Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28b66672-8838-373e-9da2-e67a3a954c48.roa
File:                     28b66672-8838-373e-9da2-e67a3a954c48.roa (raw, json)
Hash identifier:          qgdfpwnh5G8i83RuN3j4Iy1uDqyfy54J6RoM9BidtLo=
Subject key identifier:   79:8C:4B:31:0E:06:49:E8:BA:87:30:72:23:2F:B0:CB:D9:4A:22:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037CF309C4DF1E914561BD20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28b66672-8838-373e-9da2-e67a3a954c48.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     396564
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:f3:09:c4:df:1e:91:45:61:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=575ca838-5646-4fc9-871d-61501f287d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:00:87:c2:bb:35:7d:3a:1e:17:10:f8:e9:19:
                    c3:70:b2:71:46:13:d8:f8:d2:01:b5:e9:8d:18:41:
                    bd:fd:b4:f3:08:ba:ef:8b:8a:01:d8:3d:76:3a:ce:
                    45:77:03:22:0f:33:42:45:ba:4c:89:a2:1f:36:bf:
                    f2:75:08:37:dc:fe:c1:e8:4c:d7:bb:36:57:a2:fd:
                    71:17:3e:0c:72:7a:79:eb:65:00:23:f2:13:92:c2:
                    20:e0:eb:90:3c:64:2e:f5:38:19:d6:3b:40:f4:a1:
                    0c:04:12:65:33:c6:19:2e:b1:f8:b4:8d:38:fa:01:
                    b2:e0:bb:f7:76:d8:eb:5b:45:54:48:4a:b5:24:37:
                    0b:7b:65:57:3a:00:00:49:f5:b6:8c:04:f9:22:1b:
                    9d:9a:4d:28:ae:36:55:cb:e8:2f:f4:f9:a4:b7:09:
                    3b:c4:62:dc:79:49:47:5e:b0:55:26:d3:f4:97:35:
                    ec:d4:61:48:ea:bf:92:fd:81:7e:44:04:78:12:70:
                    3a:ea:f0:33:97:c1:87:67:dc:c7:c5:0e:e4:d6:34:
                    56:a3:0e:14:cf:5d:a7:5c:ed:6b:7f:af:42:94:6f:
                    a0:74:d6:47:80:f6:bb:78:50:78:45:aa:25:9c:cd:
                    38:5a:bb:1d:29:34:cc:f8:9d:ae:95:e0:ee:fe:ad:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8C:4B:31:0E:06:49:E8:BA:87:30:72:23:2F:B0:CB:D9:4A:22:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28b66672-8838-373e-9da2-e67a3a954c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:64:8c:05:1e:2e:7c:84:22:1b:35:b2:74:ab:2a:f3:9c:83:
         c5:6d:20:f7:63:bf:0a:3e:c5:91:77:c9:c4:26:b7:6b:e1:11:
         69:59:16:d9:3f:d2:af:76:e1:23:15:d9:2b:95:fa:0c:3c:df:
         58:a2:e4:bd:ed:a1:ca:57:c0:42:81:0e:b6:19:e2:23:7e:99:
         a7:15:5d:80:fc:4b:a0:ab:00:e1:b6:36:c0:b6:6b:0b:c5:8b:
         41:1a:cd:01:28:ee:40:05:f1:62:46:18:87:1a:b8:31:53:b6:
         14:e2:97:42:16:95:ff:b5:1f:f5:b8:7b:74:d2:bb:64:df:42:
         5b:cd:b6:1b:bf:89:a5:d0:2b:73:54:86:1b:5d:d3:7e:9a:83:
         06:cc:51:71:18:5c:a6:29:e1:37:ee:2b:a7:52:53:e3:da:ca:
         af:f6:3d:48:f4:aa:d0:6e:05:7a:03:9e:ca:d0:ee:5b:88:1a:
         99:7e:02:84:04:73:80:e5:0f:d0:1b:ba:04:dd:0d:d3:cd:32:
         58:d7:65:57:9c:8f:2f:1a:5f:63:f8:93:59:e4:f5:10:1d:9f:
         6f:83:26:6b:55:8d:5d:98:19:4f:a4:2d:6d:c5:b5:3b:ed:5a:
         01:05:cd:86:7b:44:f2:76:77:3d:cf:42:fa:8d:72:ba:30:39:
         5a:da:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:32:15 2026 by rpki-client