Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa
File:                     003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa (raw, json)
Hash identifier:          stzW7nQ1c4OXSXj5nVrsuU/HLVUdrCGX8P5CYC+aeKA=
Subject key identifier:   EF:A1:FD:FA:19:44:F5:79:90:4D:BB:CA:AB:2C:58:59:52:72:47:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD99CF2DD2326CF2C453B1800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     211369
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:f2:dd:23:26:cf:2c:45:3b:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=a2a0a229-8a7c-43a6-b26c-b022b06a899e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:dc:22:e7:6b:b7:a2:9c:c6:f7:55:49:11:
                    54:ca:d0:48:e1:15:4d:3f:83:fc:18:53:80:25:4e:
                    3f:24:e3:c3:79:f4:a8:9b:cb:47:89:ac:ce:45:44:
                    de:8f:a0:12:13:fe:63:86:4c:8b:bd:ec:34:4a:d5:
                    ef:56:8d:4f:3d:01:74:f6:86:f9:49:d8:2b:ea:1d:
                    ce:ad:fd:85:c5:d8:09:c6:29:e5:d7:61:dd:a1:00:
                    a8:a9:10:8b:f4:b9:e7:a3:5b:1e:38:48:0b:6a:0c:
                    8e:24:29:67:9f:cd:a4:eb:47:9e:7b:1f:57:ef:46:
                    ad:20:96:6f:19:b7:17:18:bd:ed:81:a5:e0:0e:60:
                    3b:66:2c:45:22:65:0d:ee:55:fe:d3:ba:10:68:36:
                    f4:74:55:84:ad:2a:07:3b:05:2c:0e:de:87:18:17:
                    93:2f:b3:f3:05:76:1f:4a:68:51:dc:c2:89:e2:b5:
                    e3:43:b8:bf:79:85:f1:95:25:1a:80:30:41:78:ae:
                    19:8c:5c:8d:98:ef:4f:63:dd:86:2a:53:fc:ad:b5:
                    26:de:d1:93:53:ab:6b:40:13:61:24:b2:f0:97:86:
                    76:39:e2:1b:14:45:d4:8d:bc:14:5b:7f:16:2e:9c:
                    56:40:f4:c7:b6:e3:1b:fc:f0:35:ec:a2:a0:3b:90:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A1:FD:FA:19:44:F5:79:90:4D:BB:CA:AB:2C:58:59:52:72:47:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/003a2d2d-2b37-3089-967b-ff0a6bc8c88b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f9:56:aa:e5:3a:75:1a:4f:7b:a8:05:d3:da:2f:bc:a5:62:
         6d:db:bc:5f:c1:eb:d9:6d:d4:e8:06:fd:b9:d7:22:11:10:6a:
         22:86:2f:86:4a:c1:df:cd:47:3b:c0:2a:0d:64:a1:91:ba:26:
         b9:4a:79:1d:08:46:9b:b2:70:29:ca:f9:d4:b4:10:74:fe:4b:
         ec:d2:7a:21:8b:48:79:d8:6e:12:de:b3:90:13:f4:fa:f4:6d:
         29:77:18:f9:c1:31:a5:26:36:08:8f:85:81:22:3e:f9:fa:c9:
         ea:94:21:51:dd:63:47:82:e6:36:e5:7e:30:fb:93:70:cb:f6:
         ce:5e:9d:4e:2b:66:bf:dd:30:51:57:af:48:f2:77:a3:41:90:
         6a:a8:8e:35:35:80:0a:f5:7a:27:e0:1c:8e:71:cf:8a:9a:13:
         ad:ca:e7:14:85:db:38:82:0e:8a:a3:e7:0b:72:19:da:d6:c9:
         e9:76:ac:bc:d7:95:ec:30:79:37:ad:07:51:a4:11:62:5b:6d:
         a7:b6:69:e6:f5:2a:2c:59:c4:60:72:a7:10:ac:d5:38:e6:3d:
         1d:1f:af:b3:a6:85:ad:59:f5:46:62:25:f8:42:54:cb:3a:7c:
         53:7b:d6:89:59:67:8f:2b:b9:de:a5:32:92:69:92:4a:07:29:
         9d:bc:d6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:23 2026 by rpki-client