Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa
File:                     152e21f1-be01-3eed-b70b-7e89b149fa70.roa (raw, json)
Hash identifier:          2KX+6enTvtfO5pu2gtzxwODMOgoG0n6+QmKoIMD3z3Q=
Subject key identifier:   62:C6:05:75:2F:5B:59:91:94:14:B2:CF:29:4D:8A:A2:21:10:80:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0AA22896DB23FAC8F3175000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     396597
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:28:96:db:23:fa:c8:f3:17:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=b0ac5d1e-932e-415b-8b88-e3bb8b32801b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:00:11:7d:ef:ed:dd:81:3b:bb:60:14:a9:bf:
                    ea:3c:80:21:57:37:a6:57:94:02:bd:f1:f5:bf:fb:
                    04:bf:6a:39:de:01:7a:3d:b6:8b:a4:0b:e1:2f:ff:
                    61:d9:a1:8d:8d:91:d2:72:ae:86:de:66:83:23:1f:
                    94:9d:c3:db:e6:3d:b4:65:2f:ff:49:bc:46:2c:c4:
                    d1:43:ac:68:8b:73:5b:37:b4:d4:da:98:41:b3:1a:
                    5c:54:cb:30:56:e7:fd:32:09:19:e2:ba:ac:e9:7d:
                    86:85:1e:68:07:64:98:67:31:24:e8:e7:a0:c7:c6:
                    a3:3e:8d:7f:98:98:46:57:62:39:ce:f7:3d:cf:25:
                    23:32:50:11:46:f5:e3:fc:8e:b3:d6:68:34:f6:86:
                    f3:43:11:cd:ef:16:3c:e3:4e:c7:a2:38:23:a1:cb:
                    94:d5:35:a5:87:d9:db:05:3c:47:14:d6:3f:60:23:
                    ad:b7:43:f5:ae:db:54:dc:ae:00:5b:fb:79:7e:d7:
                    11:27:fc:8d:41:bf:43:34:40:c3:01:dc:d6:58:86:
                    b7:db:f8:18:1b:64:48:70:36:b0:f5:16:d5:07:34:
                    32:38:02:a4:46:4d:42:4f:a9:c3:66:a1:47:1f:d1:
                    8a:21:2f:e7:6a:1d:7a:7d:42:2d:56:31:05:b4:69:
                    e7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C6:05:75:2F:5B:59:91:94:14:B2:CF:29:4D:8A:A2:21:10:80:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/152e21f1-be01-3eed-b70b-7e89b149fa70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:53:de:a2:a1:4f:b9:44:83:06:9a:3b:4a:62:f6:07:39:6b:
         37:8d:ba:ed:ab:42:39:4c:64:8f:e3:c0:b3:b0:68:6b:58:0c:
         1b:7e:86:35:b3:d0:dd:44:61:c6:4c:67:5c:0c:af:97:8b:00:
         56:5b:cd:6f:d4:90:77:bf:c8:1a:96:42:0a:f8:a5:5a:4c:da:
         7f:23:c9:dc:da:50:a2:e0:96:40:58:b7:44:ff:78:a1:dc:b1:
         7c:b7:22:53:ec:49:9f:82:bd:7d:5d:80:50:11:10:40:f9:4f:
         a3:1d:41:a4:a9:55:90:96:88:11:2b:b9:45:66:2f:ef:c7:2e:
         aa:56:3f:cd:42:00:6b:9e:36:e0:bb:6e:8a:2d:f5:4e:41:5e:
         c2:74:9e:8c:d9:5e:d6:05:58:16:3b:62:06:b9:8c:07:4b:d3:
         ac:4b:d1:41:93:b4:28:c6:2e:62:6b:10:5e:3d:95:db:b0:9d:
         64:5c:8a:94:35:b8:79:8f:fc:7a:65:8d:8a:50:4f:68:48:3a:
         d0:10:b6:c2:10:a6:01:8a:a1:89:50:ba:6a:c2:55:16:f7:08:
         33:19:e4:28:6d:01:9b:a8:85:a3:95:7d:a0:de:ce:6a:c2:0a:
         4a:02:d2:34:60:94:3f:ac:9d:80:6b:77:50:3d:82:3a:1f:c1:
         5a:39:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:17:17 2026 by rpki-client