Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf68daea-eec6-3e02-9e5e-793ec22db812.roa
File:                     cf68daea-eec6-3e02-9e5e-793ec22db812.roa (raw, json)
Hash identifier:          X5MxfpXkKbLrnrTTaoLxLrcxisK1Foa9et77M7PedS8=
Subject key identifier:   C6:38:34:D2:08:1A:6D:07:A9:19:A1:BB:DB:5E:E4:3F:0A:41:49:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFDE7A8A73736326D9FC03100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf68daea-eec6-3e02-9e5e-793ec22db812.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     396599
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:a8:a7:37:36:32:6d:9f:c0:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=ca2ba316-dc1f-406c-be67-c524f0cbbf9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9a:18:9c:b0:56:03:af:08:62:61:ed:0d:5d:
                    e7:b6:95:91:9a:54:50:de:4a:6b:f6:cb:0d:f9:8d:
                    19:48:33:43:89:b5:77:6a:15:d3:71:a7:dd:9f:2e:
                    5d:7b:4f:9b:57:75:7d:1e:a1:f2:37:21:35:83:73:
                    eb:b6:d0:07:65:71:29:64:15:14:0e:ba:c9:05:c6:
                    ee:e2:85:8c:47:15:1c:a3:65:df:86:39:b7:45:3a:
                    04:2f:d4:63:da:7f:4d:6d:8f:d4:ac:3d:90:ba:a2:
                    dc:9a:4b:45:4f:95:04:a2:a7:a2:3b:f3:0d:ef:9f:
                    21:2d:d2:64:b3:8a:9c:49:aa:f8:7e:58:b2:6d:2f:
                    b0:30:16:0d:b9:31:12:6e:0f:c3:2b:b1:c6:f6:3a:
                    fc:e1:0b:6a:83:1b:71:ff:44:d4:d5:9a:d4:06:ea:
                    a0:3b:7d:af:59:bd:d3:3d:00:34:c5:8c:7b:0d:c6:
                    16:e5:4a:b2:e6:2f:63:98:ff:e4:35:1c:2c:5b:58:
                    89:16:a3:e6:fa:e7:cc:6c:a8:77:ee:7a:9b:cf:f3:
                    90:ed:9b:ee:6c:45:97:00:d7:fd:8c:0f:48:a1:e9:
                    46:92:33:26:db:f1:2e:ce:f4:f9:43:b6:55:28:34:
                    04:e7:82:6e:e1:67:c2:8a:42:38:8e:41:f6:64:d0:
                    b4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:38:34:D2:08:1A:6D:07:A9:19:A1:BB:DB:5E:E4:3F:0A:41:49:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf68daea-eec6-3e02-9e5e-793ec22db812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b3:c3:a0:c4:cb:c1:06:da:66:92:ee:2e:d8:2f:a8:5f:92:
         7a:c6:c8:92:e0:bc:5a:ae:8b:8b:0b:ca:70:a2:e2:f4:fc:aa:
         5e:0d:6b:0d:a0:dc:29:53:08:7b:5b:41:b6:a5:a7:69:4f:61:
         b8:22:62:26:da:5a:47:44:77:8e:12:6f:72:1c:ed:ab:0c:f4:
         9d:1b:63:dc:c1:e4:5e:11:56:96:4e:2d:6b:83:97:82:3b:e5:
         c3:2a:ac:81:af:85:55:a6:3e:a0:e4:58:3a:3c:a2:88:12:d2:
         91:13:20:df:32:59:43:49:98:f2:cc:fb:90:28:d9:4f:b9:d6:
         c7:61:ba:12:1d:dc:d6:7e:f2:87:bd:36:08:24:e4:c5:68:6d:
         95:88:a6:8d:67:67:3c:c4:6c:ea:f5:76:73:e7:4f:02:fe:9e:
         e2:0d:bb:ce:df:60:ec:12:1d:08:76:0d:fd:6a:28:0b:a8:60:
         ff:52:d5:d7:9f:46:7a:88:f0:1d:ea:de:0a:cf:fc:e3:7e:08:
         43:22:7b:92:66:4f:01:57:31:b7:c9:eb:f5:a7:42:f7:36:2a:
         57:82:3e:76:f6:28:00:79:fd:41:c4:e1:91:35:d4:36:53:88:
         eb:17:d4:82:cb:33:c7:ae:cb:6a:41:49:5f:4f:95:43:06:30:
         d7:dc:e3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:16 2026 by rpki-client