Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b1b3462-d768-3936-8f5a-1e27257305cb.roa
File:                     4b1b3462-d768-3936-8f5a-1e27257305cb.roa (raw, json)
Hash identifier:          brpI1DqQYToLYruPdN1Inlw8FqF71DYvZM3CRb/r754=
Subject key identifier:   C9:01:24:C5:87:CC:74:CC:F9:DF:13:CD:48:21:E1:92:19:B0:D4:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CDB023942E2AF5081F76D4500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b1b3462-d768-3936-8f5a-1e27257305cb.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     396541
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:39:42:e2:af:50:81:f7:6d:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=1e178b99-0a5d-4ada-9c3c-b918e8eca8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:cd:81:35:9b:30:c0:3d:12:c3:cd:27:fc:
                    75:a1:ee:eb:9f:04:48:bb:fc:a3:b1:e2:9b:97:1c:
                    7e:e8:75:d8:de:a5:51:63:1b:2f:af:57:fa:23:3b:
                    64:34:4a:d7:1d:4a:6c:98:6f:88:89:d7:d8:2e:a1:
                    b4:55:0e:0a:6a:88:c2:50:cf:e0:42:05:58:69:bc:
                    85:6f:b4:ae:79:14:73:34:a5:bf:39:61:b2:d1:3c:
                    cd:46:f3:73:c1:67:ec:9c:ca:3f:f9:01:4b:5a:0d:
                    54:13:b6:57:53:87:32:cc:40:9a:81:79:5d:09:8a:
                    43:1a:bc:92:cf:27:24:f9:48:df:d0:d9:27:87:3b:
                    d8:ca:5f:74:21:fb:1a:35:b5:d1:82:bc:b8:f4:68:
                    0e:8f:3a:c9:dd:89:91:84:dc:62:f4:16:1e:82:6e:
                    08:c5:71:07:3e:a7:92:cf:5f:44:7e:3b:5d:2a:40:
                    5c:8f:e7:53:87:79:a3:31:13:02:a9:44:51:74:2d:
                    bc:53:48:82:0c:40:5e:be:70:36:18:af:86:d2:97:
                    ab:c0:44:a4:e5:96:3f:80:95:9e:8a:a5:65:f4:04:
                    94:e3:0f:32:4f:10:b7:6c:ce:60:77:87:ff:0e:a0:
                    8b:89:97:2a:0a:e4:02:57:66:6d:5e:34:76:12:ba:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:01:24:C5:87:CC:74:CC:F9:DF:13:CD:48:21:E1:92:19:B0:D4:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b1b3462-d768-3936-8f5a-1e27257305cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:86:12:86:c7:5b:da:98:51:92:84:11:45:bb:05:ae:c2:4b:
         fc:79:87:f0:9a:91:4c:d6:f8:6a:b7:85:cb:d2:09:ed:71:6f:
         18:92:25:2c:b1:6f:ba:25:f3:b6:ad:99:b1:3f:23:5c:4a:c4:
         05:7e:8c:30:e4:f0:51:6a:9f:6b:a9:9a:9f:da:6e:1b:3c:0e:
         95:e9:f1:02:13:6e:e2:c5:c1:72:91:17:78:ef:9b:33:a2:50:
         99:0b:fe:8c:e5:8d:95:03:38:2a:a3:d1:ce:da:12:75:30:32:
         ff:3b:45:0b:76:1d:7a:69:1b:0b:fe:36:1f:33:35:65:b4:b0:
         40:88:ea:fe:b3:45:ed:a5:7f:68:22:29:98:d4:e0:09:db:7a:
         94:d0:6d:ca:78:9d:bc:4f:13:72:16:26:d9:b9:ad:ab:8a:bf:
         ee:a7:63:39:be:33:e7:06:ca:eb:49:4a:27:23:70:48:41:3d:
         ba:b6:f4:b7:e1:97:4d:b7:6a:d0:fe:8b:63:58:64:e7:0e:d5:
         69:c1:4b:1a:45:e8:fa:d7:b7:0d:ab:97:75:89:15:e2:1b:c9:
         fe:56:9f:dd:f8:1e:7c:fb:e1:b5:83:52:18:00:a7:0c:39:8e:
         de:d4:3e:18:80:be:88:c7:08:37:bc:2e:7d:e3:75:5c:04:a3:
         cc:58:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:46 2026 by rpki-client