Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58700482-e60e-3c29-9b34-f829d080cf3a.roa
File:                     58700482-e60e-3c29-9b34-f829d080cf3a.roa (raw, json)
Hash identifier:          LIQzXifQzEwViyX2rviPl/cYrcDMcHcBc1m26STVvYI=
Subject key identifier:   14:46:98:75:12:05:0F:30:7A:92:A3:31:F5:36:40:32:9B:17:15:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A5AC63C4F6709C82F0040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58700482-e60e-3c29-9b34-f829d080cf3a.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396682
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:5a:c6:3c:4f:67:09:c8:2f:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=9779e073-5c70-4b6a-8c71-48099734e8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ed:c6:39:2a:1c:fd:d0:c4:26:e6:12:20:83:
                    f7:27:89:52:e5:2a:6e:9d:46:e7:36:ee:a2:08:ad:
                    9e:c6:77:d0:b7:b6:2d:fc:93:4a:6a:f9:cf:4b:cd:
                    7c:74:bf:dc:4b:2e:0f:88:b8:b3:5f:29:25:80:c8:
                    10:8e:b6:58:e3:91:19:52:4f:9f:59:01:30:1c:96:
                    b8:b3:48:f2:80:3e:6d:6b:7d:f8:e5:b0:c0:ba:5d:
                    db:6a:de:dc:1d:c0:d0:b7:89:51:c5:a2:4d:e5:44:
                    eb:8d:89:c2:09:12:b7:52:01:77:56:25:ef:09:1b:
                    c7:c6:12:41:29:78:db:58:9e:c7:df:c4:62:65:75:
                    b0:6a:6b:4b:d3:e5:72:83:2c:3b:84:d2:94:a6:89:
                    44:09:79:a9:8a:d8:b6:be:07:c6:13:72:58:f7:11:
                    f1:27:43:9c:33:bf:20:b6:25:16:5e:b9:a8:d6:a0:
                    ee:5f:38:ed:b6:b3:4a:ce:52:10:5d:47:5a:58:6e:
                    c4:07:e4:3f:e6:c6:61:3a:12:8c:ca:3b:af:c0:00:
                    f6:56:bc:b3:de:45:22:01:22:ac:b6:a7:dc:fd:5c:
                    27:9a:60:09:ad:f0:de:95:99:21:88:43:3e:68:15:
                    32:f3:7f:4c:12:1c:4f:fe:d3:2e:19:e1:2c:c4:15:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:46:98:75:12:05:0F:30:7A:92:A3:31:F5:36:40:32:9B:17:15:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58700482-e60e-3c29-9b34-f829d080cf3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:08:b3:a4:da:05:fa:f5:22:60:98:5c:cc:09:a4:26:b2:eb:
         cb:f7:88:f7:5d:1f:43:5d:3f:43:4b:03:ed:0e:11:db:a9:a6:
         8f:92:4a:8b:a8:01:f4:43:f3:77:e9:a3:6c:13:84:34:4c:54:
         dd:ce:8e:94:6b:a5:8c:fa:55:db:d1:47:68:f2:6c:ae:20:86:
         a2:a2:60:c2:8f:47:5c:78:22:30:73:38:a7:fa:2c:d2:14:c9:
         25:9e:d7:15:6d:a7:1d:27:4d:1f:3d:09:1b:77:83:8f:20:81:
         87:34:e0:4b:e4:8f:92:44:09:50:5e:42:75:ce:b9:ce:a3:95:
         5b:86:48:0e:e5:b8:19:60:56:8e:83:ef:81:b9:a9:62:7d:d3:
         c4:6f:31:cb:46:c8:fe:a4:fd:d4:2e:5f:79:b8:9b:aa:a5:cb:
         64:13:f2:3b:bf:c3:8c:5d:7a:a3:da:17:14:69:fd:bb:3a:28:
         f5:8e:72:13:29:d1:08:33:3e:2b:ef:b9:bf:e0:1e:56:3d:62:
         e4:9b:f3:fb:19:cb:b7:bb:75:d9:8b:90:ff:de:1b:e6:0a:30:
         b7:38:14:56:5f:9e:aa:e1:4a:4f:f5:0e:df:a5:02:14:95:55:
         6c:5c:ff:0b:57:23:99:64:00:fe:20:c7:d3:93:d4:b3:28:e8:
         47:c9:eb:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:58:16 2026 by rpki-client