Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa
File:                     d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa (raw, json)
Hash identifier:          oYv0Mt4ZlB5Cqk/wGao4i1MDdmZEqr83hd/mQZIcBVo=
Subject key identifier:   EF:1D:F7:A6:AC:80:4A:5E:44:2E:28:02:84:3E:2B:9D:34:F4:15:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CFDE7A5C6795A496096FCEB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa
Signing time:             Thu 26 Feb 2026 14:00:40 +0000
ROA not before:           Thu 26 Feb 2026 14:00:40 +0000
ROA not after:            Wed 27 May 2026 13:00:40 +0000
asID:                     396551
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:fd:e7:a5:c6:79:5a:49:60:96:fc:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 26 14:00:40 2026 GMT
            Not After : May 27 13:00:40 2026 GMT
        Subject: CN=d71cade3-70b4-4e65-a72c-9b723ceb1216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:61:3f:7e:82:4b:3a:12:c5:46:3f:b6:d2:
                    d4:e3:62:db:14:98:0c:7f:af:e1:f0:14:a3:3c:10:
                    d8:c9:78:61:64:3d:da:56:86:3d:e5:ca:2b:b4:e7:
                    20:ac:ed:aa:b6:d9:2e:89:14:57:c8:9e:fd:3d:cb:
                    ec:63:e2:2f:89:da:df:f4:2c:af:8c:cc:43:75:db:
                    0f:95:18:93:28:30:ab:06:3d:1d:37:31:20:42:28:
                    43:41:d8:b8:f6:02:5d:e6:33:4a:b0:8a:90:0e:fe:
                    08:47:a2:97:da:82:13:b9:3b:fe:c3:5c:7a:aa:b3:
                    77:dd:72:b2:49:6a:96:4c:e1:5b:13:ee:62:94:ea:
                    0e:d9:8e:79:1c:88:68:bb:22:ae:7a:db:c6:10:01:
                    69:c4:69:55:1c:0a:4b:1e:aa:44:56:df:48:1d:ea:
                    24:46:5c:df:02:2b:af:49:09:da:7c:f3:1c:4e:cd:
                    0a:fb:62:d0:0b:a1:50:6f:4a:da:ba:88:9f:0d:27:
                    83:e8:72:cb:9a:40:dc:44:a7:0e:84:88:0b:45:83:
                    48:1f:5b:ec:e3:7d:95:05:eb:d4:98:5e:31:05:78:
                    b8:aa:74:fa:c3:9a:32:08:0f:16:99:76:89:2c:37:
                    9b:78:58:ee:e6:a6:55:29:50:ea:80:70:51:57:2e:
                    51:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1D:F7:A6:AC:80:4A:5E:44:2E:28:02:84:3E:2B:9D:34:F4:15:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5e18e5a-c6da-3374-83de-cea7c8cc8cdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f1:cc:40:73:04:ce:e7:3a:13:22:26:cd:c2:69:78:61:e1:
         bb:d9:2f:14:55:0c:2c:e1:cf:c4:71:78:8d:dc:f7:a8:83:99:
         f2:15:5e:51:9d:14:b0:9c:ff:87:8e:ec:10:c9:d2:8f:07:c1:
         28:8b:ee:2a:ec:b9:40:2d:c2:43:7c:a4:dc:33:98:be:85:ac:
         6d:66:82:95:8f:93:3b:af:f6:71:eb:07:1d:6d:18:7a:1f:e8:
         54:72:26:1c:0f:54:13:e6:cf:40:6d:3c:08:88:e9:6b:a6:a6:
         df:b7:fb:e0:97:b4:e5:d8:b0:7c:8d:df:08:fe:14:c8:eb:68:
         15:a3:cb:11:6c:d5:5a:96:f5:e4:b9:77:3d:4a:de:93:a4:94:
         47:97:87:64:59:ab:2f:e7:04:e1:cb:c7:69:cb:44:13:e0:e2:
         26:1d:6c:51:48:6b:73:4b:80:50:42:b6:ce:93:a5:0e:8f:3d:
         2c:1f:6f:88:54:29:ee:4d:ec:9a:dd:bb:6a:f3:7a:66:29:90:
         da:db:0d:63:a5:a9:db:a9:a4:74:39:d4:b9:61:a8:80:f8:4e:
         67:f3:13:b4:cb:a6:a2:dd:19:c6:bd:ab:98:24:8d:6f:7c:a5:
         bc:50:74:f9:e6:e3:bb:b3:25:27:11:d2:c6:20:38:70:a4:7c:
         c8:b9:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:54:22 2026 by rpki-client