Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81ca431c-4322-3f56-b170-240d85f3184f.roa
File:                     81ca431c-4322-3f56-b170-240d85f3184f.roa (raw, json)
Hash identifier:          4tNIg9RVIA5Tvu8tL7L14K8TKMAYJk97FDDJoPH6oIk=
Subject key identifier:   B9:F8:C6:39:07:24:61:F4:BF:2A:72:EE:80:AB:E3:9D:6A:7F:4E:65
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD99CD5C5312732604589E620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81ca431c-4322-3f56-b170-240d85f3184f.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     396591
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:d5:c5:31:27:32:60:45:89:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=aa070677-6d99-4681-b184-7b6bb29ca966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cc:51:10:55:98:e8:5e:ad:d7:33:51:4a:f0:
                    c8:aa:e6:08:aa:8f:ca:99:11:66:ca:c8:9c:52:fd:
                    b8:9a:26:71:d1:46:5e:05:c6:2d:e6:1f:27:26:90:
                    d9:81:04:7c:35:ba:b8:27:8c:32:72:47:91:f3:79:
                    40:21:2f:52:87:d0:79:24:46:52:97:96:b9:1c:7a:
                    b4:e6:10:c2:ce:52:4a:ab:a7:58:8c:ba:62:2c:bb:
                    c6:db:45:1e:35:4b:e2:38:c2:72:47:08:ce:db:69:
                    9c:f2:1b:f4:da:c1:44:89:7b:60:bc:99:49:10:47:
                    0a:97:77:95:5a:49:22:fd:03:01:d6:ae:f3:55:4d:
                    c9:cc:f6:cf:aa:6d:84:18:be:58:74:4c:de:33:51:
                    b8:ae:ef:94:40:e6:0a:85:90:77:a4:7f:7a:c0:d5:
                    89:38:1c:d0:d7:2a:3d:81:ee:8a:f6:58:bb:56:f5:
                    f1:4f:ab:18:45:78:60:20:81:a3:f6:c1:62:9e:f2:
                    46:d1:f1:c0:98:46:a7:46:ce:ab:bc:43:fb:86:6d:
                    fb:54:fb:d4:07:b1:76:9a:3f:24:a4:4c:4f:ef:3e:
                    10:76:f5:55:44:60:e2:28:76:58:73:a1:9a:b8:f0:
                    97:ac:28:2c:3c:93:c9:b6:e0:96:54:02:55:82:de:
                    4a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F8:C6:39:07:24:61:F4:BF:2A:72:EE:80:AB:E3:9D:6A:7F:4E:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/81ca431c-4322-3f56-b170-240d85f3184f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:51:bd:e8:db:23:81:d0:6d:3c:ed:21:ef:c0:64:43:db:91:
         5b:e4:dc:62:93:ac:85:74:15:63:df:23:ab:9f:90:7f:dc:7e:
         bd:d8:fe:ed:d9:96:8a:18:90:6f:86:74:f3:f0:e8:e0:b6:af:
         c7:93:bd:66:9a:12:39:5e:51:f3:98:69:4c:38:a9:3f:58:6c:
         5d:25:6a:6b:62:46:89:ab:6c:0a:7e:e6:f4:7b:fb:8d:a6:61:
         a4:b0:fa:ab:df:a1:b7:d7:94:76:ae:69:27:94:f3:36:ed:b9:
         24:c2:02:b1:01:b5:62:52:78:04:5b:d2:10:d8:4a:93:fd:a7:
         6f:5a:dc:cd:7d:cf:a6:20:1e:20:6f:f8:de:f5:31:21:21:8c:
         c2:dd:6a:f5:ac:2c:30:ad:1f:1b:25:43:f3:63:a6:36:17:73:
         1f:b3:42:32:40:0f:3f:ce:ed:f2:16:4a:71:2e:a9:e5:64:58:
         7c:02:b9:f3:f0:8e:3c:02:6e:e9:40:48:b8:52:39:f6:2e:36:
         0b:c8:5b:9a:8a:e0:c2:1d:8d:f6:42:4d:dd:e6:42:6f:13:bb:
         3f:24:9e:4a:34:61:c1:1d:34:6a:84:c9:ae:55:7b:69:d3:50:
         85:08:54:85:be:4a:2d:1d:48:16:17:3a:e1:5b:e8:51:76:17:
         6f:e9:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:48 2026 by rpki-client