Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224bf48f-0de2-301b-a49a-aa7a5d43dd97.roa
File:                     224bf48f-0de2-301b-a49a-aa7a5d43dd97.roa (raw, json)
Hash identifier:          RzT3z+ZXD5fCDNiY7FLvppqS23qfUPEo2jsW9mR0Eok=
Subject key identifier:   00:4D:3F:A0:81:DC:25:2A:91:9E:F2:6A:BB:EF:27:DE:9E:B0:97:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0ED23C3012956B448609D800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224bf48f-0de2-301b-a49a-aa7a5d43dd97.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     36619
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:3c:30:12:95:6b:44:86:09:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=e1822f7c-f8f9-4249-aee2-119e72a92757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:1b:83:36:d0:52:12:9d:8f:0f:35:32:e5:d2:
                    14:62:be:1b:62:8a:96:af:01:13:3c:be:08:61:b1:
                    44:45:4c:df:1c:6f:d4:7a:b0:f7:64:d7:73:ed:22:
                    95:fb:0b:05:ed:db:9c:be:3f:14:2e:ec:af:1a:13:
                    bd:56:ba:5a:75:4b:7b:4c:7f:4b:35:82:27:e5:12:
                    2b:9e:a2:80:9c:27:d1:5e:69:10:7f:e2:50:3e:fc:
                    be:c6:2e:84:c6:a1:51:e8:2a:ad:f1:fe:06:7c:5d:
                    b3:43:1a:33:31:ec:31:32:c5:74:0e:cc:40:ed:10:
                    0f:f4:c0:dd:53:fd:72:69:78:b3:4d:d2:b8:b0:26:
                    fa:28:28:2c:a3:c0:51:b9:2d:b2:bc:13:87:62:b8:
                    eb:21:ed:28:5a:33:50:ec:c1:3d:c5:c4:be:f4:ea:
                    d1:5f:3e:91:4f:c7:d1:44:a5:63:ce:7b:28:81:df:
                    ec:af:c0:28:4d:9f:96:6a:81:53:76:55:d3:61:87:
                    d9:07:54:b2:98:89:97:bf:a1:bd:06:14:11:41:e2:
                    1b:1f:95:2d:e5:d7:e3:05:85:44:ad:c8:ea:e6:a5:
                    da:05:18:ff:8c:2a:f6:34:3c:48:73:91:05:4f:91:
                    62:bc:9b:3a:f5:c8:77:f4:57:96:b0:c2:7b:49:ae:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4D:3F:A0:81:DC:25:2A:91:9E:F2:6A:BB:EF:27:DE:9E:B0:97:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224bf48f-0de2-301b-a49a-aa7a5d43dd97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:12:fd:14:48:4b:38:52:7b:be:43:53:56:1b:64:47:b9:ce:
         b2:5a:41:f4:62:9a:b3:ea:7c:68:d1:59:ba:f0:74:9c:14:a8:
         95:6d:32:85:4f:43:39:66:cb:14:f7:5d:2b:21:3d:b8:f0:02:
         e1:88:c9:12:e3:cb:cf:28:68:0f:79:e4:76:a4:d2:25:f1:26:
         e4:f2:f7:98:47:26:24:16:08:92:28:0e:33:f4:51:79:75:01:
         6b:98:4b:4b:e1:92:4a:e4:88:f8:35:54:8f:66:2c:f1:f5:01:
         a2:bf:2b:23:85:61:00:54:c4:91:a3:0e:57:6c:2c:b6:a8:8b:
         eb:83:bb:55:d7:b1:dc:b5:e4:1e:1a:dd:d0:da:46:96:5a:5d:
         08:6a:1c:23:c3:f3:fb:32:64:a4:6e:2d:69:5f:f2:0d:96:1c:
         89:7c:c4:0d:94:42:39:1e:72:e6:f6:51:28:73:ce:8c:94:c8:
         1e:35:59:e3:34:0f:f1:cb:a0:f5:2a:cc:5b:e9:52:ca:49:f1:
         e6:54:80:c6:d0:2c:3a:b6:f8:93:02:c7:6f:29:56:4a:42:bb:
         0c:cb:ed:9c:ec:eb:01:de:3b:e4:ee:5c:bf:90:00:72:38:a0:
         51:dc:bb:e9:05:a8:67:c3:17:e5:98:eb:e7:2c:97:13:09:e6:
         de:50:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:40:49 2026 by rpki-client