Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5194661-dcbe-3be7-9f6b-4e0a6a838fa8.roa
File:                     b5194661-dcbe-3be7-9f6b-4e0a6a838fa8.roa (raw, json)
Hash identifier:          bcQUDQXoR24meFp7VUfBOSYmLotuQoMiK45Zri4JGew=
Subject key identifier:   B1:02:22:6B:F7:EE:79:33:0D:91:00:BD:E3:49:7E:FF:AA:F7:51:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986487046A17609B32B2E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5194661-dcbe-3be7-9f6b-4e0a6a838fa8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36628
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:48:70:46:a1:76:09:b3:2b:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=bfeec81b-1d7f-4cf1-8153-205f22e8f65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:96:27:47:32:30:9a:6f:f2:24:1f:82:95:
                    ae:71:2e:44:2a:af:cb:cd:9e:88:0b:9b:ff:4d:2f:
                    1d:25:3c:19:f4:c5:99:d1:6d:aa:a3:fd:75:84:dd:
                    9c:c6:89:9f:5d:89:32:0e:ff:ee:27:09:a6:19:a6:
                    d2:c8:62:a9:0e:d2:7e:e1:8c:02:42:6d:c9:b8:bd:
                    5f:f7:46:81:ef:58:42:cf:e8:9f:9d:0a:ef:a1:16:
                    71:7a:5e:0d:20:0a:5f:51:d6:cc:ab:a6:a6:89:c8:
                    bf:db:16:40:e4:8d:f4:00:e8:07:2d:cf:7f:89:c5:
                    06:cf:63:85:87:4e:d9:6e:a6:b2:20:90:39:c6:a5:
                    2c:0a:9f:2e:c0:43:9a:ec:32:fc:d8:bd:c9:2d:75:
                    7f:a0:13:10:62:ec:0b:2f:98:6d:0f:24:1b:6a:03:
                    20:b8:e5:be:10:38:5c:89:7f:f9:0f:e1:d4:59:88:
                    9c:14:da:02:0b:be:63:e8:04:7a:3c:f7:7b:ad:cd:
                    50:43:74:81:23:ad:5a:bb:7c:c7:7d:e2:6c:0e:02:
                    60:0b:10:92:9f:25:a6:03:e9:ba:de:48:de:0e:4e:
                    36:f5:3e:9c:1a:e6:d7:99:0c:d9:45:62:9f:46:a5:
                    3a:7c:cd:65:80:dc:1e:00:fe:5f:52:65:1d:05:62:
                    cb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:02:22:6B:F7:EE:79:33:0D:91:00:BD:E3:49:7E:FF:AA:F7:51:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5194661-dcbe-3be7-9f6b-4e0a6a838fa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:65:a0:04:74:1c:c3:b6:84:b9:9b:26:fc:ee:83:e3:73:49:
         59:65:30:21:76:71:7a:d1:80:fe:9d:f6:28:ad:f9:73:38:19:
         50:6e:da:5c:d3:95:f7:47:4d:0a:2c:bf:4a:f5:19:de:2d:83:
         19:dc:10:25:da:76:f1:36:39:f8:56:df:60:46:75:d3:46:68:
         9d:c1:53:3f:b0:19:86:a7:95:f3:1e:95:33:7b:0b:9b:be:be:
         33:9d:6a:20:df:cd:57:ef:d4:6f:05:0a:1e:30:c1:25:ae:4a:
         bd:cd:63:2e:49:7d:16:a8:b8:ab:f0:47:bf:2a:8c:bf:9b:4f:
         68:22:c8:05:c5:36:75:07:d7:d8:6c:6d:97:28:0e:3e:36:61:
         7c:ca:2d:9e:cd:68:ae:af:26:06:62:8d:39:42:c4:65:a9:7a:
         b8:60:67:a4:d1:ab:a4:c0:29:51:a2:01:17:24:e2:46:de:0c:
         b7:35:ac:02:0d:be:38:0d:cf:5d:4e:61:a0:c9:f9:c9:41:1e:
         8b:c7:69:e2:4e:21:b3:16:23:57:5a:ad:58:04:0e:36:9d:ae:
         a5:37:28:d6:0a:e0:03:de:b7:6a:7f:53:b9:3e:32:7e:da:c5:
         88:e7:4e:82:5c:00:43:ba:75:07:dd:ed:d2:07:88:ed:db:09:
         7e:ea:b1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:02:11 2026 by rpki-client