Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c2bc7d5-72f9-3376-8132-1dc552155ccf.roa
File:                     9c2bc7d5-72f9-3376-8132-1dc552155ccf.roa (raw, json)
Hash identifier:          0yXVXHcT37dKrrRbjtGHhIAFsDVZxSTbnLSV36iW6as=
Subject key identifier:   4C:BE:DD:AC:C5:37:8C:3D:F3:17:EC:03:0F:1F:BA:01:FB:83:92:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF1821E6658EB29B140535300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c2bc7d5-72f9-3376-8132-1dc552155ccf.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     397203
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:1e:66:58:eb:29:b1:40:53:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=9a7495b5-c598-4f5e-8c88-b20f922654b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:9a:01:dc:1e:68:e8:97:c8:13:9d:e2:e3:
                    e1:92:00:9a:e9:b7:da:09:1a:9b:e2:ae:f4:6d:5a:
                    63:f9:e1:40:fd:e5:aa:d1:35:c5:54:f8:3c:32:b5:
                    70:c0:2d:6d:b4:bb:77:f2:41:6a:75:5d:a7:21:23:
                    8a:ad:58:ab:77:0f:57:6b:32:11:1a:e1:c9:46:f9:
                    f1:d1:ce:de:87:e9:4a:1e:78:fc:62:ab:2c:a3:17:
                    f0:3f:99:1f:36:ab:62:00:91:13:66:ff:1b:c3:37:
                    72:fe:c8:03:a5:5e:7b:ec:09:6e:2c:a9:8a:09:5b:
                    44:63:ea:5e:85:cb:a4:8d:6f:36:2a:eb:92:11:f3:
                    b1:b5:97:b2:64:75:ef:02:6b:4f:6f:58:af:1e:41:
                    86:f0:08:bd:ea:83:7c:fd:34:0d:f7:58:80:b6:d3:
                    63:91:a9:2e:19:4b:3c:a0:aa:22:a9:9c:45:1c:ca:
                    8d:3b:02:76:ce:18:1f:02:f1:b7:71:ee:5b:11:46:
                    85:d0:d7:b7:bf:34:82:a9:bb:4d:6c:2b:ba:55:28:
                    ed:c4:e1:bd:92:9e:26:e3:00:7a:70:1e:2a:1f:13:
                    7c:b5:0a:f9:91:a5:6e:08:82:f2:47:a7:e0:75:45:
                    bb:8e:5f:41:7c:ed:33:ed:ed:19:0b:14:1c:7a:54:
                    a6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BE:DD:AC:C5:37:8C:3D:F3:17:EC:03:0F:1F:BA:01:FB:83:92:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c2bc7d5-72f9-3376-8132-1dc552155ccf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:62:be:67:85:0e:68:37:dc:d4:99:6f:6f:a2:33:5d:84:91:
         7c:5d:0a:bf:69:4b:90:50:4d:e9:26:3b:f9:25:85:c0:19:78:
         17:57:19:57:76:a3:10:b8:6c:b7:93:2a:c9:bf:0c:43:49:24:
         83:a9:fa:29:a9:e4:36:02:5f:fc:ef:2e:db:6c:79:4d:8b:32:
         2e:06:b4:1e:74:d7:d9:31:1b:41:40:bc:cd:50:a1:9a:6e:a3:
         fb:04:d0:e9:cc:fe:33:e1:53:69:cb:65:13:a0:85:ba:15:d5:
         85:75:31:47:db:65:95:39:00:71:4d:53:2c:44:c2:a8:49:b8:
         00:61:64:5b:42:7e:5a:79:78:4c:07:df:1e:e9:b9:ec:f2:d4:
         de:72:3a:19:e6:0b:2a:91:84:81:c5:20:da:bc:db:57:6c:e1:
         c6:67:53:45:38:ed:83:d1:23:46:44:34:e1:f4:a5:e9:18:46:
         68:24:f4:bf:ef:ae:c9:f4:dd:d0:8b:c1:ca:a5:e2:f1:28:0b:
         b0:92:36:f4:e0:db:1c:03:cf:f6:72:c7:d8:be:47:99:fa:56:
         4c:55:c1:82:69:25:1f:12:b1:b8:79:69:b1:4c:9c:18:85:bd:
         2f:bf:25:56:37:04:b1:85:18:cc:10:8a:ac:28:3f:6b:ed:72:
         35:14:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:29:04 2026 by rpki-client