Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0427a958-ad62-301f-bcbd-a216bb43ff4f.roa
File:                     0427a958-ad62-301f-bcbd-a216bb43ff4f.roa (raw, json)
Hash identifier:          fchpzaDK1mCNm4sB0sbIE8MFMhiM11Ej2QWcrp/cctw=
Subject key identifier:   77:63:13:AD:87:C7:23:F6:36:52:F8:2C:87:D7:25:1D:A1:5B:9A:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F3CE2B4DC7ED9D375D0717680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0427a958-ad62-301f-bcbd-a216bb43ff4f.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     396611
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:b4:dc:7e:d9:d3:75:d0:71:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=833cbdee-e04f-43be-b16e-364a1de53556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8b:ec:4b:ea:75:91:45:41:19:dc:f9:38:d9:
                    3d:fc:bc:9a:48:7a:4b:6c:da:d6:12:ec:d5:5b:a6:
                    25:6f:74:18:dc:82:46:fe:1f:45:f4:89:ac:3a:c0:
                    1d:52:0d:8c:76:df:f7:78:9e:ca:6d:b8:1e:3c:1a:
                    cb:36:39:46:b3:de:68:ab:a4:db:30:12:51:c0:1b:
                    1a:d7:a8:5b:68:b5:71:11:54:92:64:80:73:07:a0:
                    ba:a2:32:d3:50:68:b9:d5:ab:e5:a9:80:ed:ca:df:
                    82:d6:f2:01:39:80:71:01:eb:92:99:97:95:b8:e8:
                    2d:79:6f:b9:b9:08:9c:22:44:03:d9:53:9a:3b:b6:
                    54:bf:4e:28:94:e9:a3:62:90:24:cb:2a:e1:e9:60:
                    ae:17:cf:20:8e:2f:ab:60:e0:e7:00:2d:e7:e0:b4:
                    d2:d4:96:83:61:1b:bd:fc:42:e3:ec:60:5d:e6:9a:
                    07:25:c2:50:ad:a7:ed:39:2f:68:68:6e:9d:94:56:
                    ae:cf:de:36:21:d0:87:b0:13:f7:25:4d:96:32:6c:
                    ff:72:28:34:e0:b6:d3:62:a5:c9:aa:1a:f2:90:51:
                    f9:ea:a6:30:93:72:62:6f:fb:ad:22:64:98:fc:b9:
                    5e:57:8d:ca:9c:9a:a5:f0:fa:39:da:0e:7c:15:b1:
                    db:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:63:13:AD:87:C7:23:F6:36:52:F8:2C:87:D7:25:1D:A1:5B:9A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0427a958-ad62-301f-bcbd-a216bb43ff4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2f:fc:fd:b0:0b:6e:cd:e7:5a:a9:76:bf:8e:1f:6a:ca:e1:
         3d:50:13:ef:45:0b:d3:7f:47:e6:bd:2d:47:6e:34:75:f7:6d:
         0a:66:eb:15:1c:f6:d5:8b:89:f4:b9:2a:d3:f1:01:dd:c4:99:
         e9:41:cf:94:67:4e:c5:5a:72:b6:72:b7:dd:0a:0e:b6:62:8f:
         a1:fd:49:7b:db:99:c3:d3:c4:a3:fb:e2:3d:aa:39:8f:12:ec:
         2d:6a:e8:ac:a5:12:49:06:24:49:73:6e:89:1b:07:19:6f:dd:
         ae:a6:ad:b3:d2:73:54:d9:01:b2:10:88:47:13:3e:40:1d:15:
         2b:ab:9e:5b:f6:cf:d6:30:fe:c0:a2:d9:70:3c:d4:54:70:06:
         2c:2a:9b:90:6e:d0:fc:0f:7b:4e:f7:cd:5b:07:24:92:0b:c0:
         55:67:a2:94:c9:76:3a:22:f0:f5:05:27:fb:b6:a4:7b:02:af:
         15:e1:5f:36:ac:e4:64:b5:ce:e2:f4:d2:46:15:79:a8:35:17:
         66:4c:57:4c:3f:d0:06:d0:93:99:ff:69:ca:20:83:27:c8:98:
         9a:68:23:ec:a2:b2:71:bb:9c:ba:f4:7f:8e:7f:bf:c7:9a:93:
         51:fe:43:ca:86:3d:c5:5f:99:53:53:cd:31:05:a5:6e:24:45:
         a2:6a:41:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:25:01 2026 by rpki-client