Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4608ec8e-2dbf-3264-a001-235788f24d6f.roa
File:                     4608ec8e-2dbf-3264-a001-235788f24d6f.roa (raw, json)
Hash identifier:          t4RfXkV23d4+LzDTdbMKB+JhWlfqSS9/V9xPSD/GUd0=
Subject key identifier:   6B:C4:31:05:AD:B4:5E:79:B3:55:1E:DA:3F:13:E4:04:30:56:57:6A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF5B210C09792506F56905680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4608ec8e-2dbf-3264-a001-235788f24d6f.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     396544
IP address blocks:        2001:503:d2d::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:10:c0:97:92:50:6f:56:90:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=237c37dc-8c97-47ea-9e9f-3ea8bb301896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:24:ab:24:76:fd:59:89:10:d7:e5:37:87:
                    22:52:76:37:f2:27:e7:a6:75:4d:e0:fe:1f:5f:34:
                    55:a4:4d:cf:15:b8:1f:6e:40:31:44:e0:36:9d:24:
                    28:2c:25:4d:8b:3a:5e:40:2e:fb:3d:92:ff:62:e3:
                    53:7e:69:0b:ed:60:29:45:e7:0a:28:2f:95:fe:68:
                    9d:38:83:d5:83:9d:8c:99:50:f3:d0:24:92:64:90:
                    3d:69:61:93:08:55:5d:5d:a6:ad:6d:8b:f5:91:44:
                    e5:8f:59:01:7c:5f:a6:3b:a8:25:ca:d9:0f:78:36:
                    d5:84:d2:03:d1:ec:ab:c7:a6:cd:f9:1c:dd:6e:89:
                    b2:42:a7:bd:36:f5:83:4c:3c:99:77:e7:b7:19:40:
                    19:37:1a:62:74:14:55:a7:ce:06:2b:7f:bb:f3:80:
                    11:53:75:af:2c:c0:b8:0b:ba:ee:89:a8:21:3a:0d:
                    d5:d0:ac:a4:57:33:fd:25:8d:27:a3:5e:64:71:02:
                    b1:e8:ae:15:12:4c:f4:11:21:4a:a8:c9:ab:ad:d0:
                    ab:c0:93:df:58:dc:64:6d:8f:79:d1:99:bf:1c:97:
                    52:a0:59:99:16:f1:a1:64:46:d6:7d:ae:17:f7:20:
                    f2:5f:8e:47:54:7c:6c:3a:f0:73:f3:46:85:ab:11:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C4:31:05:AD:B4:5E:79:B3:55:1E:DA:3F:13:E4:04:30:56:57:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4608ec8e-2dbf-3264-a001-235788f24d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d2d:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:42:c1:d4:81:41:39:b2:98:6a:7c:29:a4:5f:bf:0b:6c:8d:
         cd:5c:d0:78:70:5e:53:73:01:98:de:b2:f6:c6:90:27:49:8e:
         29:16:cc:4f:bc:63:fc:4e:6d:bc:6d:3e:62:df:8e:0b:fd:bd:
         25:e6:51:81:f1:62:0b:bd:57:66:8b:45:7e:1a:91:fc:6d:58:
         67:9e:46:b6:43:70:be:a1:17:89:bd:df:78:a3:33:26:a4:a3:
         87:fe:58:d6:85:b4:ee:d0:86:fd:8a:52:a5:8b:e2:9f:c0:df:
         9f:be:8f:43:13:27:61:65:6c:d1:d6:2d:93:23:24:b9:3a:52:
         ef:88:7c:fb:0c:ba:be:42:a2:d3:15:3a:cb:fc:9d:68:c2:0a:
         5b:a1:06:ec:1c:9d:cf:e5:bf:b3:ac:b2:7d:e6:45:2e:af:0a:
         c4:e4:4f:5f:da:ce:f4:01:75:0e:d9:24:95:6e:d7:08:4c:74:
         27:c4:d1:21:5b:d0:cb:98:68:1f:9d:f3:2d:0c:15:5e:73:89:
         55:2c:21:ca:65:bd:2f:42:a7:43:c3:0c:64:e8:29:5b:d3:91:
         3d:60:c0:ad:c3:c7:c5:33:65:78:1c:68:84:ec:42:68:7f:e5:
         0d:cf:bd:fd:ca:49:d3:9b:ad:3b:f9:8c:a4:45:99:a7:74:8c:
         9e:39:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:43:57 2026 by rpki-client