Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04c4fca5-6ad0-33a0-8e2d-0b755453b25d.roa
File:                     04c4fca5-6ad0-33a0-8e2d-0b755453b25d.roa (raw, json)
Hash identifier:          rb/lm7bk+N2GCPYv3Qd1rUkMi6o3g72CV1GKl9loxDQ=
Subject key identifier:   6C:AD:C5:1F:9A:97:E4:C6:77:C1:78:3F:55:E8:21:91:C6:48:1B:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFE0B2EBC4A5B5885FB5E2BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04c4fca5-6ad0-33a0-8e2d-0b755453b25d.roa
Signing time:             Thu 26 Feb 2026 15:12:29 +0000
ROA not before:           Thu 26 Feb 2026 15:12:29 +0000
ROA not after:            Wed 27 May 2026 14:12:29 +0000
asID:                     19836
IP address blocks:        2001:503:83eb::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:0b:2e:bc:4a:5b:58:85:fb:5e:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 15:12:29 2026 GMT
            Not After : May 27 14:12:29 2026 GMT
        Subject: CN=a7ca1a41-8ed0-4f57-90be-22b195fe938a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:7a:02:00:dc:02:60:07:6a:a2:66:5c:fe:
                    72:cb:ac:4a:63:dc:15:6f:60:f6:de:b1:da:78:34:
                    85:27:7e:7e:e7:d2:e7:cc:d1:ea:a3:ca:36:e2:e9:
                    ca:2c:cb:4c:0a:76:13:5d:bf:68:cb:6d:27:5e:14:
                    63:c5:be:43:b4:2f:54:ae:98:8b:d4:ff:44:bf:db:
                    ec:9d:2f:b9:dc:0a:a8:c8:5f:e6:5c:1d:1f:86:c2:
                    49:b9:40:43:8a:87:dd:92:99:b0:f9:77:f2:5d:0e:
                    69:d8:07:28:55:ad:fc:66:9a:79:22:51:c3:72:6a:
                    fd:f6:8e:95:9f:ed:03:87:90:21:bb:09:c9:15:eb:
                    e6:42:1b:e2:9b:e6:1c:01:97:0c:d3:66:46:04:4f:
                    88:a0:6f:d7:49:ac:eb:51:6f:09:0a:ee:1e:1d:ee:
                    44:f1:31:86:6b:8c:b8:88:1f:c5:7a:0f:74:ea:2f:
                    d6:ac:2b:37:ff:0a:c8:48:b8:f5:f9:99:e5:1d:d8:
                    e0:04:1a:e5:d9:8f:42:0d:63:e2:43:3a:df:e0:32:
                    75:c1:ae:83:ef:55:ba:9d:45:5b:22:14:90:07:67:
                    c3:5c:60:1c:27:a6:e6:b4:5f:3c:35:f6:66:86:60:
                    1b:0f:71:67:ca:16:df:19:dc:b2:96:d1:54:7a:11:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AD:C5:1F:9A:97:E4:C6:77:C1:78:3F:55:E8:21:91:C6:48:1B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04c4fca5-6ad0-33a0-8e2d-0b755453b25d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:0d:f8:d4:c7:9f:b3:c5:ab:42:b9:47:85:07:5d:63:c4:
         87:28:27:04:05:e5:15:ef:9e:1f:ce:da:d0:e4:e1:46:a1:fe:
         82:9b:cf:f5:b5:22:4f:13:43:4f:49:ed:11:60:4d:00:b5:e4:
         51:96:d2:9d:dc:a3:72:69:f6:32:42:fb:4e:59:54:fc:e0:0d:
         9e:3e:5c:b7:d5:5c:15:7a:2c:27:bc:54:f3:3e:45:0b:36:03:
         da:e8:75:2a:f7:94:d3:d8:19:11:47:e0:c9:f1:e7:f6:84:c6:
         ef:67:c4:59:2d:8b:34:5e:6c:13:7f:fa:f8:12:41:60:6d:13:
         0c:e4:8e:fa:6c:2b:be:3e:64:77:25:7a:a4:f2:ae:85:7c:85:
         b0:eb:64:c4:fd:d7:77:5b:b1:a4:8a:a1:9a:90:3f:1a:9d:9a:
         29:df:fc:df:25:e5:1d:57:28:cb:b8:46:8b:66:ab:56:0e:23:
         00:fc:10:a0:09:59:ac:3f:61:d1:37:9a:01:79:bb:05:5a:fa:
         a9:ba:56:45:f8:87:2e:69:6d:08:28:e2:de:a7:01:ca:9b:18:
         1e:dc:cd:11:95:bf:d1:76:4e:f0:1e:04:ec:66:05:15:6f:ff:
         ab:00:be:02:a4:0c:b1:87:15:e8:52:29:4b:e3:fd:d9:68:ed:
         23:cd:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:20 2026 by rpki-client