Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53bcc98b-51fb-3673-96d1-51fa2b64cea2.roa
File:                     53bcc98b-51fb-3673-96d1-51fa2b64cea2.roa (raw, json)
Hash identifier:          dnElk1DJYL7fxfBhE6gS8JG7AhiahOnkrkAoJHjdOKw=
Subject key identifier:   98:81:59:BB:25:34:09:3B:62:1A:B6:9A:4C:E9:CF:60:10:39:57:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24DF95399DFBE12A3D10E600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53bcc98b-51fb-3673-96d1-51fa2b64cea2.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396546
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:95:39:9d:fb:e1:2a:3d:10:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=f6cafab5-192b-46d6-93e5-69e94314ada9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:f4:97:c5:d6:bf:f0:c5:dc:c3:bb:50:74:
                    2f:95:b0:35:61:b8:46:23:f1:4f:d6:fd:56:2d:42:
                    2b:8e:7d:2d:b2:30:89:f9:18:16:bd:9c:78:b5:ee:
                    59:29:ec:21:cb:1b:51:6e:f8:a8:b7:ed:10:c1:4f:
                    c9:9a:18:d4:06:23:e9:89:f7:1f:fd:87:94:01:e6:
                    16:86:eb:98:fb:51:55:c5:b0:9b:1c:8f:dd:d1:c4:
                    d4:a6:eb:67:42:c5:ab:00:d4:5b:c3:1f:a6:45:1c:
                    75:c1:2c:4a:ac:af:1b:df:7f:6f:1f:32:9b:60:39:
                    10:60:f9:9b:58:a5:77:ff:93:6c:e3:db:4e:0a:69:
                    68:0d:0c:87:3a:ef:f7:51:d8:de:64:5c:32:a5:d9:
                    38:31:a8:4c:02:c2:28:de:af:b3:59:be:f3:de:4a:
                    68:90:15:fc:0a:7c:d9:b0:41:a5:f2:e5:c5:f8:30:
                    4b:f1:87:31:f9:7b:3e:b3:82:75:fc:f2:d8:22:05:
                    3e:e5:29:a8:d8:0c:d6:76:57:8e:1e:c5:76:03:d5:
                    a8:98:44:42:a9:1f:72:c7:c5:b3:a0:45:83:06:cb:
                    8a:bd:7b:d3:f0:19:dc:9f:ef:c4:77:f1:cd:53:4c:
                    31:1c:c2:35:d4:60:d5:c4:03:33:6a:6c:73:03:48:
                    73:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:81:59:BB:25:34:09:3B:62:1A:B6:9A:4C:E9:CF:60:10:39:57:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53bcc98b-51fb-3673-96d1-51fa2b64cea2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:ec:af:37:18:5d:d3:c3:78:90:c9:67:55:f5:6e:d2:12:c8:
         9f:6f:f9:96:16:42:00:06:5e:d2:61:9d:07:d8:3f:a6:8d:77:
         4e:ea:60:a8:a4:dc:f7:6c:f2:c3:97:3d:2c:14:fc:a8:c8:86:
         0f:18:12:80:ce:25:6a:30:58:cf:4f:b4:3a:99:a8:26:55:f0:
         17:71:46:82:2f:1d:56:8c:f4:7d:65:32:d0:3e:3e:80:8e:5d:
         ed:6d:c0:1a:bf:da:1b:63:61:54:65:e4:7a:51:54:06:11:7f:
         39:15:ed:a7:ec:bb:b5:54:02:fc:1f:e5:b6:51:49:8e:d2:7e:
         fc:5f:ac:88:25:04:09:6a:e4:7e:ea:f1:79:72:65:98:e8:1b:
         81:1a:49:d2:17:0a:0f:c7:33:cc:af:67:6f:68:ca:0f:89:5b:
         75:68:43:5b:4a:12:aa:3d:ff:50:07:bd:81:57:2d:17:af:83:
         36:7b:0d:4d:a4:6c:83:ba:e7:c4:a5:c1:37:a4:88:5b:03:f7:
         77:ff:bc:a7:90:3a:af:2f:ed:fa:fe:7a:72:8c:8b:bc:60:4b:
         ad:5c:31:c6:1a:e6:da:d3:64:69:81:77:12:ae:32:7b:1e:8a:
         48:07:fe:8e:95:d6:a1:8c:c1:e7:57:e1:04:44:9c:21:58:90:
         2f:a4:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:00:52 2026 by rpki-client