Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c83f1da-a751-3cf6-88fe-766837dfcf68.roa
File:                     7c83f1da-a751-3cf6-88fe-766837dfcf68.roa (raw, json)
Hash identifier:          JYXPW7kGu5bG7+D4RHN0Byt0XQJOszwFP+mCPO3Xo3U=
Subject key identifier:   44:E7:CE:02:D5:25:2A:CF:5D:4E:AE:E0:2B:65:FE:AD:67:94:39:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CC0FC83AA9C50DA403340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c83f1da-a751-3cf6-88fe-766837dfcf68.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396603
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c0:fc:83:aa:9c:50:da:40:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=0ad515f8-b26e-496d-b790-78df6ed96325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:fb:78:98:27:38:ea:78:d6:f2:87:11:78:12:
                    8d:e2:8b:ce:95:20:cb:17:0b:2a:c6:c2:f1:10:1c:
                    1b:04:b2:37:26:7e:45:36:9d:fa:69:62:df:8e:b5:
                    68:2e:2d:81:53:5b:29:9f:42:1b:3c:14:5b:b4:41:
                    7c:4f:6a:ee:d8:9b:1f:da:39:40:e0:ff:9a:29:65:
                    51:09:b0:fa:96:d9:d3:2b:6d:b4:f7:48:23:58:2f:
                    67:d0:c8:6f:45:ef:12:12:df:9e:e9:0b:65:18:a8:
                    c7:9a:63:57:37:29:de:fc:f4:bb:7a:5d:fc:c3:bf:
                    d0:87:e2:20:8c:d1:1c:3a:e4:c0:46:e6:b2:a7:74:
                    f0:57:da:f3:99:2e:68:52:1c:0e:d7:26:d5:99:3f:
                    06:06:b8:62:fc:c8:83:ba:b3:72:f7:2f:8e:ee:35:
                    9b:7f:8b:91:71:69:7e:d3:67:e0:a5:f1:db:eb:6a:
                    7c:33:0a:4c:56:0a:66:68:57:ac:58:cd:fb:19:43:
                    3a:06:1d:3f:12:03:f5:11:ae:a9:ca:2a:ec:d2:1e:
                    80:0e:1f:76:4e:2e:7b:cf:98:85:00:eb:dd:78:01:
                    7a:5a:92:6d:0f:19:c0:1d:7c:c7:2a:c0:cf:7b:f7:
                    de:97:cb:cd:bf:5e:09:8b:68:53:cd:4e:cc:4e:19:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E7:CE:02:D5:25:2A:CF:5D:4E:AE:E0:2B:65:FE:AD:67:94:39:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c83f1da-a751-3cf6-88fe-766837dfcf68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:88:fd:0b:f2:36:12:69:9c:eb:94:19:4c:d9:21:3c:1f:88:
         66:61:04:b8:01:e9:ae:ba:41:c1:b8:62:44:d3:43:af:0d:ee:
         59:e9:2b:71:69:48:05:12:dd:21:01:cd:83:a3:d4:c2:8f:73:
         c2:a7:9d:19:05:12:bb:a4:4f:a1:a5:1e:80:f5:55:cb:97:70:
         98:2e:cd:53:c0:63:94:19:d8:b0:97:ea:99:fe:d9:3e:ee:fd:
         b9:3e:19:df:d7:10:79:c6:19:a4:b6:2e:62:40:a1:a8:1c:65:
         8e:7f:4f:e9:42:f0:f6:d9:12:38:d6:a1:fa:02:d3:6f:10:2b:
         c0:63:29:64:34:9e:ca:0b:f1:5e:da:72:53:b1:25:c4:6c:8c:
         59:d4:4a:e7:4d:60:d3:1b:d7:5d:70:a4:d1:b7:db:39:ac:96:
         8d:dd:0f:9c:bd:bf:22:a2:3e:e7:d9:70:b3:81:7e:95:25:ca:
         9f:5c:9c:61:3e:04:1f:5a:ff:bf:52:87:82:6a:61:e1:82:b6:
         e8:b6:0c:a4:ec:88:3c:95:86:b7:de:9f:75:7d:ec:7d:26:0b:
         4f:15:50:f7:09:08:73:0b:0a:20:c4:a3:6a:eb:97:a0:75:cc:
         fd:90:3c:f5:f8:09:38:da:1a:30:87:f9:5b:b5:9b:05:b4:38:
         42:5e:83:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:22:28 2026 by rpki-client