Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bb2a962-1599-3d59-9be1-b2a0675ca921.roa
File:                     2bb2a962-1599-3d59-9be1-b2a0675ca921.roa (raw, json)
Hash identifier:          7YFKaDi3KAzVXmejT4i671V0VpREzGHIhZg0SvWzZAs=
Subject key identifier:   18:76:F1:B1:B7:1C:1E:29:31:63:52:2B:4B:B4:62:98:58:5D:DF:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F3CE28E5D1F1F11ECA78B8D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bb2a962-1599-3d59-9be1-b2a0675ca921.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     396597
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8e:5d:1f:1f:11:ec:a7:8b:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=f3e0bcd2-708c-41b4-a96c-df24320767f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:81:6d:2a:2b:8b:ad:8f:2f:33:72:3e:8d:c5:
                    f6:31:c8:87:e4:4f:79:53:d2:f6:fc:f0:90:4e:73:
                    90:24:fa:12:fa:26:9d:4f:03:5d:74:19:31:9c:a3:
                    25:39:1a:85:e6:49:ef:23:7a:77:9a:97:1d:33:76:
                    96:db:ed:4e:ff:30:0f:92:4f:f2:06:5b:1a:74:8f:
                    47:28:97:d7:03:4e:dc:b2:2a:bd:ff:db:ac:bf:4c:
                    7f:24:be:cc:7d:1a:bb:82:b0:1e:b7:53:ba:f2:ca:
                    c3:5d:a8:ce:d6:eb:05:15:f0:7a:d6:fe:0a:f0:a6:
                    fa:7a:14:37:92:f4:fd:57:31:b2:0a:e2:94:85:20:
                    92:b9:74:b8:a2:fa:bf:49:86:43:7c:02:43:c4:52:
                    aa:84:16:1d:2a:c2:56:df:19:6f:02:02:94:5a:26:
                    1b:cf:d9:2f:67:a5:01:b6:37:81:7c:c4:8e:78:8b:
                    77:73:46:9f:43:50:e2:87:79:a0:26:2a:7d:11:74:
                    b5:4c:9f:1f:20:3e:f9:6c:ab:7b:9b:c1:98:94:7f:
                    64:7b:f4:93:c8:63:de:84:2d:b2:35:27:03:f3:a1:
                    19:4e:b4:8e:3b:df:a5:ce:38:6c:7d:ee:4c:3c:ba:
                    f8:dd:12:01:e8:63:f3:56:99:ef:49:64:17:90:cf:
                    69:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:76:F1:B1:B7:1C:1E:29:31:63:52:2B:4B:B4:62:98:58:5D:DF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2bb2a962-1599-3d59-9be1-b2a0675ca921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:82:9b:a6:0b:58:5d:46:c7:7c:2f:86:4d:94:70:65:68:39:
         7d:9e:4c:27:a0:af:73:17:0a:23:f2:ec:38:8d:38:00:1f:f7:
         9f:54:cd:dd:60:b5:4d:78:0a:28:b9:a6:a7:49:28:c0:f0:93:
         6f:07:ca:bf:3c:ae:5d:5d:7c:a0:d3:4e:33:b9:59:18:7d:6b:
         90:3f:58:2a:03:63:b3:c2:bf:7b:0f:df:1b:cf:78:9e:85:f4:
         de:04:5c:45:98:7e:dc:27:21:2b:4b:ac:dd:69:b7:7f:c8:5e:
         c4:51:a5:ec:97:4a:f5:8b:20:73:1e:3e:44:b9:9d:0a:be:9f:
         e5:cb:36:ca:6e:3a:90:f9:68:3e:4f:92:dc:13:15:a6:14:cf:
         9f:b6:12:fe:01:86:3c:8e:e3:c9:0f:6c:ca:59:cd:9d:7a:b3:
         85:6c:68:18:78:10:53:00:63:c9:36:40:39:ac:26:ab:24:d5:
         11:bd:06:08:85:40:66:5e:2a:6f:92:c1:53:d0:36:38:64:c0:
         8a:11:d8:5c:98:2c:72:2b:38:f2:a8:ef:82:f6:4d:41:7d:01:
         b1:41:eb:6e:97:ae:64:de:c1:e0:29:08:c2:69:c6:a7:ee:5d:
         7a:13:f7:ab:85:91:ea:36:27:2d:1c:6c:a7:f0:4f:ab:55:47:
         3d:51:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:03:32 2026 by rpki-client