Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9169a49a-3c32-36d0-8510-13346f196704.roa
File:                     9169a49a-3c32-36d0-8510-13346f196704.roa (raw, json)
Hash identifier:          YVo+q8tMm77hvD637jIUbQddi8nkLhiL6/GFnWSf5lc=
Subject key identifier:   3E:5D:9E:85:6D:4D:4A:E3:93:8F:41:B3:99:80:B4:C1:E7:74:0D:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24E11BFA6BD3ADAAECD27300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9169a49a-3c32-36d0-8510-13346f196704.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36618
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:1b:fa:6b:d3:ad:aa:ec:d2:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=fcdc9b1b-f73c-417e-ae0a-b959ab00c45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:a2:d4:91:69:9b:40:a3:2a:72:81:b1:4c:
                    b4:82:84:24:d1:19:42:6d:cc:80:4e:ca:e2:b7:57:
                    78:8f:ae:08:e6:2d:27:fa:d0:c8:40:30:93:ff:93:
                    87:cc:46:37:dd:2f:54:2a:da:65:04:bd:97:d1:ad:
                    80:15:92:d8:61:5a:a0:e1:17:0a:8f:4f:3a:e0:5b:
                    35:90:14:65:d7:98:bc:03:0e:5d:ea:3a:d8:5e:38:
                    70:33:de:3d:92:f1:ae:ab:99:66:48:2e:58:a4:54:
                    19:4e:c5:4b:ee:a2:b4:04:8c:64:18:b0:a0:ca:d6:
                    73:e3:18:3f:ee:e2:ce:12:34:22:7a:e5:98:93:d2:
                    d1:67:c5:98:f0:94:ef:6a:bb:ab:7c:37:c4:31:db:
                    6d:f1:9d:92:62:87:60:14:a4:f6:7b:d3:41:56:a4:
                    70:84:0e:74:f9:2a:fc:24:15:9f:79:4c:a5:38:bc:
                    a0:75:aa:ce:d1:8f:23:70:68:12:53:54:97:52:b3:
                    58:c1:4d:fc:d4:a0:8f:da:05:ba:2b:79:bb:c6:1c:
                    cf:b5:40:ce:de:71:3f:77:59:05:e9:8a:55:c3:be:
                    2d:77:a6:a8:9f:14:1a:99:8a:c4:bc:4a:55:bf:09:
                    e6:9e:15:19:ae:0e:bf:09:ff:bc:ac:6c:af:28:7e:
                    9a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:5D:9E:85:6D:4D:4A:E3:93:8F:41:B3:99:80:B4:C1:E7:74:0D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9169a49a-3c32-36d0-8510-13346f196704.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:33:d6:5e:36:5d:25:77:b4:f3:55:e5:56:b8:20:aa:f1:30:
         22:77:f1:23:81:6a:66:a0:c8:fe:59:d5:1e:dd:59:ef:b0:98:
         04:ed:fa:33:5f:42:d0:55:bc:1d:e7:59:29:32:86:9f:5d:f8:
         21:7b:f3:71:42:c9:90:5d:d1:97:db:90:cb:d8:01:2a:63:f1:
         37:23:8b:32:7e:04:89:03:e8:11:30:29:b0:4b:5e:00:0e:75:
         6e:a1:04:e1:b9:14:07:9f:93:73:55:78:93:6a:6a:f1:4b:a3:
         89:41:d1:2c:aa:55:73:16:2a:18:60:ac:9c:b7:cc:8c:c7:68:
         76:2a:ec:f1:87:ae:79:87:cb:98:90:88:87:1a:e9:a1:7b:d4:
         e4:3b:09:5d:c2:7b:2c:33:71:76:01:d9:74:10:8e:5d:7a:e7:
         bb:e9:6a:6f:8f:6f:83:0a:6c:c0:43:e4:21:5f:b3:c0:fb:02:
         a5:84:f8:ce:a4:da:1c:1e:e4:ee:e7:fa:a9:4f:53:dc:6a:f5:
         a4:f9:12:6b:77:25:2f:00:70:47:28:e8:1d:9c:45:be:e9:74:
         a8:c2:08:69:a8:e5:89:a7:52:55:b4:c1:97:3f:f6:a4:32:36:
         f3:3d:38:74:dd:8f:8c:7c:af:4b:d2:4b:9a:97:b2:94:44:d3:
         56:d4:a9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:21:33 2026 by rpki-client