Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa
File:                     8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa (raw, json)
Hash identifier:          K2hGxU35MAQyhXlR685j59YGHolkoeLF9Ia91mjlarI=
Subject key identifier:   31:2D:D4:5F:78:9C:BC:B6:35:59:7D:40:CA:8A:78:D5:82:4E:1D:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7B7B86E725085A61C2780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     36630
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:b7:b8:6e:72:50:85:a6:1c:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=676cf987-d1d6-4aa8-adc2-7cddb3ce5ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:65:49:c4:4d:aa:99:8d:70:2d:6c:54:0c:31:
                    96:0c:9f:c8:4c:f8:6f:45:78:e9:f3:c7:20:93:a5:
                    95:8a:bc:cb:6d:b2:55:85:dd:8e:45:b2:c5:6f:99:
                    9b:e0:55:3c:4f:82:f1:f5:54:17:1c:bc:c4:db:da:
                    8d:c3:bb:e3:b1:23:19:d0:82:81:96:ee:af:cf:3d:
                    cb:8f:b0:20:74:53:69:f5:a5:21:b7:d5:d2:e6:cd:
                    bb:dd:0a:b7:fd:2d:01:6a:d2:8f:2e:e6:be:3a:91:
                    27:e5:7a:88:7e:4d:55:dc:2d:96:76:1a:79:76:e6:
                    84:4b:c9:0d:ce:df:eb:80:ed:05:a5:f8:fd:96:fd:
                    aa:fe:0d:76:53:6f:16:49:1b:98:91:66:aa:95:3f:
                    a1:60:06:ec:2f:b8:93:ae:4f:24:46:fc:e5:18:c8:
                    3c:01:8f:55:09:82:04:58:88:4b:16:df:ef:40:20:
                    5a:b2:09:37:b2:99:4e:ae:3f:df:d5:19:e2:ab:97:
                    40:47:eb:d3:12:df:7a:93:ff:da:41:a5:54:79:b9:
                    84:2e:07:01:9f:be:aa:d4:ff:30:03:f8:63:ed:85:
                    7b:c1:fe:b9:f8:20:8d:02:0c:45:b1:3c:c0:bc:bb:
                    10:1a:a7:d0:39:39:f8:7e:7b:6a:a5:22:1d:52:d9:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:2D:D4:5F:78:9C:BC:B6:35:59:7D:40:CA:8A:78:D5:82:4E:1D:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fe88e4d-4b67-3eba-9afd-8a2e81c32bc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:da:07:a7:1e:05:c1:9b:a1:91:1e:45:f2:54:e0:88:00:79:
         df:3d:26:92:77:70:33:87:e7:92:75:20:ef:92:b4:bf:c7:7f:
         56:05:f7:3d:a2:c9:56:f0:86:8b:85:7d:c5:6e:32:be:29:ed:
         b2:1e:b4:99:4b:fc:6a:4c:be:0c:40:58:04:a6:2a:a0:51:1c:
         a1:1c:22:3c:49:4b:26:f3:00:fe:af:74:b0:25:c5:5a:70:07:
         9f:6a:57:f3:c0:21:b6:1f:ad:79:66:72:fe:63:ab:b5:74:e8:
         46:98:fe:ee:7d:79:f7:07:88:79:2a:b1:b5:13:9b:91:4e:4a:
         5f:00:ef:49:8f:65:7b:a0:ad:d9:98:7d:30:48:18:7d:55:ac:
         ed:5e:c8:30:ca:89:25:b4:73:eb:c8:12:90:03:28:f5:a7:5c:
         68:e0:1a:33:a8:ca:8a:6d:ba:4b:70:c8:0a:66:69:5b:50:18:
         6f:ee:87:03:23:5f:11:f9:2d:d4:dd:61:82:ad:96:6c:63:6b:
         75:97:e9:48:ab:69:86:78:83:24:34:65:76:81:f0:e0:c4:f0:
         45:c0:6c:9e:b7:f7:d5:38:d6:cb:36:ef:65:fd:f8:a9:90:3f:
         9d:f7:be:d2:e7:7d:59:a4:f9:16:7b:b8:6b:87:76:e4:80:fe:
         17:52:29:81
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE8cx7e4bnJQhaYcJ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk
Njc2Y2Y5ODctZDFkNi00YWE4LWFkYzItN2NkZGIzY2U1ZmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGVJxE2qmY1wLWxUDDGWDJ/ITPhvRXjp88cg
k6WVirzLbbJVhd2ORbLFb5mb4FU8T4Lx9VQXHLzE29qNw7vjsSMZ0IKBlu6vzz3L
j7AgdFNp9aUht9XS5s273Qq3/S0BatKPLua+OpEn5XqIfk1V3C2Wdhp5duaES8kN
zt/rgO0Fpfj9lv2q/g12U28WSRuYkWaqlT+hYAbsL7iTrk8kRvzlGMg8AY9VCYIE
WIhLFt/vQCBasgk3splOrj/f1Rniq5dAR+vTEt96k//aQaVUebmELgcBn76q1P8w
A/hj7YV7wf65+CCNAgxFsTzAvLsQGqfQOTn4fntqpSIdUtm7zwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDEt1F94nLy2NVl9QMqKeNWCTh0vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGZlODhlNGQtNGI2Ny0z
ZWJhLTlhZmQtOGEyZTgxYzMyYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEg
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA/2genHgXBm6GRHkXyVOCIAHnfPSaSd3Azh+eS
dSDvkrS/x39WBfc9oslW8IaLhX3FbjK+Ke2yHrSZS/xqTL4MQFgEpiqgURyhHCI8
SUsm8wD+r3SwJcVacAefalfzwCG2H615ZnL+Y6u1dOhGmP7ufXn3B4h5KrG1E5uR
TkpfAO9Jj2V7oK3ZmH0wSBh9VaztXsgwyokltHPryBKQAyj1p1xo4BozqMqKbbpL
cMgKZmlbUBhv7ocDI18R+S3U3WGCrZZsY2t1l+lIq2mGeIMkNGV2gfDgxPBFwGye
t/fVONbLNu9l/fipkD+d977S531ZpPkWe7hrh3bkgP4XUimB
-----END CERTIFICATE-----
Generated at Tue Sep 22 13:08:25 2026 by rpki-client