Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad47d230-8f28-3e38-86e4-42de158b9ced.roa
File:                     ad47d230-8f28-3e38-86e4-42de158b9ced.roa (raw, json)
Hash identifier:          k+nBa7cASUc+2n9fOnRtlWS0NWirOEbw2z3B/vf08Jo=
Subject key identifier:   52:EA:26:B7:C9:28:F1:55:8C:28:A7:62:70:AE:EA:84:76:59:D4:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D386A25E227F80F9345F2AA2C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad47d230-8f28-3e38-86e4-42de158b9ced.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     396715
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:25:e2:27:f8:0f:93:45:f2:aa:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=7660f067-691e-405e-baf5-189c9c3e2982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7f:8c:4f:23:ce:52:ad:91:f3:38:9e:ed:a2:
                    de:b2:90:f2:d3:5f:c0:40:be:c6:dc:51:44:56:7a:
                    ea:3b:0d:ac:58:60:47:cc:83:6c:04:7f:2a:56:fe:
                    bc:a9:aa:3c:d1:39:81:0a:de:c0:51:f4:0b:de:e8:
                    6d:ec:52:a8:3b:25:f7:19:91:49:47:73:33:86:57:
                    c2:2b:66:df:eb:3e:43:d8:c5:37:5a:d0:72:73:c4:
                    05:46:83:06:3c:c2:8f:be:8a:85:58:56:e8:59:a3:
                    34:c5:50:1d:92:0f:3b:0d:c1:94:f8:96:9d:08:0f:
                    04:2d:8c:06:69:76:9f:3a:f3:5b:9b:f8:7a:2c:0e:
                    40:e4:ad:e9:04:ff:01:63:9c:35:8e:9c:d1:eb:b8:
                    aa:26:6d:a2:14:68:d4:9d:f6:da:e1:ed:7e:3f:78:
                    15:f4:9c:ed:d1:c3:14:2d:5f:37:00:19:a0:25:5f:
                    f3:5f:8d:f1:9a:50:44:ef:85:03:89:26:a5:c8:7e:
                    c5:a9:3a:28:87:d7:1c:7f:60:c1:ae:2e:35:34:1b:
                    c6:f8:20:1c:30:6e:46:54:9c:bd:8e:ec:a9:21:08:
                    c7:8c:3c:56:15:36:81:96:22:fb:f5:02:9f:4d:27:
                    ef:17:3b:cd:26:2d:c4:aa:3d:d6:2a:54:6f:d3:c2:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EA:26:B7:C9:28:F1:55:8C:28:A7:62:70:AE:EA:84:76:59:D4:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad47d230-8f28-3e38-86e4-42de158b9ced.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f5:4b:82:fe:85:be:52:d0:af:52:fe:6e:87:1e:75:f9:22:
         1b:e7:60:2e:06:f5:77:90:93:2f:11:1a:17:20:90:d6:13:03:
         13:23:c0:53:f6:05:dc:79:b9:9e:5e:9a:82:f0:8c:d9:49:33:
         2d:0c:f4:64:9a:a9:db:92:24:4f:1f:77:0e:60:92:c5:69:9f:
         b1:bf:ee:2e:02:e7:fa:96:89:8e:c6:9a:37:43:e4:80:49:fe:
         a2:57:e9:ec:52:58:ed:95:06:e0:b5:1f:0e:bb:e5:39:14:58:
         1d:c8:34:9b:2e:3e:d1:31:f7:17:f4:39:27:cf:99:10:37:b0:
         24:38:60:cf:82:15:3a:73:02:82:5d:90:e3:2e:ed:1c:c8:8e:
         e4:cd:b0:c6:5c:96:a0:0c:ca:c2:7c:1c:47:8f:df:5b:02:d2:
         53:39:96:32:c6:b0:9a:ac:42:09:8f:21:19:e4:50:85:b5:3f:
         01:f0:33:45:4d:d8:ea:97:d1:48:da:a1:00:3f:d3:23:e6:8a:
         2a:ab:ec:92:73:96:44:fa:e0:2f:77:52:1a:ab:b5:93:89:12:
         df:1f:16:bb:96:f4:63:3d:d3:2c:81:a0:73:4d:b6:6a:2f:79:
         be:e6:5e:22:c3:a4:72:b9:0d:14:02:00:16:99:a1:11:49:a7:
         fa:77:c2:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:42:39 2026 by rpki-client