Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa
File:                     8f1333ed-7ccb-3a70-b466-78258419d210.roa (raw, json)
Hash identifier:          T07OpHBPvE6TmunqB9eo5um9KaOa00j5DKiwL90jfP4=
Subject key identifier:   F3:42:AB:B9:A6:B5:0F:98:87:EC:94:5D:2E:A7:49:21:8C:31:8D:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CFF7009B2E51770F037DC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     32651
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ff:70:09:b2:e5:17:70:f0:37:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=4a4c014b-5c37-45a2-91df-dbca6101dfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:95:0c:8d:6a:49:57:77:fb:94:6e:43:eb:ad:
                    83:c6:6e:34:f0:7a:2d:82:11:a8:c0:6e:fe:28:7f:
                    f8:aa:09:1a:9f:df:9a:b9:af:3c:0e:18:fb:69:8c:
                    e2:49:d2:18:88:16:a5:44:37:2e:02:d9:fe:59:44:
                    9b:b6:93:9a:6e:cb:ae:97:7a:9a:19:f9:4e:aa:53:
                    b2:d8:61:84:44:ed:ab:d2:08:e2:93:04:4a:61:46:
                    05:03:2f:50:65:2d:72:b1:ef:6c:91:9e:49:9c:b6:
                    eb:d9:f0:34:31:fa:a6:07:d0:2c:0d:5e:54:e0:07:
                    b5:1a:3e:0c:0a:2e:c1:8e:f1:4f:58:b3:22:31:5a:
                    7b:c0:70:5b:0d:83:63:7d:14:57:3a:28:8e:a8:6c:
                    59:57:97:de:9a:af:96:43:0e:06:2b:8d:ba:8a:d8:
                    06:37:58:20:9f:b1:13:5c:64:77:b9:ce:dd:aa:55:
                    a8:c0:bd:27:ea:d1:b3:92:56:89:06:92:78:de:2c:
                    8b:0b:e0:1c:a1:66:03:42:7e:d0:1a:66:c4:14:51:
                    dc:b3:f0:d5:30:ca:eb:ee:8b:da:9b:e3:7e:55:bc:
                    ec:fe:79:1e:8d:2b:e1:a2:de:e2:69:11:42:31:56:
                    a2:27:ed:9e:3d:90:b2:09:6b:fe:21:d8:36:15:6a:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:42:AB:B9:A6:B5:0F:98:87:EC:94:5D:2E:A7:49:21:8C:31:8D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f1333ed-7ccb-3a70-b466-78258419d210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:2f:c6:d0:05:78:9e:a3:22:f6:44:aa:ab:58:9d:fa:db:23:
         a6:af:62:1f:dc:98:bf:fc:eb:e5:21:5e:54:79:1e:dd:3d:c5:
         04:57:18:9a:ec:fa:34:ca:b0:be:7d:02:62:f0:c5:0c:11:9a:
         b3:cb:57:3d:33:94:55:8e:d8:32:3f:81:22:b8:01:7f:63:a8:
         21:0a:17:61:26:3a:7a:be:0a:f0:71:31:0b:2a:8d:72:24:e6:
         cb:de:e6:83:9e:bd:e8:e1:70:16:8d:a0:ab:b6:fc:af:5d:ca:
         24:7c:43:5f:b0:7f:76:64:3e:ee:f5:87:3d:76:64:ab:bb:df:
         d4:e3:f8:a6:73:80:ad:7e:78:e6:f4:6c:65:f4:85:04:11:22:
         65:f3:b1:25:f6:b6:90:95:44:c9:8b:05:53:bf:17:ac:21:78:
         03:0e:d9:37:c1:3b:c6:9f:12:30:36:b3:7d:bd:ed:ce:a6:d6:
         9d:63:6e:7e:25:e5:61:55:3e:25:b6:e5:47:46:a9:67:a6:2d:
         d5:83:5b:ef:ca:ba:f3:b3:bc:06:be:1a:ce:06:48:b1:5d:cc:
         bc:1b:fa:97:76:93:7c:ec:53:6e:8b:ac:4d:94:07:f6:03:87:
         e6:3f:f7:ff:0f:f0:7e:86:68:f5:c4:7f:1e:54:07:0b:c0:68:
         37:b8:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:17:22 2026 by rpki-client