Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa
File:                     13ccc359-3db6-3e92-90e6-38596962acd9.roa (raw, json)
Hash identifier:          a9UFFkhs9dLxS2k6J5iGBqNqPs5lrSYPKv0v4RtnB+Q=
Subject key identifier:   F0:C1:BA:9F:A7:0E:2A:FD:7A:D2:52:A9:80:50:EC:37:99:10:1C:3B
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584CF2BCE6C854CEA5DC35DBBE30
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     46510
IP address blocks:        2001:504:114::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:e6:c8:54:ce:a5:dc:35:db:be:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=55cda1ba-6648-4c1d-a5a2-940501eb6cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4b:73:5a:35:66:7d:75:ad:d5:fb:c8:58:45:
                    6a:0d:f7:ca:1a:3e:dd:0e:cb:5e:84:e4:b2:6b:10:
                    bd:75:f4:05:19:f9:72:13:28:40:db:32:d6:ed:a4:
                    84:98:e4:71:94:72:dd:5f:93:9e:eb:a6:80:88:2e:
                    a3:b5:cb:d4:d2:bd:2b:c5:76:00:f1:b7:6d:96:f4:
                    a8:c5:dc:a9:32:a4:fc:65:db:09:9e:fe:11:00:bd:
                    81:38:35:f0:21:f8:8f:19:3b:4e:57:c8:5e:58:44:
                    30:28:56:6c:5f:58:03:ad:f5:ac:ab:d2:4c:76:17:
                    7a:94:92:83:26:7e:2c:42:6e:96:1d:c5:2b:b7:67:
                    a3:23:e5:16:0c:63:8c:9b:1d:a0:43:54:70:47:99:
                    d8:9a:3a:33:2c:e7:5a:a7:50:05:00:a0:f8:5f:e2:
                    7b:71:b2:8d:35:a4:b0:02:d5:f1:ea:3e:67:db:2a:
                    5a:4a:5a:22:1f:12:7e:53:8f:94:61:af:e4:bb:81:
                    db:17:3f:1b:f5:8a:df:bf:a8:05:cd:cb:c4:21:84:
                    a7:4b:3a:94:86:ef:bb:28:23:42:de:ec:be:60:e5:
                    97:03:fd:11:b2:08:47:24:40:37:0e:9b:ca:53:82:
                    42:8e:bb:ab:98:4a:b2:e8:7c:2c:95:fd:22:6f:9c:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C1:BA:9F:A7:0E:2A:FD:7A:D2:52:A9:80:50:EC:37:99:10:1C:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/13ccc359-3db6-3e92-90e6-38596962acd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:114::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:61:98:3f:23:0f:a6:3c:98:3f:8f:f9:55:5f:c7:8c:98:db:
         bd:22:e9:d7:66:16:bb:cd:60:23:58:0b:50:53:7e:fe:e7:f0:
         43:ad:ac:f3:71:08:87:38:0d:85:5d:ad:ee:86:f8:72:99:f5:
         2a:c6:04:7d:98:ce:2c:7f:32:46:d4:34:fb:69:1e:c9:84:60:
         a0:9f:51:4e:2e:63:dc:ae:bb:6b:6b:1d:94:8e:9b:4b:43:8a:
         6b:d3:ba:62:c2:97:34:97:1a:a9:98:05:6e:28:04:ce:0c:61:
         e7:63:a0:f1:5e:96:4c:54:e9:9d:f1:4b:6e:63:64:83:f9:ef:
         7a:23:68:af:f2:7a:48:aa:e7:26:32:e8:14:5f:db:a0:39:de:
         17:09:bb:9c:ff:cf:e1:aa:60:92:ba:fa:e1:e3:89:f8:c8:2f:
         7b:91:ef:a9:50:0b:d1:94:20:ad:0c:8f:90:26:82:0a:33:13:
         83:1f:57:bd:3b:65:4a:66:9b:a5:97:8d:2a:07:c7:fc:a6:e2:
         98:00:28:da:25:95:d6:37:73:85:54:5b:e6:75:0e:72:3f:b0:
         90:3d:51:1f:53:57:71:98:1c:86:77:17:32:94:17:d7:a4:b6:
         96:3a:fd:11:79:6c:63:c2:2b:51:cf:6c:5e:42:24:bb:fc:6d:
         f4:8a:98:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:37:44 2026 by rpki-client