Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3b61047-7a4c-3f43-a226-9616e0143903.roa
File:                     f3b61047-7a4c-3f43-a226-9616e0143903.roa (raw, json)
Hash identifier:          /xqkQwRnXpSfmSwzUiCPaZbis2u12b7UOe0yGdlBaGQ=
Subject key identifier:   0D:EB:68:4E:B1:DE:F7:7B:F9:12:1E:68:9C:15:47:9D:7C:F8:A6:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24E1244F98D12AECBD133B40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3b61047-7a4c-3f43-a226-9616e0143903.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     36620
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:e1:24:4f:98:d1:2a:ec:bd:13:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=bea9ba78-af69-49c5-93bf-043c0140023a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:86:5e:44:33:65:5f:5e:f2:b9:3c:ca:69:25:
                    3f:a7:a9:b7:74:77:87:4b:d5:bf:d4:7a:a1:c8:77:
                    9a:7c:e6:1e:db:99:38:34:07:52:c2:20:31:1f:7d:
                    5a:09:62:5b:9d:af:ae:22:d9:2a:12:07:0b:e6:df:
                    58:7a:f1:0b:fd:b2:ee:77:5c:b5:5f:29:7a:39:ce:
                    a0:23:c1:bf:09:54:d7:7d:f5:23:05:00:df:b2:a5:
                    a0:3a:b4:8c:e9:25:71:79:fb:11:2d:7b:1d:89:ef:
                    37:c1:0c:03:cd:b9:fc:95:b3:e3:53:c5:c4:00:11:
                    40:3c:43:13:c4:5b:44:76:cb:2e:08:80:ff:83:3c:
                    62:9d:c9:ef:4a:32:ad:52:7e:f8:72:20:91:ec:70:
                    0d:d7:5e:e1:02:40:d6:07:9f:d9:24:a5:d9:23:10:
                    aa:7a:16:62:dc:55:f6:28:87:42:8c:69:d3:c3:65:
                    22:77:a0:5a:21:89:90:5d:73:41:cd:e8:a0:14:5a:
                    4d:61:94:14:c0:d9:05:16:55:54:7a:f5:01:02:f0:
                    fe:6c:c2:65:2c:84:f7:04:54:dc:e2:02:9b:f7:6d:
                    93:e4:e6:46:9c:65:99:15:42:c4:66:07:d0:c9:5d:
                    d2:ff:e9:c9:0f:b1:4a:16:46:44:97:4a:30:c0:c6:
                    d0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:EB:68:4E:B1:DE:F7:7B:F9:12:1E:68:9C:15:47:9D:7C:F8:A6:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f3b61047-7a4c-3f43-a226-9616e0143903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:83:74:7f:73:c9:a7:00:49:6c:fc:c3:9a:d1:3b:4c:34:
         c5:03:6b:2f:19:86:d9:0f:3f:c0:cb:89:9b:7e:7d:80:e8:ce:
         6b:8e:a0:98:3b:bf:fb:63:4b:d1:eb:7d:3b:4d:15:35:17:cd:
         d8:11:88:3d:f4:a4:41:09:fd:c5:2d:6b:70:6b:39:ca:4e:01:
         e9:c9:3a:d8:ab:e4:79:1f:a1:82:26:ee:af:63:d1:e2:bb:eb:
         72:db:db:3a:71:0c:ea:18:72:b2:31:90:98:5f:bc:74:7a:4f:
         72:9b:c9:1c:6b:c3:df:c2:f8:e1:dc:5f:10:94:f4:f8:77:49:
         2e:b5:39:7f:70:48:be:15:82:b2:6f:33:c5:fd:a1:2d:b8:72:
         ef:0f:8e:5a:61:28:4f:ec:da:c7:f2:ed:dd:36:af:93:8e:1a:
         81:33:cf:af:28:ca:94:b8:cf:fe:4c:71:87:15:f1:0b:a3:f3:
         49:7c:58:a8:ec:1b:0f:38:dd:e7:4d:c2:17:0e:96:c2:8f:bc:
         72:d1:60:62:d2:ff:49:6f:aa:f8:ef:a5:57:02:ea:d9:fa:96:
         ab:b5:b3:3d:08:8c:20:c7:d4:4c:0f:10:55:33:a8:a3:c2:69:
         80:a7:fa:25:b6:39:58:e7:14:61:f4:dd:54:51:23:96:6c:d7:
         80:c7:69:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:29:22 2026 by rpki-client