Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6412a31-7bd0-3e9b-95a8-dcee88f6e8f6.roa
File:                     b6412a31-7bd0-3e9b-95a8-dcee88f6e8f6.roa (raw, json)
Hash identifier:          xKzLlDUWHXJcViWWbl/fAI6mM3bFzz87FZS5Q9V9A/E=
Subject key identifier:   D8:C1:00:1C:F7:64:DF:CE:AD:D4:2E:7F:03:9B:4D:93:F8:CC:A5:57
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0AA232A20778DAFA185A94C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6412a31-7bd0-3e9b-95a8-dcee88f6e8f6.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     396541
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:32:a2:07:78:da:fa:18:5a:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=7419d1fc-de2d-498e-aa9a-94d56e204b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:23:a4:11:3d:0e:21:c2:31:37:1b:67:2e:80:
                    28:a4:45:62:12:26:74:56:0e:96:aa:51:9e:a3:97:
                    1c:9b:87:4f:51:2c:b4:bb:8d:57:98:29:d5:f8:78:
                    f8:6e:95:35:17:d2:85:58:30:d1:05:f8:b6:99:01:
                    dd:77:78:3f:5a:dc:06:c4:f2:50:b9:65:94:1e:be:
                    21:09:fb:d7:ff:95:60:ed:93:f0:4a:2e:af:b5:46:
                    1a:90:78:53:2a:a2:8c:c3:6f:1c:89:ca:73:6b:40:
                    41:8a:c7:07:c3:ac:3b:27:f8:9e:a8:c6:54:b8:66:
                    9d:db:0c:46:8f:0c:12:bc:1e:8d:68:f2:46:63:42:
                    b8:5a:c9:0b:b3:ec:9b:3e:c0:5d:29:9e:74:c0:d0:
                    ab:43:e6:cc:ab:85:77:56:47:38:22:38:7d:2e:23:
                    fe:72:a8:ef:a7:31:ad:7b:6a:b0:81:1f:b6:c8:4a:
                    02:0c:e4:7d:08:dd:fc:d8:33:25:cb:ff:8a:91:03:
                    7a:6d:22:d0:6d:a2:f7:bc:b7:30:ef:4a:3f:b6:09:
                    26:b1:46:36:fd:5e:d1:88:4d:e9:e2:84:b3:49:aa:
                    49:86:dd:a3:29:58:d3:ea:c2:ca:6d:68:96:48:67:
                    67:02:6a:dc:08:be:79:a6:2a:b6:71:91:54:87:f7:
                    94:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C1:00:1C:F7:64:DF:CE:AD:D4:2E:7F:03:9B:4D:93:F8:CC:A5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6412a31-7bd0-3e9b-95a8-dcee88f6e8f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2e:9f:60:0b:c4:ab:2c:0a:f9:5e:56:53:7e:8e:9c:35:f2:
         8e:f4:58:6b:f6:5b:f1:cb:c4:71:50:33:37:97:97:d4:da:39:
         bb:6d:8e:7e:34:f7:f4:5d:97:ff:03:75:3f:f3:b0:65:2b:3e:
         2f:6e:59:65:77:ce:d7:6a:08:3b:6c:a6:3e:ac:ae:69:35:6c:
         10:c9:a1:bc:17:8e:32:a1:48:29:6a:5a:66:8d:0a:65:a8:21:
         3c:e4:3f:bc:c7:4f:cc:c6:08:38:81:a9:4a:cf:3f:63:34:15:
         e3:b7:12:93:c7:d3:b6:9d:0e:37:80:2d:b3:e6:f6:2a:7b:4c:
         19:89:0e:da:05:8b:7a:a8:02:5b:29:04:a8:ac:ab:f5:17:8a:
         2a:bc:4f:ad:58:74:ce:47:ae:a7:b9:ad:df:1f:66:3e:61:76:
         b4:0a:1b:34:cc:07:8e:08:77:f1:35:f8:31:cf:5e:14:0f:69:
         23:d2:5b:34:d7:76:b6:25:2c:2f:8e:c9:27:1f:6a:a1:c0:a0:
         f0:27:f8:b2:82:a7:46:26:c6:3c:f6:2d:3b:24:1b:25:10:67:
         7c:c2:23:17:49:f1:87:ea:31:00:00:58:6c:4b:c9:77:b4:ee:
         61:3a:06:91:5a:6d:f5:0a:23:c4:f6:db:60:3f:aa:81:c4:f8:
         1c:67:78:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:48:55 2026 by rpki-client