Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40271ea5-d4dd-3201-ace5-a3e2d0ad2643.roa
File:                     40271ea5-d4dd-3201-ace5-a3e2d0ad2643.roa (raw, json)
Hash identifier:          JeqAkYgjVRfushKij3TYRjozdI+UZufT7dIZLhD6yWg=
Subject key identifier:   87:17:24:50:26:E3:DA:D1:3A:CC:0A:C2:A5:23:41:25:03:88:F2:00
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CED27B88A46C9D9E16C1A9C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40271ea5-d4dd-3201-ace5-a3e2d0ad2643.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     397203
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:b8:8a:46:c9:d9:e1:6c:1a:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=e8374d28-a2aa-4580-9632-710d891ca950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:c7:ef:80:a2:5d:34:2a:6c:e1:b1:dc:52:
                    02:87:9a:b5:8f:54:65:2a:b6:ab:3f:dd:ea:78:b7:
                    71:31:2d:86:ee:86:5e:da:11:f8:98:8f:e4:24:97:
                    b0:03:be:67:80:4a:56:ee:f0:6a:72:02:fb:97:ba:
                    0c:76:e6:37:38:fb:99:bd:cf:25:a8:bb:0a:4a:8e:
                    b4:48:ff:65:95:2d:a4:de:e2:c8:af:2e:78:3e:32:
                    27:d9:26:5d:27:f5:bf:f0:1b:b5:07:83:ac:f0:8d:
                    c5:19:11:d5:b5:56:a9:ef:c6:99:69:98:da:1b:4b:
                    c3:14:3a:e8:9f:af:6c:04:a3:f4:ec:09:5a:29:54:
                    18:1f:c7:29:10:18:c0:a7:02:26:60:b3:6b:0a:0b:
                    c3:14:50:1a:ae:89:1e:b9:f5:f4:41:20:d2:30:0b:
                    a2:fa:3e:e2:13:43:10:e1:d3:95:54:54:d9:2e:e6:
                    1a:5d:0a:ec:12:f7:6c:50:3d:72:d1:c4:20:af:96:
                    3b:5d:02:8c:68:13:79:b2:93:c3:19:24:41:d4:50:
                    2f:95:fa:0b:bd:1d:00:d8:c4:ad:9e:2f:b2:f7:8f:
                    15:4e:0c:e9:89:98:57:89:d1:3b:e4:f1:18:6e:ae:
                    8e:e5:56:d8:2c:0f:a9:bc:0d:75:28:da:37:b0:10:
                    98:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:24:50:26:E3:DA:D1:3A:CC:0A:C2:A5:23:41:25:03:88:F2:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40271ea5-d4dd-3201-ace5-a3e2d0ad2643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:3a:80:2c:d9:45:39:04:dc:a3:c0:b0:1d:08:7e:e0:7e:b3:
         e7:8e:43:43:ce:b8:08:d9:d2:1f:f2:3d:00:e0:5a:bb:0e:f3:
         15:7a:55:00:be:cb:d8:e3:ea:dd:3d:fe:58:5f:a8:27:fb:5d:
         16:c2:7a:c0:a2:c7:2e:3f:d4:f8:0c:6f:36:94:27:a1:26:f3:
         85:2d:4f:5d:9c:1f:51:7d:5e:60:83:7d:9e:a3:61:ae:9b:49:
         27:cc:f1:7c:50:94:5c:b5:0c:41:1b:b9:db:20:44:5a:99:70:
         e3:c7:37:43:2d:35:1b:a3:85:1a:47:18:40:ab:36:bf:f2:76:
         49:9e:de:e3:54:17:d0:fb:45:0c:ad:30:5b:9d:51:22:64:5e:
         93:ea:b5:77:60:d9:b3:1c:a4:e5:c2:9b:c7:36:c5:34:7e:53:
         2c:b5:4c:71:c3:ac:99:be:d0:2c:96:98:6e:fa:5f:aa:56:14:
         9c:ae:c5:c3:0c:b4:31:fb:0b:e1:c7:7d:b8:f9:3b:6b:f0:c3:
         48:b2:cb:91:00:5c:16:1f:1f:e6:f5:aa:56:43:11:22:71:0b:
         ca:d3:00:c2:3f:e0:cd:11:0d:1d:0a:87:9f:33:5e:3a:91:6c:
         11:b4:39:89:2d:25:d4:d2:54:cc:a3:26:41:e8:8c:39:95:32:
         2f:77:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:10 2026 by rpki-client