Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a24bd1e1-1df3-31b5-856a-b0a5d30d62cb.roa
File:                     a24bd1e1-1df3-31b5-856a-b0a5d30d62cb.roa (raw, json)
Hash identifier:          /2OtVkrnnDwHAokWfjA6A1k2nwhNBC3EuYFKaxQm2Es=
Subject key identifier:   BD:5F:7F:AC:F1:B6:0F:3A:98:20:34:60:E5:63:36:9B:1F:C1:C6:2F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F23C280BA9C3428E46FFC0D60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a24bd1e1-1df3-31b5-856a-b0a5d30d62cb.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     36631
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:80:ba:9c:34:28:e4:6f:fc:0d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=9a0fdd6c-611f-4ed9-93ee-f11769d7d321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b8:1b:7a:29:5b:aa:d0:08:cc:4e:fd:0d:69:
                    12:2b:ea:d3:64:1f:fc:25:68:66:f8:59:7f:d7:e9:
                    1d:0a:be:00:b5:c7:5d:c6:69:9d:c6:38:22:8f:08:
                    f5:ab:1a:a3:d4:0b:14:a9:3e:da:29:29:24:a4:ad:
                    77:72:4e:9a:47:81:56:de:2f:6e:ec:69:e7:6c:f9:
                    2d:bb:d0:51:75:02:69:76:b1:09:4f:15:87:19:5d:
                    e8:9f:ed:99:0d:34:04:85:af:73:da:0d:0a:92:20:
                    17:0c:10:6d:77:52:34:61:9e:a4:c4:b6:81:e5:95:
                    50:44:b9:2c:16:6b:85:c7:6d:26:4d:ec:39:23:5b:
                    83:73:f8:6d:d5:a3:21:40:b5:32:fc:66:9d:08:b3:
                    d2:66:76:c7:50:13:ec:42:be:f0:12:3d:46:c0:e7:
                    f8:4b:b6:51:b5:27:50:37:d9:0b:a6:33:17:50:91:
                    5e:74:eb:5f:d0:84:98:0d:45:ab:d6:8e:f6:3c:d5:
                    72:f3:e0:4f:40:10:eb:97:18:f3:27:8d:10:36:a4:
                    50:d9:94:c6:ce:31:fb:68:b4:25:85:b9:24:23:c6:
                    cf:01:83:7e:4e:7c:af:61:d4:ca:4d:f1:ce:01:a1:
                    ce:9c:22:c4:bb:20:c1:97:74:5b:5f:e4:5e:96:82:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5F:7F:AC:F1:B6:0F:3A:98:20:34:60:E5:63:36:9B:1F:C1:C6:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a24bd1e1-1df3-31b5-856a-b0a5d30d62cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9b:e3:5b:fd:1d:47:41:a4:74:94:ef:b5:83:f2:8d:da:4f:
         b3:2d:50:78:82:e9:7b:5a:62:f2:28:13:d7:8a:4e:a0:fb:da:
         bd:55:3a:03:6c:e2:3f:c6:06:ee:ee:c4:d7:91:04:3b:e9:31:
         1f:1b:72:5a:a2:27:28:8b:e2:f6:9e:1b:44:c0:9d:a0:bb:02:
         0f:65:84:f1:27:77:bb:53:c1:e2:10:97:ec:b0:2e:62:91:8d:
         29:d7:d1:e4:89:6c:91:d9:f8:1e:ee:0b:5d:e9:f3:3a:3e:cc:
         15:9a:df:b7:6e:74:a2:62:f3:af:2a:df:b0:93:63:f2:09:17:
         70:99:96:4e:26:dc:c5:6f:54:4e:9a:d8:55:05:16:3a:02:74:
         8e:37:9c:28:aa:2e:88:a2:d0:fe:16:64:eb:bb:37:29:33:59:
         92:93:e9:7d:b7:c0:e0:cc:3b:f3:94:fa:e3:f7:14:7c:da:34:
         60:68:e2:c0:04:d5:1d:65:8f:4a:ba:58:ac:ba:25:b6:b7:1a:
         2a:66:42:2f:5f:4d:9f:30:98:3f:b3:ae:cc:c9:fb:eb:64:c4:
         af:72:6e:5b:18:0a:71:e7:54:cb:be:53:49:96:a0:68:df:7b:
         ed:a0:cd:51:0a:98:82:e0:39:a6:a5:72:37:f2:9a:ab:b5:38:
         27:58:f0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:56:14 2026 by rpki-client