Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e73928a-0a58-3f62-8c1e-3c804511b586.roa
File:                     4e73928a-0a58-3f62-8c1e-3c804511b586.roa (raw, json)
Hash identifier:          ZDmupTZ/Opmcmu+l+GOTXaW7tUafQhoxEQMnCMAXAwM=
Subject key identifier:   AC:2E:02:39:C0:4F:2B:FE:31:A7:38:BB:7A:27:7B:1D:A8:22:60:C5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D00B268414D0CDD88C4D6DB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e73928a-0a58-3f62-8c1e-3c804511b586.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     396590
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:68:41:4d:0c:dd:88:c4:d6:db:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=b0ca882e-c57c-4a7a-9755-34be6631540f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:3c:6d:0f:61:67:e7:21:c5:9f:5b:32:69:
                    14:6d:fc:d6:64:7e:07:9f:6f:bd:55:c4:c8:ed:3b:
                    2e:d4:83:56:b3:4a:fc:4f:13:50:67:19:f9:86:f2:
                    ac:a0:9d:e2:89:46:9e:e3:c7:a1:35:58:87:52:25:
                    ea:62:fc:c0:36:96:ad:ed:b2:8f:14:7c:7c:1e:3d:
                    43:36:6f:00:7f:28:c9:b2:e1:d3:84:8e:c2:d9:be:
                    09:1f:6a:65:50:c1:2c:6d:04:9f:7c:a6:c2:b7:fc:
                    43:d4:96:51:7d:9f:38:3c:b1:34:40:f8:03:40:0d:
                    39:a9:c5:81:0d:95:40:bd:1a:77:99:c0:fa:32:51:
                    be:b1:21:f6:81:a7:34:c4:7e:ef:8f:2d:f5:f8:5d:
                    21:58:f5:8b:92:c5:dd:fe:63:f8:06:9d:5b:5c:92:
                    8a:4a:fb:1e:1f:f8:5a:77:b0:d5:b5:58:04:de:a9:
                    3f:db:27:e1:17:6e:46:bc:95:80:fe:bf:4b:8e:a0:
                    f1:75:37:65:84:56:88:33:7d:0f:87:7c:b3:bd:16:
                    cc:e9:e6:48:32:40:b0:c6:60:38:7f:1d:5c:58:59:
                    b7:cd:85:d1:10:d5:39:9a:d5:04:fc:72:cf:fd:65:
                    77:43:54:d7:f6:77:bb:40:2d:ad:19:63:34:9c:d3:
                    e3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2E:02:39:C0:4F:2B:FE:31:A7:38:BB:7A:27:7B:1D:A8:22:60:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e73928a-0a58-3f62-8c1e-3c804511b586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:f5:ac:85:a3:5e:74:49:dd:99:23:bc:f5:d5:cf:49:5b:
         46:9c:18:ad:c1:4d:69:a2:d4:8c:b9:f0:e7:e8:3b:24:de:6b:
         46:f6:12:90:f7:75:14:c6:58:d6:42:d0:ae:c8:d1:4c:69:a6:
         fb:f4:19:2d:83:cf:dd:c6:4a:fa:e6:f6:5a:d8:18:7d:26:8e:
         74:1b:5e:48:c8:ab:3c:9f:8e:b5:1f:35:fc:1b:a2:7b:f7:a1:
         8a:d5:94:2f:ce:7e:87:80:9c:75:22:58:ba:a1:29:7e:b5:b5:
         ed:2f:46:81:08:30:99:72:50:72:bd:b4:5a:96:b5:9d:6b:54:
         f4:95:9a:1c:6c:d0:56:07:e6:c0:a3:5e:07:bf:0b:e0:72:50:
         44:09:74:73:65:b9:b7:f0:c0:cf:2d:64:e4:16:6b:53:79:14:
         92:64:e9:ac:e8:be:ab:9c:77:11:39:19:51:c3:54:0c:06:a6:
         f0:bd:95:53:f9:f7:20:18:e9:23:8d:cb:0b:16:e9:03:2c:eb:
         de:e3:97:b2:32:35:9d:06:c3:76:05:f7:54:82:ec:18:54:79:
         12:b0:c1:f4:ca:83:fc:6d:e2:d7:0c:4d:83:3d:2f:43:20:87:
         db:9c:f3:6b:09:48:81:2f:46:0b:d9:c2:e8:95:f9:60:4b:ba:
         f4:b9:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:51 2026 by rpki-client