Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa
File:                     5693ddaf-862c-3eab-933e-286d3ed8f589.roa (raw, json)
Hash identifier:          jRhJ2q//XaOKBlm2R4Q2+SN43qmRgaece7xhyeQpG7E=
Subject key identifier:   E0:DF:F9:1A:32:6B:56:77:65:5B:54:6D:04:D7:22:76:9B:86:D6:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EFCACE6BC36D9D6715A8860C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     396555
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:e6:bc:36:d9:d6:71:5a:88:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=1b6fdfc8-0ae6-4da7-b68f-0f6af8f95a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:7b:a5:11:94:9c:dd:cc:97:86:f7:e3:b4:
                    64:cb:5d:97:0b:24:49:db:7d:f1:14:aa:9a:b5:8a:
                    8f:26:46:bf:a9:c2:08:fa:d5:26:10:e3:82:98:85:
                    f8:07:f3:d5:06:13:79:8f:a8:3f:de:27:86:e7:52:
                    2b:1d:1f:5c:43:c4:e5:f9:52:69:9e:f5:d4:af:56:
                    c0:57:25:26:80:7a:b2:4f:24:76:7e:7c:87:54:b0:
                    a9:ba:19:0e:ab:df:26:47:3b:fd:cb:ed:67:c5:0e:
                    a5:1e:9e:21:7d:64:98:7c:8e:d6:a1:65:4e:ab:95:
                    72:75:95:de:47:cf:0e:8c:b9:54:76:2a:e3:dd:a7:
                    e4:08:a1:dd:a5:4b:72:08:a3:c0:ee:c3:01:be:79:
                    41:e3:d1:95:e3:15:e2:74:58:c1:e4:22:9a:c3:6a:
                    67:69:c7:77:e7:96:d4:c0:b4:aa:5b:88:25:32:96:
                    c1:fa:25:bf:56:aa:ce:09:d1:56:80:75:02:69:c3:
                    78:c1:24:9e:53:7e:50:60:5e:ea:4c:90:99:f0:7f:
                    d6:f7:62:3c:a3:9f:c3:c0:3b:6a:cb:c1:e7:9e:04:
                    ec:78:71:3e:ae:99:28:94:8e:7f:af:79:b9:9e:26:
                    bf:87:51:88:e3:3c:43:36:d2:94:d4:f8:56:c1:a0:
                    9c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DF:F9:1A:32:6B:56:77:65:5B:54:6D:04:D7:22:76:9B:86:D6:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5693ddaf-862c-3eab-933e-286d3ed8f589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:57:f9:f9:30:a0:fe:d6:e4:94:78:10:21:a6:9f:f4:23:2d:
         96:42:84:67:ea:2d:62:4f:7f:81:08:ef:fa:fd:4b:dc:a1:9b:
         f6:57:d4:a9:cb:69:b7:e3:45:1e:80:1d:71:24:34:af:43:95:
         41:db:42:a5:6c:98:9e:8e:7f:d8:c8:73:b8:3b:5a:b0:61:34:
         cc:70:ba:e5:f0:35:18:f4:39:e1:fc:3b:f7:cf:6b:2c:1f:42:
         a9:49:fa:0f:2a:7d:56:dd:08:71:6c:0c:dc:e6:8d:a5:2f:b5:
         4c:da:70:b6:5a:bf:90:96:94:a4:05:5c:67:e1:5c:c2:1b:93:
         ef:e1:f3:d9:f2:9d:a4:d0:4d:fb:ee:06:2f:ec:fc:94:a0:99:
         68:c7:9f:e5:e3:bf:45:bf:fe:bc:13:c7:fb:89:04:f9:e1:b8:
         13:8a:49:ae:d5:8c:ce:04:6e:99:dc:c1:56:16:01:48:ef:6a:
         a5:80:62:e2:6a:49:a0:9c:78:c9:2f:5c:2a:96:e9:f0:45:83:
         60:21:85:bd:e9:9d:c9:7a:a7:c7:15:a0:be:08:ad:37:8a:d5:
         73:bb:00:26:65:dc:55:a1:d1:98:0b:92:6d:cd:ca:51:87:99:
         e4:ff:76:55:f6:52:9b:ad:a2:74:34:e8:e7:5c:2a:f2:b3:5d:
         13:26:6a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:29:20 2026 by rpki-client