Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50c9f27e-ea73-3c7b-9147-7d1b44629688.roa
File:                     50c9f27e-ea73-3c7b-9147-7d1b44629688.roa (raw, json)
Hash identifier:          6Omnvr0DgmFvae4wwdqaV35YvLxLCPlPvIvLavbGHnc=
Subject key identifier:   BF:A2:9B:C4:BB:51:1C:39:C7:F5:54:E1:49:47:4D:14:DD:CF:D5:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD99CF7032392FB538D180080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50c9f27e-ea73-3c7b-9147-7d1b44629688.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     396610
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:f7:03:23:92:fb:53:8d:18:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=57b7ee27-5995-47ef-8d9b-224fad8d43c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:cb:6d:68:ec:33:e1:7a:67:1f:69:27:c6:
                    6b:a6:d7:50:0e:9f:45:6f:4a:6f:fa:ea:cb:bf:d5:
                    d2:79:cc:02:30:6f:eb:6f:d6:0c:de:04:a9:58:68:
                    ae:6a:34:85:cf:9c:c6:27:66:61:43:9e:11:02:f7:
                    03:25:2b:c4:c7:11:8f:06:b1:e7:b3:db:fc:80:d1:
                    65:40:a1:3b:61:86:ba:96:cb:4e:ed:8e:79:23:94:
                    17:e0:f3:ea:bc:67:1d:90:43:ea:b6:81:ea:14:ca:
                    83:b7:47:f3:9f:74:3a:21:6a:22:94:2b:1a:cd:a6:
                    99:39:bf:db:de:4a:1e:c1:54:c4:09:ec:65:a0:da:
                    25:ad:2d:4e:fd:0c:89:e3:b0:1c:65:27:b4:ba:7c:
                    b4:f3:39:c3:40:9a:e2:9f:73:97:fd:a9:3b:35:4b:
                    ea:8f:d5:10:42:3b:01:e7:c2:b8:04:69:ff:31:33:
                    47:2e:77:61:fd:6c:3b:a1:ce:53:db:99:9f:ba:61:
                    2c:e9:d9:df:96:a3:4e:a4:14:c8:f9:a4:dc:33:17:
                    39:90:a6:d2:3e:00:e8:c7:33:fd:eb:2c:86:b1:03:
                    b8:f0:92:f7:94:f4:cd:e5:15:5b:26:82:29:3a:81:
                    65:8e:e3:ec:28:90:a7:27:85:52:3a:c9:2d:af:0a:
                    82:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A2:9B:C4:BB:51:1C:39:C7:F5:54:E1:49:47:4D:14:DD:CF:D5:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50c9f27e-ea73-3c7b-9147-7d1b44629688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:fe:6e:42:42:51:6d:1e:f1:d5:a1:e7:be:29:82:85:42:1a:
         be:9c:06:6d:37:33:76:9f:d2:eb:24:2b:d9:9c:8b:9e:9c:06:
         7c:4b:2d:9a:9d:97:c3:67:89:bd:dc:e9:fd:16:86:08:77:44:
         54:12:33:0d:58:65:87:86:ed:e8:01:70:9a:4a:de:15:4b:2d:
         0e:cf:9a:56:29:a6:a9:7f:9e:3b:e2:2c:5d:27:ca:1a:26:26:
         77:84:b8:1a:ff:a0:d2:88:c4:16:f6:1a:5e:ff:14:d9:ae:e8:
         35:5b:07:ec:9c:fc:b0:78:e7:2d:c3:b7:4d:93:0d:b2:87:b2:
         54:02:3f:e8:02:68:5e:39:9f:7f:f1:b4:72:45:11:ff:4c:23:
         ef:ee:93:90:da:41:c8:e4:50:7c:2b:1c:02:9e:c3:02:ff:35:
         0a:2d:74:8c:02:50:0c:8b:a8:41:ca:23:8d:70:ec:58:21:ed:
         e4:2a:a5:de:bf:ea:3a:f8:aa:ee:88:bf:2b:51:9e:55:8f:40:
         7a:0b:dc:23:8b:12:2e:07:b8:48:7f:70:32:bc:0a:ed:98:94:
         41:8b:ae:b2:a9:8d:a2:05:ea:03:e3:1e:a1:2c:aa:08:d3:f9:
         56:68:31:be:4a:cd:bc:68:1d:c2:50:95:d7:a7:e2:42:ac:3d:
         5f:8d:76:45
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzZnPcDI5L7U40YAIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk
NTdiN2VlMjctNTk5NS00N2VmLThkOWItMjI0ZmFkOGQ0M2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSnLbWjsM+F6Zx9pJ8ZrptdQDp9Fb0pv+urL
v9XSecwCMG/rb9YM3gSpWGiuajSFz5zGJ2ZhQ54RAvcDJSvExxGPBrHns9v8gNFl
QKE7YYa6lstO7Y55I5QX4PPqvGcdkEPqtoHqFMqDt0fzn3Q6IWoilCsazaaZOb/b
3koewVTECexloNolrS1O/QyJ47AcZSe0uny08znDQJrin3OX/ak7NUvqj9UQQjsB
58K4BGn/MTNHLndh/Ww7oc5T25mfumEs6dnflqNOpBTI+aTcMxc5kKbSPgDoxzP9
6yyGsQO48JL3lPTN5RVbJoIpOoFljuPsKJCnJ4VSOsktrwqCzQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL+im8S7URw5x/VU4UlHTRTdz9XKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTBjOWYyN2UtZWE3My0z
YzdiLTkxNDctN2QxYjQ0NjI5Njg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAr+bkJCUW0e8dWh574pgoVCGr6cBm03M3af0uskK9mci56cBnxL
LZqdl8Nnib3c6f0Whgh3RFQSMw1YZYeG7egBcJpK3hVLLQ7PmlYppql/njviLF0n
yhomJneEuBr/oNKIxBb2Gl7/FNmu6DVbB+yc/LB45y3Dt02TDbKHslQCP+gCaF45
n3/xtHJFEf9MI+/uk5DaQcjkUHwrHAKewwL/NQotdIwCUAyLqEHKI41w7Fgh7eQq
pd6/6jr4qu6IvytRnlWPQHoL3COLEi4HuEh/cDK8Cu2YlEGLrrKpjaIF6gPjHqEs
qgjT+VZoMb5KzbxoHcJQlden4kKsPV+NdkU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:10:01 2026 by rpki-client