Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff21de16-e846-301d-9cdf-53b637b791f3.roa
File:                     ff21de16-e846-301d-9cdf-53b637b791f3.roa (raw, json)
Hash identifier:          GBO4hPShY8fRxrptBXTU97xekb5tkkwmzBxV0IU7cbU=
Subject key identifier:   FA:2A:28:B6:81:EB:FF:73:9A:B5:C4:10:14:32:38:37:D2:4B:D3:B8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D24DF752C64215CF2FCF3A700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff21de16-e846-301d-9cdf-53b637b791f3.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     396591
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:75:2c:64:21:5c:f2:fc:f3:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=5750338f-0074-475e-b9a2-988c76de6f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:05:8f:dd:a4:da:57:ec:cb:dd:33:75:cf:
                    a3:00:c8:8b:5c:81:5a:05:55:56:f5:c1:ee:71:fc:
                    d5:bf:34:24:40:0d:65:88:a2:85:c0:96:97:60:33:
                    6c:db:7f:82:5f:5c:55:20:4e:6e:6a:c2:28:37:12:
                    b7:82:2c:01:e5:ed:9f:f3:5a:40:e2:42:55:c1:a5:
                    01:ea:16:a0:10:d1:e1:d7:61:e5:5e:01:71:21:3a:
                    89:de:99:a1:90:c2:0f:2d:3b:b8:32:27:88:65:d7:
                    37:ac:d7:e4:78:ec:cd:70:c8:0f:a8:d0:49:cf:68:
                    ef:aa:98:38:66:01:d1:8f:28:7d:77:e6:22:8c:32:
                    67:25:12:e6:3d:8c:6d:7c:bb:a3:6a:d4:25:78:f8:
                    e5:23:ee:ce:a5:4b:71:21:1e:2f:f4:f9:08:28:25:
                    63:8f:fa:a1:44:4c:58:fc:6a:28:0d:03:1d:7c:87:
                    71:62:ad:52:c9:1d:61:12:b1:2f:12:9f:5f:e8:6e:
                    c9:eb:f4:4e:d3:7b:a4:70:b8:ef:97:63:db:0b:1e:
                    ba:2a:96:79:94:18:fc:cc:5b:7f:11:12:fb:6d:c1:
                    f4:52:7e:ba:f0:03:8d:0c:cd:2f:be:93:dc:e6:47:
                    6f:a6:3c:7c:ce:d5:85:40:91:be:43:9c:2b:47:77:
                    6d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2A:28:B6:81:EB:FF:73:9A:B5:C4:10:14:32:38:37:D2:4B:D3:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff21de16-e846-301d-9cdf-53b637b791f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:ca:06:ba:6b:37:ee:db:ac:f6:2a:c4:a3:3d:28:61:6b:85:
         33:bf:e2:25:b4:92:b8:10:bc:5c:4e:79:e2:c2:8d:55:7e:05:
         97:5a:26:e1:af:1e:24:78:9e:b6:3e:2e:be:a9:ca:57:b9:65:
         43:10:02:3c:63:83:d5:b7:6d:85:88:48:9c:65:5d:12:8d:67:
         32:bf:2d:19:91:c2:96:74:2e:34:00:cf:42:18:a7:6b:92:a8:
         e4:82:f3:fb:ec:c5:37:6f:9d:73:bc:26:58:ee:0e:b9:99:b9:
         fe:20:fd:4e:2d:1a:de:86:ac:1f:ef:07:a2:59:14:93:f0:cb:
         bf:4f:ed:ff:42:68:0a:98:7f:f9:b4:82:6b:20:ae:5a:c6:ef:
         9b:12:5f:e4:b0:5b:a2:19:13:63:e2:0f:1c:b0:51:9f:37:8a:
         b5:db:97:6e:1d:fe:af:29:17:de:a2:bb:b7:99:15:43:5a:b7:
         6a:2f:a5:a5:5a:eb:e8:9e:37:e0:69:07:af:51:02:28:56:a1:
         63:1e:1b:ca:30:41:5e:5a:f2:1f:6f:d0:f8:09:e0:b5:1b:f7:
         0b:6c:da:bb:a2:24:7a:80:aa:52:09:be:1d:63:a2:e3:c7:26:
         9f:86:fd:2b:bc:4e:96:79:58:b9:29:7c:bf:59:db:ae:23:56:
         5a:24:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:06:08 2026 by rpki-client