Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c808d04-bf9a-3e89-aec1-ac0353ddcf31.roa
File:                     3c808d04-bf9a-3e89-aec1-ac0353ddcf31.roa (raw, json)
Hash identifier:          aJlaLU5L8pIb+i/UekldUG3XAORtryGFYSp6vO0Iuyg=
Subject key identifier:   9D:01:3D:C6:27:A4:A1:5D:8B:07:FF:9D:0A:43:2C:0B:FC:67:A0:B8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584CFDE888DF0DBD1055E240C580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c808d04-bf9a-3e89-aec1-ac0353ddcf31.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     7015
IP address blocks:        2001:559:c3e8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e8:88:df:0d:bd:10:55:e2:40:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=67560228-27e5-41f2-a5e3-fb7ab3d316e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:94:6e:72:9a:6a:f4:fe:3a:b7:fe:3c:e6:cd:
                    ee:42:d0:f7:0c:ba:60:88:3e:37:1a:8b:b2:d3:e5:
                    df:b0:32:ff:a9:3a:44:28:86:bf:90:1f:ca:a0:3b:
                    c3:9c:48:65:50:72:17:b2:5c:55:6e:d6:4e:7a:e4:
                    86:9a:9b:59:2b:8c:7d:8c:08:5c:c7:7e:db:e1:c5:
                    32:35:20:08:93:7c:25:f6:8e:55:e7:e6:b5:4f:42:
                    91:65:7c:fa:da:ca:e2:1c:1c:e9:45:32:0f:c4:82:
                    39:74:b8:ff:85:a8:0c:8e:96:03:88:48:74:9e:2c:
                    e9:c0:4e:87:3a:0d:2f:22:4f:04:92:cd:cc:38:3c:
                    6e:37:27:8e:ff:63:f4:4d:79:d8:3b:8a:43:9f:72:
                    ba:17:d4:da:87:3b:be:d2:2c:6b:19:29:79:b8:77:
                    0d:52:4e:89:59:cc:b6:9d:fc:d8:98:d7:6f:98:40:
                    23:d2:49:ba:db:6d:dc:3e:3a:fc:f2:d8:7d:b0:e6:
                    d3:20:10:61:85:41:17:e3:56:da:52:25:8e:d7:23:
                    eb:55:15:a7:38:23:d9:82:98:57:a1:8e:dd:ba:17:
                    5a:46:0f:74:55:f1:d4:bc:19:44:f3:f8:14:80:33:
                    e5:d3:93:92:e2:56:28:25:65:16:f4:06:64:aa:d0:
                    c5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:01:3D:C6:27:A4:A1:5D:8B:07:FF:9D:0A:43:2C:0B:FC:67:A0:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c808d04-bf9a-3e89-aec1-ac0353ddcf31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:559:c3e8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:a3:84:b7:a1:ea:3e:46:59:8a:30:5b:cb:e1:d4:80:ff:eb:
         fd:c0:91:38:ba:c2:c1:cc:05:6c:f1:47:8a:c6:b4:3b:11:12:
         ec:cd:50:57:bf:16:64:9f:17:af:a9:c1:ea:17:31:e7:b1:11:
         de:5e:3f:75:4b:f5:18:9d:68:3e:72:21:97:ee:c0:5f:84:a2:
         87:83:43:4e:c2:fb:28:ee:f7:33:af:fd:26:81:77:6c:88:77:
         91:17:1c:d1:62:06:04:b6:e5:92:ed:e4:30:e4:a8:66:7d:a5:
         30:20:15:f1:43:bc:ce:0b:ef:af:e2:bc:af:79:f8:ba:3c:cf:
         6b:3f:49:34:1c:d3:4c:f4:2f:b2:f3:74:3f:9e:66:c4:c0:56:
         d2:1d:9e:3d:ae:12:ea:d3:d4:a4:bf:82:a9:e3:3f:26:2c:bb:
         03:28:65:c2:a4:e2:46:51:24:e4:b4:06:8f:16:e9:3a:30:d7:
         fa:36:dd:b0:de:77:02:f1:00:56:14:99:56:2f:88:2a:45:23:
         16:c8:3b:0f:25:73:93:ee:6a:5a:0a:ce:12:50:89:1b:1d:69:
         86:09:3a:c5:6c:55:41:16:fb:41:14:56:36:d5:c1:f0:cd:10:
         58:9e:83:4f:50:1c:98:a4:86:70:bd:bb:50:11:3d:1e:75:be:
         0c:9b:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:32 2026 by rpki-client