Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/626419a9-c295-3f13-aa03-4beb373bbd7b.roa
File:                     626419a9-c295-3f13-aa03-4beb373bbd7b.roa (raw, json)
Hash identifier:          RXT8nMOgcko9PZ2B1DPlbIv0nfCuLhCeehujjG8WT+c=
Subject key identifier:   97:10:95:5D:A0:24:06:CC:80:A4:AE:6C:1A:04:8F:DC:E1:C6:35:C4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972E980D37D69CAAC35AD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/626419a9-c295-3f13-aa03-4beb373bbd7b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36622
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:e9:80:d3:7d:69:ca:ac:35:ad:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=280bedd1-a42a-4fff-b393-8f03b287bde8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a4:15:1b:d6:8f:24:9a:cd:3d:d1:c2:c7:02:
                    db:2b:42:63:eb:f5:12:cf:a7:1c:d2:a9:fa:2b:95:
                    92:89:18:94:08:80:52:28:92:7e:3a:9f:c6:91:f1:
                    c5:88:5d:0a:68:a7:1b:13:8c:a3:9b:9e:0c:c9:a4:
                    22:8c:cb:dc:9f:9f:37:df:a3:ed:72:58:52:ff:9b:
                    5d:92:c0:54:70:fe:ab:d8:e2:22:67:54:7e:bf:9d:
                    78:51:04:f2:3e:62:31:fe:68:bc:ed:e4:30:28:4f:
                    c4:d0:dc:a7:40:6e:54:b5:6e:6d:41:95:54:0c:56:
                    31:ac:f7:f3:0d:3a:8e:3c:d4:d7:a9:82:79:fa:6f:
                    11:b4:cf:cf:03:b3:3e:d6:8f:e8:93:e1:48:72:1b:
                    7e:0c:60:a5:93:03:cf:a5:68:5d:1e:cb:89:39:3f:
                    fe:d8:c6:24:4d:cb:7c:f4:a1:a2:d2:df:50:a9:7a:
                    d7:39:65:e7:57:f3:07:8c:5a:d8:a8:66:17:17:9b:
                    fb:4c:e7:7c:8c:b1:c6:05:92:bc:c7:96:f3:e0:c5:
                    71:70:3c:b4:0e:a6:ef:7e:06:db:49:d2:1d:a3:7c:
                    8b:db:57:24:a7:9a:9a:03:ad:75:0e:ef:c4:17:8e:
                    b7:7e:87:3b:2d:b3:70:cf:4d:83:74:db:bc:22:88:
                    ce:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:10:95:5D:A0:24:06:CC:80:A4:AE:6C:1A:04:8F:DC:E1:C6:35:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/626419a9-c295-3f13-aa03-4beb373bbd7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:cf:04:4e:4b:ba:29:42:67:52:cf:57:8c:99:34:1d:5f:cb:
         34:6c:47:0d:c1:f6:8f:74:7a:a3:11:b4:65:98:5c:65:9a:a6:
         6a:5b:0c:a2:a1:47:c9:c6:78:ac:20:d5:fd:06:69:a0:82:a9:
         d2:2e:3c:27:ad:cb:6b:5c:53:cf:c1:27:7d:b9:e8:a0:9f:d1:
         71:17:c0:9f:13:4c:1a:8b:bb:73:82:0e:ef:5d:cd:5a:18:89:
         f3:f8:76:ad:55:3b:98:c1:8c:39:2d:e1:8b:ee:87:18:fe:59:
         95:15:f6:10:ef:da:8a:b1:50:9e:3e:a8:8a:af:6f:25:0b:f6:
         b4:54:c3:44:c4:69:f3:83:8b:79:93:4f:be:88:d6:b2:21:ef:
         12:9d:4e:5d:90:ce:44:a5:ef:7a:5b:4a:41:51:24:93:02:e6:
         40:80:b6:5a:7d:1c:40:bf:62:a8:23:58:80:0e:9f:48:46:56:
         5f:b4:ef:fd:3e:3e:6c:d7:00:61:cc:0e:e9:e1:4b:bb:4a:2a:
         c5:30:58:bb:de:ba:15:c5:6c:83:18:bb:8d:22:58:da:a3:79:
         e7:76:9c:d0:88:d3:b8:93:7b:bc:be:e5:c6:f1:e6:27:38:b4:
         f3:10:a6:95:0a:e9:0c:9c:24:ae:56:db:68:c4:09:7b:d7:90:
         10:2c:ce:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:23:01 2026 by rpki-client