Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b13a1d01-3c71-35fd-9c43-1488f5ff46d8.roa
File:                     b13a1d01-3c71-35fd-9c43-1488f5ff46d8.roa (raw, json)
Hash identifier:          NbPidnpTLz35Tu70CQREQuoIdzJ726s4j6w7rc+Xfnc=
Subject key identifier:   06:B1:19:B3:B7:52:E4:62:50:57:03:64:3D:30:6C:E4:6F:9D:4D:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD99CF80F727ED6C33E760840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b13a1d01-3c71-35fd-9c43-1488f5ff46d8.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     396564
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:f8:0f:72:7e:d6:c3:3e:76:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=34aa52e4-e907-4918-aa67-dc6380c0910b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:75:88:86:c1:c2:66:f1:45:77:66:ef:7e:
                    04:53:0a:30:65:a9:aa:53:b3:cd:c7:41:64:fa:33:
                    73:6f:f3:1e:7a:93:48:5d:07:6e:84:24:5b:d8:a5:
                    c3:65:36:91:a1:57:67:aa:da:50:fa:ed:72:a9:d7:
                    f1:76:63:08:5d:be:4c:de:49:40:65:9e:f0:7f:51:
                    82:82:26:8e:10:93:3a:fa:e8:5f:be:c8:95:f8:88:
                    e1:5d:7c:17:3f:f6:dd:f8:1f:c5:c9:33:7c:f0:bb:
                    cd:1c:17:86:86:eb:d7:40:fa:6b:18:7b:cb:f8:a2:
                    e4:74:cf:33:bd:93:56:32:94:30:20:02:7a:d0:be:
                    e1:6c:ea:32:9c:ff:65:64:5c:31:aa:21:b0:b2:dd:
                    aa:53:61:71:62:81:a0:49:6f:40:ad:04:49:ee:ec:
                    0b:2c:ad:79:b7:21:3b:00:e2:3b:83:09:dd:c1:b5:
                    86:3c:78:b2:5d:88:b1:3f:77:51:17:d8:73:14:b5:
                    34:33:66:37:3b:73:7a:eb:52:e3:fe:0b:a5:7c:2c:
                    bf:43:92:e0:d7:ca:f3:1e:56:40:4c:2e:20:c8:2b:
                    99:bf:ad:17:cb:65:be:5f:a0:be:07:59:17:33:40:
                    d6:08:a5:37:27:eb:3d:7a:6f:a7:eb:ab:55:f4:32:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B1:19:B3:B7:52:E4:62:50:57:03:64:3D:30:6C:E4:6F:9D:4D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b13a1d01-3c71-35fd-9c43-1488f5ff46d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0e:26:00:59:fe:58:bd:5a:f0:c6:dc:37:0b:d5:57:fe:23:
         90:8a:5b:a9:e4:b7:e7:58:c7:83:42:b4:2f:1d:55:33:20:4f:
         f9:40:d9:f3:d8:62:75:53:2d:b3:bd:91:8b:26:e2:15:81:a8:
         00:33:50:45:7e:73:62:60:bc:d6:f8:c7:a6:23:b7:63:92:66:
         68:ba:84:89:67:2e:c3:37:92:87:09:88:24:4e:c8:db:3c:b4:
         73:6d:2c:0d:55:5c:ea:18:07:d1:34:d8:a8:7f:c8:76:7a:1b:
         1e:65:bb:2a:96:c9:b2:39:8a:ec:9c:d0:00:22:be:25:7e:56:
         5d:24:08:89:5c:a0:e4:ef:f6:66:2e:71:e1:47:87:1b:f3:37:
         e4:39:ba:d9:05:88:10:3a:5d:46:0f:1d:cf:ef:5c:73:fc:1f:
         4d:4f:46:f8:23:2a:d9:6b:d1:7b:4b:1e:61:07:70:6f:4f:0b:
         69:25:5c:3f:6b:71:73:ec:a3:4c:98:2f:30:38:74:67:7a:fd:
         de:5a:4c:8f:bb:33:3a:f6:06:e0:19:19:de:b6:f9:b1:9d:bc:
         68:99:e5:f9:64:aa:ab:7d:b9:b3:fc:0a:60:3b:a9:a2:2b:f6:
         12:56:4c:fc:59:3c:d5:db:b7:fa:22:9e:64:0f:86:f5:e3:38:
         ea:41:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:46 2026 by rpki-client