Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f858c6a3-400e-3218-bf21-f8791cf145d9.roa
File:                     f858c6a3-400e-3218-bf21-f8791cf145d9.roa (raw, json)
Hash identifier:          UE9TE7TAg4m4dems3IhYgPFOckffOeF+6i24wHaK+UA=
Subject key identifier:   22:21:1C:08:C8:11:CB:13:05:FB:65:E3:FD:DA:19:9D:74:75:50:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CDB023AB85F48156F7E3E48C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f858c6a3-400e-3218-bf21-f8791cf145d9.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     20362
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:3a:b8:5f:48:15:6f:7e:3e:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=b4139d4a-70bd-4c11-a790-0673d4fa06ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f5:18:84:a8:7d:ca:c1:f6:7f:dd:87:dd:bb:
                    45:3e:b1:33:4b:8d:ed:4e:4f:3c:57:9f:5f:9e:66:
                    21:0a:df:5f:b9:fb:80:ed:bc:b9:c7:9f:0a:1f:70:
                    a1:3e:0c:77:2a:45:09:71:60:22:9a:f6:fa:de:63:
                    eb:85:a2:8c:b2:be:97:a9:5b:fb:bd:71:5e:0c:7b:
                    5a:04:a8:cc:fe:87:2d:e6:84:86:0e:27:63:75:13:
                    2d:01:dc:1f:af:a2:2a:41:13:6a:3f:81:e2:f4:57:
                    ff:2b:8e:e2:be:de:fc:c0:75:96:ea:78:51:57:48:
                    0d:10:b1:06:4c:83:49:c0:76:37:98:5e:56:7f:a4:
                    0d:33:f0:35:68:80:54:fa:d8:f8:4c:f1:cf:00:e0:
                    f6:e0:75:1b:74:57:a4:49:5b:cd:64:d3:42:d1:4b:
                    ee:54:c2:8a:dc:8e:be:f7:35:d9:68:03:30:a5:96:
                    00:2b:62:b9:8d:ec:78:1e:ce:6d:e2:cc:75:18:4f:
                    2e:ca:27:2c:30:8b:a1:2f:c7:92:c8:b4:16:9a:85:
                    6d:87:48:7f:0c:26:ca:a9:03:fa:23:ad:7d:22:89:
                    93:7b:17:05:7e:fe:fe:87:3e:a8:50:91:82:bb:a7:
                    83:4a:29:8b:cf:53:d7:a8:6e:a1:c5:3b:bc:d1:61:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:21:1C:08:C8:11:CB:13:05:FB:65:E3:FD:DA:19:9D:74:75:50:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f858c6a3-400e-3218-bf21-f8791cf145d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:96:83:09:23:c2:63:da:59:8f:1b:ff:e9:39:59:a4:08:ca:
         44:59:75:f7:30:ed:d3:60:5c:71:0c:c2:01:ed:7c:09:8d:db:
         4b:dd:32:66:66:6a:f0:40:11:b7:a5:91:aa:9c:a9:ce:a7:bc:
         d3:6c:a5:7d:0f:7f:38:1a:9b:98:8b:cc:bc:65:d8:fb:63:e3:
         d6:43:4b:80:cc:14:38:b3:ee:fb:18:e3:2c:0d:c3:1f:db:d0:
         41:23:8c:b5:e8:33:78:6b:e5:d9:3c:21:f3:af:d3:2a:f2:8d:
         6a:92:83:ba:21:89:38:23:a5:d4:3e:40:97:1b:68:82:b9:ff:
         28:36:f0:53:be:96:16:aa:eb:fd:b9:bd:7d:bf:cf:b7:95:86:
         56:65:91:dc:be:b6:87:3a:a3:b8:3f:4e:79:87:43:9b:f8:3f:
         e1:57:35:a6:6e:94:01:8e:ce:32:56:1a:db:3a:c2:0a:14:d7:
         4e:fa:77:c3:ec:d5:bd:0e:d2:59:57:1d:9e:51:2e:6b:d5:60:
         a6:a7:8f:05:d3:cd:13:37:69:9b:fc:7f:db:f1:06:cf:76:5c:
         9d:a0:20:d2:8f:c9:8f:b4:a6:7e:36:c3:65:4f:51:49:ca:49:
         11:8a:aa:d2:5f:9f:f8:25:56:c8:0d:20:e6:a9:6e:0d:27:9d:
         e3:40:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:44 2026 by rpki-client