Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a44d09a3-d774-3ba7-a502-a368527df780.roa
File:                     a44d09a3-d774-3ba7-a502-a368527df780.roa (raw, json)
Hash identifier:          98XIP3tnJygVi/vXMvDu+1jmM0Otq8coeUavr2thlkg=
Subject key identifier:   10:F6:29:F3:84:0F:69:62:D0:78:61:8C:24:02:8B:0E:48:3B:33:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFE0B30DDA10461BBACBEDAF0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a44d09a3-d774-3ba7-a502-a368527df780.roa
Signing time:             Thu 26 Feb 2026 15:12:30 +0000
ROA not before:           Thu 26 Feb 2026 15:12:30 +0000
ROA not after:            Wed 27 May 2026 14:12:30 +0000
asID:                     36631
IP address blocks:        2001:503:83eb::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fe:0b:30:dd:a1:04:61:bb:ac:be:da:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 15:12:30 2026 GMT
            Not After : May 27 14:12:30 2026 GMT
        Subject: CN=027d3b93-d002-4442-8ff6-de4a697ab392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:34:9b:12:40:ed:d1:0c:21:be:30:e2:a4:4d:
                    3c:2d:64:7d:2a:4c:71:c1:9e:0b:5a:1b:f2:d5:ce:
                    f0:1b:cd:8a:f6:e8:a4:44:54:3a:7e:fc:56:b7:5a:
                    2c:70:cc:3a:5e:25:61:cd:42:c4:dc:b2:80:1c:39:
                    1c:5d:f5:e1:61:6b:5f:fe:ae:0e:10:3f:bc:0c:9b:
                    31:4b:75:98:76:f5:2b:b3:a9:f4:3e:9c:b5:cd:2f:
                    ba:37:84:de:89:9c:00:c4:de:34:aa:c5:91:05:04:
                    27:4e:d1:36:d6:90:95:c4:84:2a:2c:ee:ef:88:f2:
                    92:ea:83:bd:b9:21:41:cf:b8:9b:fa:f7:5b:93:b3:
                    70:d2:16:15:04:fb:49:24:fe:2f:27:96:7b:ab:62:
                    46:61:77:d6:54:cb:02:10:1e:8b:3a:dc:c6:c5:4b:
                    e6:17:d2:f7:c3:9c:bc:85:d0:cf:88:8c:0e:23:a3:
                    37:b8:13:40:00:93:5e:7a:22:37:2b:4e:5f:3d:b1:
                    07:dc:f5:4b:7a:cd:e5:15:e4:ec:2a:4d:d2:06:1f:
                    99:a8:5d:4d:16:25:08:5f:10:57:3b:fe:f3:87:b2:
                    37:c3:b4:db:de:b7:e8:1f:42:14:d0:54:88:67:7c:
                    e0:85:c6:04:2c:b6:7c:2c:72:62:ec:f7:9c:a9:89:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F6:29:F3:84:0F:69:62:D0:78:61:8C:24:02:8B:0E:48:3B:33:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a44d09a3-d774-3ba7-a502-a368527df780.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:60:2d:73:f6:c4:f3:cd:1f:7f:ec:ab:3b:79:c7:dd:82:ca:
         27:f0:73:cc:dd:e5:e6:41:b4:de:77:74:0e:f5:b0:e2:ac:e2:
         04:69:06:47:cf:58:5a:ce:1b:b7:c4:32:d8:f0:a5:a8:e0:65:
         b3:99:5b:ad:04:d3:0b:62:46:b8:68:eb:05:d5:a1:93:6e:43:
         a4:f9:f3:79:98:83:a8:75:38:2a:bf:a8:e5:2d:34:55:31:2e:
         d5:00:f8:b2:7d:c3:58:07:69:13:f7:c7:ad:29:cb:da:ff:ce:
         8f:aa:42:5e:7a:ea:89:1b:0e:79:e5:cc:a0:78:82:1c:63:8b:
         8c:74:14:d2:f9:3a:5b:a3:db:03:05:38:03:b8:c3:6d:ec:6d:
         fc:7a:00:b1:32:36:2b:bb:c0:a3:c9:8d:06:75:cf:54:f5:cb:
         b8:30:30:08:3b:d5:67:b7:29:ab:c1:41:7f:c1:e6:c8:ad:72:
         02:64:a4:26:72:85:e1:86:dc:0d:56:fd:52:a0:00:f5:76:26:
         39:b8:63:51:c6:15:17:a5:c3:0d:cc:34:10:d0:b9:43:be:2b:
         0d:94:55:42:30:c0:a4:97:84:db:23:b8:4e:8e:11:63:ec:e6:
         28:32:92:46:c5:58:48:fb:bd:d2:b2:79:bc:84:b6:ab:08:3e:
         f0:35:b7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:38:34 2026 by rpki-client