Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9be985-10ca-362d-a46b-e7d0ce4e8902.roa
File:                     9f9be985-10ca-362d-a46b-e7d0ce4e8902.roa (raw, json)
Hash identifier:          Gj/nC0bKcNaYAHlVAKse81M5y2GauD3KrfYe1fcF2u4=
Subject key identifier:   5D:C4:B3:E6:6B:6D:F8:9C:7A:F1:78:EF:13:6D:AA:C1:C7:F0:D8:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D32F5A9045270D40E45A2CF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9be985-10ca-362d-a46b-e7d0ce4e8902.roa
Signing time:             Tue 17 Mar 2026 14:06:58 +0000
ROA not before:           Tue 17 Mar 2026 14:06:58 +0000
ROA not after:            Mon 15 Jun 2026 14:06:58 +0000
asID:                     397193
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:32:f5:a9:04:52:70:d4:0e:45:a2:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 17 14:06:58 2026 GMT
            Not After : Jun 15 14:06:58 2026 GMT
        Subject: CN=47323436-3625-4118-bbec-dbeefec81209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8f:a1:a5:ba:3b:81:b6:16:c8:ac:85:36:2f:
                    a6:7c:34:17:28:da:a9:25:e0:aa:54:88:42:f8:d5:
                    48:3a:b2:d1:38:c6:9d:58:b7:4d:74:1a:db:02:3d:
                    de:0a:d8:f3:06:f8:da:1e:fa:44:02:2b:18:df:1c:
                    0e:d8:41:4f:4c:9a:53:51:00:f8:de:7d:4a:65:e8:
                    ab:cb:91:bd:b0:a9:b1:55:ef:9a:7e:0e:68:d0:86:
                    eb:88:e2:c0:94:ae:21:d7:ab:15:5e:e0:93:17:ed:
                    cd:c9:12:5b:1e:87:1b:be:be:23:da:04:1e:f9:80:
                    6f:75:0c:b2:34:a7:b4:54:67:2f:d3:44:c7:59:be:
                    89:53:d5:99:01:f1:b7:5d:77:a1:12:ce:ac:a2:43:
                    da:77:71:1b:29:a4:7c:19:5e:09:1b:fb:4e:e7:19:
                    06:2c:2a:59:03:0b:89:04:04:b6:be:23:79:11:05:
                    6f:7a:d0:bd:86:1e:26:08:63:8a:06:28:cf:bc:cd:
                    9e:90:9a:4f:73:8a:a4:2f:6c:fb:12:48:73:6c:74:
                    66:f0:f9:ba:bf:89:aa:f4:ec:87:d7:13:5e:23:d3:
                    44:f7:07:44:90:9d:cd:7e:94:b3:73:6f:67:13:cd:
                    2f:45:7f:e5:f6:3e:55:4a:9b:25:1d:64:38:9a:30:
                    35:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C4:B3:E6:6B:6D:F8:9C:7A:F1:78:EF:13:6D:AA:C1:C7:F0:D8:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f9be985-10ca-362d-a46b-e7d0ce4e8902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d8:de:5b:b3:f0:6b:4f:7d:ca:5a:8a:a6:c3:0d:ba:be:59:
         94:d4:1e:c4:e5:22:44:61:be:f6:82:89:23:4c:4f:73:e9:d4:
         d7:dc:53:a2:1c:1e:25:bc:bb:2f:77:b6:c9:e2:e6:00:69:78:
         9c:e3:30:23:8f:25:5d:e9:b1:de:1b:9b:30:b3:e5:3f:bf:bc:
         c0:3b:ec:09:11:11:40:d0:3d:94:5a:39:88:21:78:0d:b7:bb:
         eb:d7:9e:57:d5:0f:12:db:61:51:b4:8f:8f:47:ce:25:bf:e9:
         f2:16:34:56:d3:2c:46:d0:40:d1:dc:77:ad:b2:7e:a5:c8:e3:
         48:f1:bc:e0:d6:40:4c:d0:35:61:61:05:f3:6f:b8:6b:48:fc:
         48:66:10:92:c6:75:c9:3b:b8:78:0d:9a:be:2a:9c:f9:2a:54:
         e2:f4:3f:be:07:07:d4:9f:31:e0:d9:cd:45:c3:ad:9e:fc:2f:
         4d:66:36:80:c6:98:20:60:72:14:5d:8b:d2:d8:22:67:14:59:
         76:18:4d:e1:ae:89:a2:ea:8c:d5:cc:34:0b:11:ab:22:d3:c6:
         f5:94:10:7d:10:96:38:3a:f2:d3:34:8a:e2:94:7d:00:fd:7a:
         80:21:b8:22:f2:e6:cc:09:f7:eb:76:c1:e9:8c:ac:bc:9a:41:
         65:cb:f9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:42:51 2026 by rpki-client