Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c3de95d-cf41-3a58-b7d7-96c288b489c2.roa
File:                     5c3de95d-cf41-3a58-b7d7-96c288b489c2.roa (raw, json)
Hash identifier:          dLfddUuiKfSTBekv6+SZD6AXbzv2jGwLic1t8MCl40M=
Subject key identifier:   E5:DE:E2:9A:ED:FF:C2:C3:27:E4:FF:A3:71:D8:EF:6B:3A:07:5C:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C281DE40B70EFAB8AD3A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c3de95d-cf41-3a58-b7d7-96c288b489c2.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     396587
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:81:de:40:b7:0e:fa:b8:ad:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=551a6b56-ce58-425b-8c4e-3dd2374f91d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2b:e2:8f:81:ee:6f:76:f2:10:42:42:03:b9:
                    cc:5e:87:29:99:c0:93:5c:b6:89:94:cb:6a:cb:69:
                    82:4e:70:77:58:9f:1f:73:16:69:93:a0:14:80:c1:
                    df:d8:b4:98:16:4d:58:d9:ea:3e:49:65:39:69:4e:
                    e8:b9:b1:d7:75:cd:b4:2f:2f:15:4c:64:1d:62:0d:
                    44:1f:e5:a2:62:3b:4a:bf:05:34:71:62:ad:37:7a:
                    ef:63:66:a6:aa:9f:fa:9d:cc:fb:08:12:37:ad:c2:
                    5a:65:10:9a:03:46:6c:9a:f7:ee:34:b8:81:d3:de:
                    c0:c2:a9:95:88:2e:7e:02:70:0c:1a:64:e4:2a:63:
                    00:98:52:23:bd:6d:a2:1c:da:6f:cb:b7:bd:3d:76:
                    2c:23:c3:c7:6f:71:7b:5d:ee:81:33:56:a3:a4:7c:
                    32:ff:36:fa:bd:c5:67:ff:a0:81:1c:ff:0f:db:fc:
                    f8:93:7b:09:2c:15:18:64:d7:4f:f2:eb:bd:52:44:
                    bb:94:6b:dd:2f:b4:4d:d0:48:2f:f8:3f:45:ef:92:
                    c3:f0:99:12:bb:82:57:74:e1:ca:a5:9b:33:21:08:
                    5f:ab:92:89:db:e4:91:b2:f3:bd:8e:6a:c9:0d:d0:
                    77:bb:99:fc:72:2e:a5:5d:cd:3f:57:65:94:75:b5:
                    10:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DE:E2:9A:ED:FF:C2:C3:27:E4:FF:A3:71:D8:EF:6B:3A:07:5C:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5c3de95d-cf41-3a58-b7d7-96c288b489c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:d7:7b:84:bc:82:e5:32:4d:1a:6d:0e:f6:8e:3c:b9:09:97:
         43:f6:53:02:4a:1a:0e:01:56:24:41:01:30:0b:03:31:fd:a2:
         c8:32:bf:9a:cd:ef:56:a7:bd:04:b3:64:b5:fa:48:6d:83:5d:
         17:9e:ef:09:da:2f:66:8c:de:bd:43:8b:6d:25:8b:1f:09:d5:
         08:3b:c6:50:fe:47:27:23:8b:b3:87:61:8a:99:04:00:45:43:
         b0:6a:21:49:2e:31:91:35:e4:56:b3:2f:df:22:df:6e:8c:63:
         b0:60:c2:04:f4:5a:2d:b3:5f:ee:c3:e2:1d:d7:09:0f:22:7e:
         0e:e8:2f:8b:cc:34:63:c6:b3:5f:62:9c:50:cb:8d:58:c5:c5:
         90:a8:b8:5b:7d:20:a3:f5:47:8e:30:25:7c:87:56:1b:42:a2:
         b0:27:cc:47:7a:60:45:d8:a3:5b:72:57:18:f1:84:e5:38:bb:
         b0:92:38:77:cf:ae:3e:2a:bf:95:71:9d:c5:24:df:cc:d0:86:
         12:d0:6d:74:c3:5e:20:02:7f:fc:ca:9e:e1:2b:b4:d3:84:3f:
         d1:0b:97:ff:58:48:5d:67:07:d5:e2:b1:3b:b1:1c:0d:2b:32:
         d9:07:ac:c4:a4:a5:a7:52:f7:31:02:15:d4:80:66:80:0c:41:
         e0:13:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:36:13 2026 by rpki-client