d:9a:d3:64:71:dd:a2:
                    00:57:b9:44:be:af:67:26:5e:4d:1e:84:e8:fd:35:
                    61:8b:c2:b0:c3:d3:6e:59:de:fc:8c:a8:56:96:b8:
                    12:ec:49:b8:e0:ce:61:38:d4:9b:4e:86:b6:eb:93:
                    78:78:eb:05:3a:a4:0d:6a:2a:16:c7:fa:93:ad:ab:
                    a1:26:ee:52:06:a4:6a:e4:36:93:4c:c1:01:6b:7f:
                    18:56:79:4b:c9:8d:24:75:76:c7:e1:00:58:d1:53:
                    36:3b:8f:44:78:11:a5:b0:e1:84:d4:47:d3:1c:4a:
                    59:c6:35:46:99:e4:4c:88:f5:36:f2:de:c1:d3:4b:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B5:D6:5B:CD:6E:CD:27:EF:C5:50:99:E1:63:52:98:CF:08:1E:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/500f1e44-901c-32e8-a39d-93576acf6a4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:03:62:90:54:42:f0:5b:9a:e9:cb:9e:b1:1b:64:d1:b5:b4:
         68:04:fe:c4:b8:46:b3:11:02:bb:9c:aa:91:ca:8d:de:36:6f:
         3b:79:28:f7:0d:79:11:ee:ff:09:e0:2d:5a:74:ee:25:b7:bc:
         d0:bf:f7:82:f5:a7:f5:55:f5:5f:eb:92:ae:02:c7:e7:80:68:
         c4:0d:6e:83:db:93:18:32:7c:cf:8d:73:f9:77:ed:c2:ca:c9:
         52:86:d3:63:9c:63:43:74:c3:93:7e:3f:a7:33:5b:e8:28:7a:
         f4:87:da:e2:e7:8a:f3:dd:a9:59:d1:2e:5a:ad:52:ca:17:d0:
         f3:2c:6e:48:3c:fb:93:c7:12:4b:43:c5:a0:e6:55:f1:1c:d1:
         b1:1b:bb:3e:22:cb:fa:39:f9:2a:04:8f:0c:12:eb:94:bb:37:
         89:6f:35:ec:a2:2b:fe:a0:fe:89:6b:20:ef:71:cb:3e:ef:c0:
         be:52:7d:07:cd:d8:a3:e2:a6:a5:c4:12:1a:50:71:10:d6:9f:
         21:e5:6b:9e:79:0c:04:09:5e:5e:40:63:33:d5:5e:d1:2e:72:
         7c:a9:e5:f6:80:91:17:fc:84:b1:b4:ea:17:ef:29:49:c0:01:
         91:62:84:8d:62:2b:95:52:21:b6:e5:a8:11:b0:38:ca:82:b9:
         e1:5e:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:13 2026 by rpki-client