Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b4301a-35ba-340f-ae0e-807e4b3822f6.roa
File:                     57b4301a-35ba-340f-ae0e-807e4b3822f6.roa (raw, json)
Hash identifier:          EVttpvT5AUhcIaeZzXBcyJ0tbCVRndPvPMRN1T0Jtgs=
Subject key identifier:   DC:41:BD:CA:F3:65:4E:2B:72:29:66:48:7D:EF:0F:E7:4F:E2:C7:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D037CF8FEBED86960CA76B000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b4301a-35ba-340f-ae0e-807e4b3822f6.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     396571
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7c:f8:fe:be:d8:69:60:ca:76:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=753a281a-4c61-4a35-a549-dede5c1a4507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f1:f2:3c:80:38:5f:b6:6d:5d:48:07:6e:a1:
                    31:4a:69:8c:2b:10:dc:e1:37:6e:66:93:2d:6a:aa:
                    54:7b:0a:c5:5f:91:86:84:65:06:d0:cf:ed:c5:9d:
                    9c:7c:4d:e4:77:21:b6:78:81:e1:39:ec:0c:1f:ef:
                    21:81:62:8d:a9:90:33:6b:44:0c:46:c6:16:de:5f:
                    3d:de:7b:c0:e2:0e:3f:8b:32:f2:c3:01:29:e4:8e:
                    dc:67:72:78:00:5e:84:ff:aa:f0:0b:c8:74:a1:ea:
                    c4:c8:1a:21:a1:92:b6:d9:76:b6:5e:9d:6e:0f:59:
                    08:e5:ea:7c:a9:37:5e:99:e9:ed:ef:49:c0:d9:52:
                    26:9b:d3:1d:02:c8:b1:2f:c1:aa:46:38:01:0f:39:
                    59:15:51:a2:38:bb:da:2a:16:09:fb:66:8d:ab:7d:
                    b5:32:9c:4e:98:5c:6d:28:d1:e8:4c:46:fb:d0:3e:
                    b3:fd:cc:d8:02:d1:8b:8c:a7:a0:3f:50:4b:73:10:
                    fd:aa:53:5a:2b:4d:93:67:46:b2:40:75:55:cc:45:
                    b8:2e:1a:7a:04:83:cd:43:28:bb:bc:f6:4e:f2:ba:
                    e0:f1:ca:5c:36:f8:61:91:79:9b:3d:f0:41:e9:ce:
                    de:23:4c:b4:6a:6c:a9:66:9f:37:77:c1:a0:37:6f:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:41:BD:CA:F3:65:4E:2B:72:29:66:48:7D:EF:0F:E7:4F:E2:C7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/57b4301a-35ba-340f-ae0e-807e4b3822f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:a8:c2:59:e6:d2:79:35:59:8a:ed:4a:b9:2d:71:a7:dc:1d:
         d3:ac:ef:63:79:e8:2e:59:31:34:3f:ec:3f:0c:89:f1:49:fe:
         92:76:9e:c8:af:04:d0:a7:3b:65:33:68:8e:62:3d:68:a7:b6:
         a7:bf:da:79:f3:d2:52:ec:e5:67:22:9e:a9:48:45:df:71:e7:
         dc:fc:a9:f8:50:1f:29:47:ba:fa:30:fa:1f:60:f7:d6:cd:22:
         0a:dc:fb:25:b0:56:f4:bc:d1:ca:60:74:5f:8d:96:67:a2:17:
         bb:04:0a:14:91:a1:a7:b1:5b:d0:f5:8e:d6:9a:da:e2:9f:91:
         c3:ed:81:09:f0:3b:7c:7b:e8:3b:06:ed:11:6a:3f:10:1f:9f:
         d0:97:94:ff:aa:2f:a4:db:7f:7b:64:6c:31:35:5a:e6:68:8b:
         00:d9:88:5d:f5:ff:3e:80:53:67:fc:f6:d5:ee:fc:00:62:d9:
         80:0a:e1:f5:d4:54:8d:34:cc:d0:aa:b8:e9:c5:ad:dc:91:ca:
         42:98:b4:24:2d:b1:83:75:5c:2e:05:ea:d9:54:49:81:34:66:
         13:0e:92:be:75:98:f8:57:01:28:42:2c:0a:8c:30:f4:70:18:
         67:dc:cd:9b:cc:9b:1b:bb:8b:cc:38:29:3a:21:bb:5b:c8:41:
         95:e1:e1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:58:16 2026 by rpki-client