Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ab80c3c-9b69-30d5-9a1d-a36eae46953a.roa
File:                     9ab80c3c-9b69-30d5-9a1d-a36eae46953a.roa (raw, json)
Hash identifier:          1Yc0wSBtePwqDOW8xS2qvaMgEOcRbiFxmOoVlBCOH3c=
Subject key identifier:   90:23:BC:27:00:05:9B:0D:C9:EC:09:82:68:40:AB:28:F4:4E:FC:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E001BD28DCB9D4B3BF76D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ab80c3c-9b69-30d5-9a1d-a36eae46953a.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     40717
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:1b:d2:8d:cb:9d:4b:3b:f7:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=70eb613a-1512-43cd-85b8-736e0518d509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:68:b3:7e:47:aa:78:78:55:4a:da:5b:ae:
                    73:12:81:98:b0:5a:82:5f:e7:a3:3d:5f:d9:cb:b6:
                    bf:f2:ba:6e:13:33:77:17:09:03:96:63:e6:d7:bf:
                    f1:db:61:33:5c:23:bd:d8:67:78:95:fd:32:e0:43:
                    19:e9:da:84:63:de:a5:f4:ea:8b:de:8e:a8:45:5c:
                    3f:f5:9d:df:10:e8:e6:85:70:8d:9a:a5:45:3f:15:
                    c5:8d:73:d4:06:d1:f8:60:66:bc:70:cd:f0:a5:cc:
                    78:2a:34:57:87:82:0d:21:b2:c3:37:3c:4b:36:1b:
                    f8:18:9b:86:57:94:19:5c:01:37:d0:fb:68:f1:17:
                    f3:16:82:ec:08:b0:37:f0:ea:62:85:dd:25:0a:d6:
                    af:57:66:cd:d7:82:92:2c:e2:4a:58:42:b3:b1:f1:
                    b2:88:3c:fb:93:0f:e8:34:ba:7b:0b:47:3a:f6:38:
                    2a:a9:88:5d:e0:51:98:71:cd:87:e4:5c:c2:14:d5:
                    c9:cd:48:1d:61:41:0c:58:ab:75:80:9d:cf:89:2d:
                    e6:82:6f:64:a5:28:a1:7e:c1:63:87:0e:ea:39:3f:
                    38:f0:98:ea:aa:d8:42:da:2f:8b:25:fb:9c:f1:86:
                    6c:e4:67:8a:81:45:13:00:e7:0e:36:54:d3:1d:b5:
                    19:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:23:BC:27:00:05:9B:0D:C9:EC:09:82:68:40:AB:28:F4:4E:FC:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9ab80c3c-9b69-30d5-9a1d-a36eae46953a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:e9:42:b1:b8:b8:48:0a:da:f5:d5:42:bf:ec:22:f0:9a:c2:
         28:8f:0e:13:4c:e7:47:9a:5d:9c:84:2f:88:c2:55:1d:3c:d2:
         aa:98:89:af:f1:2d:03:07:36:c8:a7:b3:ad:0f:c8:f7:5c:0c:
         13:51:40:ea:b2:2f:cb:05:0b:65:83:da:f3:90:47:53:dd:7e:
         79:00:b7:6c:91:cd:d1:4b:47:36:8e:df:3b:1f:00:ec:1d:be:
         74:78:fa:57:83:a1:c6:75:2d:a2:c2:d5:14:30:a3:6d:71:07:
         ab:5d:f6:c4:0c:a8:71:7b:13:6b:48:81:a7:38:08:9f:83:50:
         df:48:49:41:52:2e:a1:76:be:67:17:98:dd:f5:b9:b7:89:b5:
         54:cf:7c:1c:bf:b3:6a:64:e9:72:70:c8:7b:68:7f:37:66:40:
         fe:e6:9e:c3:5e:76:4e:f5:d5:f4:0c:8c:c6:66:e5:8a:bf:8a:
         13:f2:09:c7:bf:d0:27:5f:a2:37:56:d4:e2:89:65:f8:9a:f5:
         bd:ea:e4:73:b9:ee:7f:49:33:67:e3:08:55:82:b5:06:12:dd:
         d5:87:9f:05:2c:02:0b:ab:f5:5b:d6:2c:f8:ac:b0:4a:07:6b:
         a0:a4:38:b7:e9:98:e8:c0:98:0b:de:70:a8:99:1a:96:d8:3b:
         cf:c0:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:24:05 2026 by rpki-client