Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32962b64-768c-33be-8ceb-4673129998ea.roa
File:                     32962b64-768c-33be-8ceb-4673129998ea.roa (raw, json)
Hash identifier:          D6c+Va3FsCejBbEITHs7mNmMTNLoj943I/IFgDxaxNI=
Subject key identifier:   D3:63:D6:BC:F6:D5:54:D8:14:AF:2D:62:EA:0F:01:A1:49:9D:3B:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F57682EAFA071CD4024EB3340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32962b64-768c-33be-8ceb-4673129998ea.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     36622
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2e:af:a0:71:cd:40:24:eb:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=dee84ab2-a471-4fbc-901c-5503971a9724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:1c:d6:83:fe:dd:0f:80:22:a4:36:90:0d:
                    b3:d8:45:45:07:2e:01:c0:67:0c:3b:f9:18:ee:36:
                    14:46:8c:a3:f7:9a:18:98:da:51:61:cf:79:f5:22:
                    39:db:30:66:72:cd:0a:7f:94:90:8d:9c:79:cb:0f:
                    44:62:62:4b:41:3b:15:8b:9f:bc:6a:8a:67:0d:0f:
                    25:24:29:aa:17:39:7d:48:eb:e8:3a:ea:5c:e1:63:
                    95:ed:ba:a3:6e:30:13:72:66:16:fa:b0:4d:d6:48:
                    37:0b:60:e4:6d:f0:8a:b3:b8:fa:73:82:0f:3a:e9:
                    a9:6d:c6:df:f7:84:3c:2f:68:26:50:af:fb:1b:46:
                    3a:f4:1d:75:a0:1c:f7:3c:12:4f:35:85:91:90:cf:
                    9b:59:0e:33:b3:f3:a4:cb:1e:cd:8d:48:c3:c1:92:
                    a4:98:b9:0f:83:78:bc:4d:02:78:ad:f2:a9:13:75:
                    99:b3:4a:cf:31:d5:98:64:16:90:a5:dd:3f:e3:4d:
                    79:0e:55:9a:1d:2d:d3:91:79:5d:38:2d:e9:37:a6:
                    59:20:90:9d:56:b7:38:f1:2f:42:02:87:2e:8e:20:
                    86:ea:4e:54:b0:5d:7e:01:87:a0:ba:52:9c:d7:d9:
                    c3:89:9c:04:f5:2b:08:17:03:b4:d0:6e:b8:39:2f:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:63:D6:BC:F6:D5:54:D8:14:AF:2D:62:EA:0F:01:A1:49:9D:3B:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32962b64-768c-33be-8ceb-4673129998ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:b3:91:fd:be:ba:b8:41:4a:63:89:c0:88:01:d3:d8:26:61:
         57:df:ed:d3:0c:57:c5:d7:6f:94:f0:bf:02:70:ae:63:b5:d3:
         87:0a:37:68:d3:64:91:a1:3a:5a:1f:48:ba:76:de:b2:43:6f:
         5f:60:4d:52:7a:68:e9:b2:d5:94:18:1b:26:c7:8a:8f:0b:a3:
         45:d7:e8:0c:76:42:80:c2:a0:d2:ad:dc:ac:ad:fc:b0:56:03:
         62:35:16:a3:91:fb:77:00:d3:c7:02:72:fe:7d:46:cb:8c:b3:
         48:75:c3:4a:50:8c:4d:45:ef:39:4f:a5:c7:43:dc:a7:dc:29:
         d7:2d:75:6d:f1:51:dd:8b:dc:0b:02:f5:8d:9e:b0:1f:39:46:
         89:6b:5f:b4:79:1b:3c:74:ed:f4:10:76:41:a6:4a:4a:b0:9a:
         8b:76:40:2e:13:96:7a:70:b2:ec:7a:2c:25:b9:f5:84:53:38:
         20:37:09:e2:88:cc:9f:d4:ce:26:10:a9:10:61:6a:11:53:61:
         9b:fd:52:0a:11:ba:7b:35:19:25:5b:80:0e:f4:71:f6:51:f0:
         02:39:14:80:5e:bc:d3:c8:1b:4b:ce:ac:45:e6:78:99:4a:81:
         69:fe:d1:80:35:c5:90:76:c0:20:2f:6e:ce:df:0e:db:09:d9:
         dd:4c:23:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:04:46 2026 by rpki-client