Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19727c37-5e4e-3e49-a607-ef18fc71f2e8.roa
File:                     19727c37-5e4e-3e49-a607-ef18fc71f2e8.roa (raw, json)
Hash identifier:          BvlF08JzzuPFOVR26eRM1BLNri+5W2NZzWLcQdEPSPY=
Subject key identifier:   CF:42:CE:61:FF:64:3E:66:6C:1A:8D:A9:E3:18:E4:F1:2D:C8:93:0A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFE0B36B77559C1204220FA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19727c37-5e4e-3e49-a607-ef18fc71f2e8.roa
Signing time:             Thu 26 Feb 2026 15:12:33 +0000
ROA not before:           Thu 26 Feb 2026 15:12:33 +0000
ROA not after:            Wed 27 May 2026 14:12:33 +0000
asID:                     397197
IP address blocks:        2001:501:8a29::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:0b:36:b7:75:59:c1:20:42:20:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 15:12:33 2026 GMT
            Not After : May 27 14:12:33 2026 GMT
        Subject: CN=524eb82f-c393-44b3-b81f-7bf5999a7d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:89:f8:46:77:59:09:50:7e:50:c9:1d:09:2a:
                    e1:a8:0d:7e:20:84:f8:2b:35:c9:08:73:28:3b:e5:
                    86:f5:ac:c2:e8:19:a0:49:3d:de:d3:ed:4b:57:a4:
                    b2:8b:21:ba:3b:ea:7b:8b:b0:a5:4f:3c:03:6e:43:
                    78:97:8b:03:e2:65:40:39:88:23:ae:7f:e5:8a:d9:
                    95:14:ce:26:ee:ee:69:6b:74:9c:ff:a8:69:fb:f5:
                    e2:74:5c:52:50:50:47:b7:f9:20:5b:ed:b5:35:c6:
                    10:c4:fc:84:52:99:98:6b:e8:1c:4a:60:6c:bb:67:
                    c1:c0:4d:3c:48:40:23:fc:b6:fd:98:65:40:22:01:
                    d2:30:a4:97:13:81:38:5c:8e:a1:12:81:df:0c:84:
                    e7:76:0a:d3:08:dd:4d:16:99:fd:fa:b4:56:bc:1f:
                    a3:f4:40:b4:ef:1d:3b:60:e5:7f:b4:f6:67:57:22:
                    7a:a4:cd:f4:e5:24:26:8a:e4:ae:6b:ea:e5:2a:3f:
                    1e:7b:a1:7f:80:ac:0e:dd:5e:1f:15:50:3e:a0:95:
                    98:9c:21:bc:67:3d:46:c3:0c:9b:8c:82:98:15:66:
                    51:1f:13:b4:76:4f:a7:47:c0:f3:5c:2e:bd:63:0b:
                    7c:a5:d0:bc:6f:95:7f:66:8e:53:e1:79:d9:27:23:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:42:CE:61:FF:64:3E:66:6C:1A:8D:A9:E3:18:E4:F1:2D:C8:93:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/19727c37-5e4e-3e49-a607-ef18fc71f2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:9d:ba:4e:da:ea:ea:4f:81:db:b1:59:88:60:72:e5:c1:c3:
         60:ec:0e:43:c8:36:37:23:4e:8e:3d:00:16:ae:02:57:a2:81:
         14:2b:72:37:c7:2f:8d:4e:5e:81:c4:5b:7a:fd:6a:f0:fa:56:
         21:d2:7a:19:e9:d9:83:3e:f6:67:b6:69:95:11:4f:32:4f:e9:
         c3:23:62:8d:21:ad:3c:cc:cd:56:d1:1c:03:90:40:8a:6b:1f:
         66:e6:a0:f2:a4:47:ec:68:d3:25:98:a6:27:ba:87:c8:95:53:
         15:a1:86:4f:62:1e:af:46:8b:b6:3a:6a:93:d6:5f:88:39:2d:
         b3:fd:cb:c5:eb:26:08:8e:bf:e1:ad:71:67:0b:fb:34:6a:c9:
         6e:43:a4:c2:2c:21:eb:87:46:e5:f1:4a:0b:53:b8:10:73:63:
         0e:c4:e9:ea:95:ae:7f:ab:b6:6c:cf:d2:eb:cf:2f:d2:09:3e:
         a1:99:76:67:24:c6:02:9f:43:1a:2c:60:3d:c6:36:b0:01:13:
         da:a5:57:d7:4a:cc:6a:b0:03:f7:c3:e9:08:f9:94:b5:a7:e7:
         ea:d7:d0:b1:7e:cf:c5:19:5c:f7:e0:3b:aa:a6:e9:2c:f2:e3:
         80:ca:3e:e1:79:7c:d2:6d:49:e6:f1:21:ba:69:08:75:7a:ec:
         07:32:fe:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:30:51 2026 by rpki-client