Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/247e4f36-d481-3cd8-843b-9f633a18c3aa.roa
File:                     247e4f36-d481-3cd8-843b-9f633a18c3aa.roa (raw, json)
Hash identifier:          gbakX76LY120kPGzAQ63GR6+OtnblZvkb4Qv2pIlFak=
Subject key identifier:   81:41:DC:53:96:B7:63:E1:CD:37:F6:4D:D4:5D:86:0E:FB:79:E3:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0ED23AA19ED08857F6EA9C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/247e4f36-d481-3cd8-843b-9f633a18c3aa.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     396546
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:3a:a1:9e:d0:88:57:f6:ea:9c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=7ed41fc5-7ebc-4164-94da-465d0b09aebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:94:8b:0c:4e:39:47:71:a3:19:ce:7f:3b:
                    bc:16:89:c7:c8:d9:d9:4f:f2:cc:5d:3b:a0:3d:2e:
                    f6:b1:30:ee:09:0e:ef:1d:30:03:16:8e:c8:f3:15:
                    66:05:27:28:c2:ae:b2:a4:48:60:e7:9e:54:8a:f8:
                    55:89:99:bc:08:b4:3a:ac:dd:fd:f5:43:f7:01:49:
                    5a:1c:be:91:dc:b4:d4:71:4c:33:9f:76:75:f4:32:
                    aa:25:2f:36:15:48:ad:78:4a:b1:35:f4:fb:fa:3c:
                    c9:fc:a1:3e:29:cf:8b:cf:02:61:40:fa:f4:e5:06:
                    ad:fb:69:c6:82:fb:e6:be:0e:3e:7a:8f:9e:05:7b:
                    c5:98:50:87:86:00:a5:75:13:f4:3a:3c:43:e4:60:
                    42:bf:c1:04:f6:d1:e1:3f:d0:c2:cc:eb:e8:09:3f:
                    fb:be:92:b4:f6:ed:d5:7a:6d:a5:fc:6f:45:32:5a:
                    3f:45:14:78:93:0f:4e:e5:70:2b:4a:58:c3:4f:1e:
                    37:84:1e:92:68:d7:f6:0a:a3:e7:11:c6:37:17:eb:
                    6d:e0:9b:68:30:11:a8:00:73:ff:ef:3b:61:6d:ee:
                    8a:c3:93:14:48:95:ae:f8:8a:3a:64:3b:23:30:aa:
                    0f:15:1a:88:3e:d0:ec:98:05:1e:4d:fd:11:47:e4:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:41:DC:53:96:B7:63:E1:CD:37:F6:4D:D4:5D:86:0E:FB:79:E3:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/247e4f36-d481-3cd8-843b-9f633a18c3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:a8:10:7a:cc:a9:ac:4e:65:38:b6:57:a2:6c:fa:40:94:7d:
         af:46:90:7f:dc:35:e0:7d:01:43:92:13:20:cd:e7:5e:3c:5c:
         d8:86:94:4d:d5:05:3f:86:13:05:1b:4c:e6:ba:03:85:7a:8d:
         0b:10:fe:54:52:3f:5d:c4:8b:3a:9b:12:31:a7:43:08:e7:22:
         24:d2:3a:6c:e2:24:e0:d4:03:39:05:3b:5b:ac:c5:da:e1:79:
         d3:71:1e:a4:1a:80:bf:73:6d:56:2f:b8:32:e6:b8:7d:a2:cb:
         0f:3f:6b:ce:84:9b:8d:55:70:e8:0d:20:d8:c2:1e:f7:c4:9f:
         fe:ba:7a:5b:c4:5b:a6:74:f1:a6:0f:17:b3:e4:31:ee:09:da:
         5c:95:a0:3e:f0:5f:60:ea:84:63:64:04:20:56:46:d3:fe:57:
         39:d6:ff:c7:75:80:98:93:51:fe:5a:30:b5:2f:3e:9e:f7:05:
         27:a9:5a:ce:9d:d7:af:74:73:73:7d:bc:5a:bd:35:a7:55:cf:
         3e:20:b4:20:6d:29:96:6a:f0:8a:bf:37:04:ef:5b:e6:e2:ed:
         ff:c2:88:2f:ec:5b:66:83:1c:42:d6:bc:9f:20:e0:72:7b:16:
         f4:f2:28:d4:9a:e0:b6:02:6a:a6:e9:63:42:c5:46:11:4b:e7:
         fd:99:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:14:31 2026 by rpki-client