Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ed14c72-c371-33f3-a36b-4b45df2d51de.roa
File:                     1ed14c72-c371-33f3-a36b-4b45df2d51de.roa (raw, json)
Hash identifier:          /b7U4W9W6+ACcM0z7BVTtVnKvF8/6822796ob3ZsCJg=
Subject key identifier:   6F:C5:84:F3:74:5A:B1:C4:AA:59:91:54:D6:8E:72:4E:17:4A:C9:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CFC94C471286F9EC50E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ed14c72-c371-33f3-a36b-4b45df2d51de.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     36627
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:fc:94:c4:71:28:6f:9e:c5:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=ced99159-4013-40c1-8f43-451b8b12fd39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:3d:32:fa:33:4d:77:4f:a4:06:7c:42:d9:
                    b0:d4:f8:d7:af:b4:70:16:94:d5:ed:5f:de:24:5c:
                    44:23:ff:b0:f2:bc:49:bc:66:99:b2:62:87:fa:1f:
                    04:33:b5:39:e8:2c:39:34:29:04:0d:0a:e4:3b:84:
                    1b:a8:01:6a:ea:78:d6:04:0d:39:ea:4a:91:f3:cb:
                    c2:04:2b:8f:dc:c8:31:5c:35:4d:7e:f5:52:8a:00:
                    2e:9a:bd:f4:59:51:e3:88:76:ae:10:59:f7:aa:93:
                    c9:27:f1:a6:e7:35:74:df:eb:bf:c7:55:68:fa:98:
                    d5:83:32:d3:27:7c:3a:2e:aa:5b:c4:ea:67:7d:09:
                    fe:10:30:5f:33:a4:4e:0c:c0:78:0d:a4:42:21:4b:
                    1a:cc:f1:6b:8e:05:6d:f8:89:c7:6b:7f:a8:a5:be:
                    45:90:36:a9:02:24:ac:cc:55:5a:69:5d:3a:af:a8:
                    1b:5d:e9:d8:79:58:11:1a:6c:2d:d9:55:fa:4c:cd:
                    05:9d:51:58:67:14:fb:99:a1:36:1e:cb:b1:40:9f:
                    47:38:ba:15:00:a4:e2:4f:6d:f2:d8:a1:2c:e8:5b:
                    0f:b7:8b:08:c9:d1:d3:c4:9d:72:91:85:d0:da:4c:
                    96:8f:b5:f5:74:07:94:fe:a6:da:bd:89:40:6a:fa:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:84:F3:74:5A:B1:C4:AA:59:91:54:D6:8E:72:4E:17:4A:C9:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ed14c72-c371-33f3-a36b-4b45df2d51de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f8:72:f1:69:18:44:f4:db:f1:e9:a5:31:e5:81:5f:b9:e7:
         b0:5e:46:02:64:d1:04:84:d5:ba:d3:72:27:af:eb:87:77:96:
         3b:af:d4:5d:e4:aa:25:2c:8c:96:ee:49:e6:71:7d:55:fc:4c:
         4d:c3:f5:23:49:8c:18:b8:95:e5:51:59:91:bc:5d:31:5a:da:
         e2:15:36:8a:2e:1f:71:bf:13:11:6a:37:f6:ac:a4:e6:c0:de:
         5d:df:9d:19:55:e6:b1:48:c3:5f:97:76:d2:5d:81:8d:a0:4a:
         c1:13:4b:0f:f5:57:38:c2:8b:55:c9:fb:8d:65:84:b0:1b:61:
         31:cb:ed:0d:0b:d2:38:0d:23:5a:2d:82:40:f7:ce:6e:e9:80:
         20:ea:75:8a:09:fb:47:a4:16:31:ad:42:ff:d3:8c:e8:92:f8:
         47:ee:7b:35:05:6e:91:f7:66:70:65:6f:e1:4d:b9:61:df:c2:
         74:69:8e:50:ff:ae:b5:94:8b:fe:e4:48:ea:ca:32:82:49:de:
         0c:15:86:01:8d:0b:b0:90:b4:bf:97:a9:9e:57:bd:c4:46:21:
         a5:9f:f9:3c:25:47:57:de:47:21:17:2e:29:59:8e:5e:fc:83:
         01:fc:be:e2:14:dc:e8:39:c1:a7:ea:d2:2c:d0:64:94:84:2d:
         04:b3:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:08:52 2026 by rpki-client