Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa
File:                     436394c3-8039-3911-9e8f-576517a3fbc8.roa (raw, json)
Hash identifier:          WknBKngGqOywgMmkYVCVXhrQCdvSrWkA8LfAvJlXNxM=
Subject key identifier:   41:95:8B:55:81:D1:59:97:3F:6F:8A:2E:37:2E:59:01:6F:65:0C:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498B2E7209FEE192F6DE1400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397211
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:2e:72:09:fe:e1:92:f6:de:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=f20063e5-2abd-4f1d-b33e-495b59667966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:6f:bd:4e:48:00:92:09:6e:36:29:7c:06:
                    a3:2e:ff:e3:21:43:53:4b:94:08:96:bd:b5:b5:a3:
                    4a:7d:7a:1a:f3:94:b4:0e:f8:c7:dd:80:6c:63:26:
                    f9:29:a1:89:d3:e0:30:8c:c9:0e:63:df:2c:10:90:
                    bd:b7:17:68:4f:e3:18:db:30:02:6d:22:c3:07:14:
                    ee:2a:68:d6:57:1d:d6:c7:70:d8:fd:c0:4e:45:39:
                    23:8c:3f:44:da:c9:1a:10:9d:05:87:19:ba:e6:84:
                    5a:de:bf:df:5b:cb:6a:72:91:05:ab:e0:e0:7a:c3:
                    6e:6f:f3:91:79:7d:f7:04:cd:fa:aa:ec:3c:6d:a9:
                    d4:9d:b7:b8:bc:2d:0b:1f:09:41:da:a8:c5:af:61:
                    25:0a:c8:6b:f9:13:34:eb:af:a1:8d:1f:35:65:5a:
                    83:ef:9e:3d:67:c2:7d:11:e1:d9:ca:9a:73:d2:4d:
                    94:0b:70:80:7f:ee:09:7b:9b:9e:56:9e:c5:f7:34:
                    bb:3f:00:89:6a:cf:54:7c:25:70:f8:43:2d:c3:b1:
                    6b:05:2e:4b:26:8e:f9:aa:4f:44:21:1f:e2:22:a0:
                    76:e8:75:ed:50:52:43:2a:c1:ba:09:ba:3b:10:cc:
                    d1:0c:51:d6:60:65:d3:e6:81:6b:35:56:e3:2a:9d:
                    5b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:95:8B:55:81:D1:59:97:3F:6F:8A:2E:37:2E:59:01:6F:65:0C:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:5d:a5:ad:0f:28:c1:1a:b6:1a:66:e0:45:22:b4:24:32:92:
         34:23:94:40:80:58:2c:d3:22:b2:bb:4e:5a:52:4a:63:3a:a5:
         dd:f4:6a:e5:63:db:e5:d5:0b:fa:9b:de:8f:9f:c7:c2:d7:cb:
         6f:2a:ed:4b:ce:ae:c0:fe:5a:46:01:8e:11:1f:ec:66:1c:f2:
         fc:26:57:01:34:ed:8b:91:84:b9:c2:27:8d:84:c8:68:84:ab:
         cd:c1:cf:1e:84:ae:9a:b5:9a:8f:7c:01:01:61:23:c8:63:b2:
         a1:06:74:03:92:a9:ea:5a:08:75:78:5c:9b:9f:19:be:42:90:
         00:19:22:d4:96:1e:29:b9:c8:71:43:ba:38:7a:03:b4:e2:c6:
         78:46:9b:9d:52:c3:a7:6a:39:51:7d:dc:d0:8f:ba:bc:2f:e3:
         d6:86:14:ab:11:cd:07:07:be:8e:37:ee:14:6d:1d:d5:15:45:
         15:9d:3a:44:6a:89:dd:02:fb:34:4d:13:06:ef:12:06:57:c9:
         33:57:3a:7f:4b:35:e3:3c:3d:da:d4:df:46:54:64:35:e1:85:
         e7:90:50:56:17:1f:d7:27:7e:87:40:d8:ce:47:a5:b4:a1:90:
         73:cf:e6:73:c4:4f:96:e2:93:dd:e2:4f:1e:ee:ca:f1:82:84:
         cf:f1:a2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:27:30 2026 by rpki-client