Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ffd5231-51ae-33f0-966d-9a751e457add.roa
File:                     7ffd5231-51ae-33f0-966d-9a751e457add.roa (raw, json)
Hash identifier:          lmKnHuRD+E8DZdm3OxfDWsaMwxrHWrafyisenODTKlc=
Subject key identifier:   A5:4D:F3:8B:6C:E1:A2:6D:AB:FB:80:4E:20:56:F5:2D:F7:D0:D8:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D0EE007F35B4B66BD6D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ffd5231-51ae-33f0-966d-9a751e457add.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     396578
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:0e:e0:07:f3:5b:4b:66:bd:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=cfa03643-3ab8-41bb-8ed2-5f7d2643c44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bf:82:36:c5:91:a4:5d:d5:4f:b4:ad:14:bf:
                    77:be:9a:d7:a5:16:b2:9b:0a:9f:7f:c7:6f:db:ba:
                    8a:49:bf:f1:cd:9d:0a:d1:da:7c:97:61:3e:ea:68:
                    3c:77:d9:bd:82:e0:af:45:f5:6f:50:de:2a:bd:ad:
                    ec:80:da:97:f9:b1:ea:9f:36:08:a2:82:80:96:c1:
                    71:fe:cf:6a:8b:ed:b1:71:af:9a:84:33:a9:db:11:
                    bd:ed:17:f4:22:2f:05:47:4d:28:43:83:13:7f:a8:
                    ec:fc:e4:b4:26:00:e5:81:e4:2b:6d:74:92:26:42:
                    8d:43:62:8e:bb:e2:b5:7d:3c:c3:d1:77:d9:73:a4:
                    07:9f:59:7a:d4:9e:cb:6e:bc:08:1e:05:59:2f:cc:
                    b9:d3:07:a3:02:ce:88:ce:6f:5f:2f:b4:3d:1a:36:
                    1f:6d:6f:97:ab:57:9b:6c:81:1b:92:59:16:8f:f9:
                    8e:28:7e:95:2b:49:bc:42:61:47:2c:c6:98:a1:07:
                    f8:f5:8f:77:35:63:56:d1:5a:41:6c:68:e7:02:66:
                    b6:a8:8e:90:9a:7d:14:ca:9e:80:0b:15:c2:da:c3:
                    11:da:aa:67:16:60:08:a9:5f:84:45:c3:49:11:74:
                    d9:b3:05:86:68:78:e7:62:6c:e5:1e:96:cf:d8:38:
                    d4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4D:F3:8B:6C:E1:A2:6D:AB:FB:80:4E:20:56:F5:2D:F7:D0:D8:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ffd5231-51ae-33f0-966d-9a751e457add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d5:43:58:8d:94:a8:bc:99:b6:55:7d:3c:85:5b:9b:bd:54:
         8c:c4:fa:9c:f4:3d:85:eb:f2:41:0e:8e:07:4c:e8:d6:18:ed:
         84:39:88:0f:14:36:09:8b:c4:a7:62:e1:e5:99:3e:86:78:bc:
         50:51:52:7f:ef:7a:70:52:cb:71:c3:3c:3d:8d:33:0f:3c:40:
         da:2d:7c:75:e9:10:ed:41:04:0b:d2:bb:19:03:51:f2:12:47:
         ee:8f:64:44:af:a6:87:10:1f:d5:3c:0b:64:9c:1b:b3:2e:25:
         68:25:0e:29:1a:b5:e3:9a:c1:77:d0:70:6f:10:f9:c2:fa:92:
         b0:26:87:90:9e:c3:75:3b:6a:be:29:d9:87:b4:e7:ff:57:11:
         45:3e:ed:c4:aa:81:fe:5a:cd:0e:e5:42:0a:24:e3:9e:c5:ea:
         44:56:0d:6b:aa:f0:e0:db:a7:19:f9:57:54:65:92:a1:50:34:
         17:8a:23:35:13:f4:d7:d8:73:40:66:d6:dd:8a:47:fb:42:49:
         b3:ef:22:d8:c1:8b:48:a4:d7:73:a3:e8:af:cf:fe:9c:11:91:
         1f:60:95:f7:c0:67:e7:f4:e0:39:eb:ae:8d:ad:a5:63:2a:d0:
         94:69:ae:f6:34:22:5c:51:6e:1f:83:70:8a:26:13:67:fa:9a:
         ca:47:e0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:24:01 2026 by rpki-client