Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa
File:                     dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa (raw, json)
Hash identifier:          FKDMpDgyLuQrQM3b/qvLqM46tvVy9ZKYiwTO0Yxpfe4=
Subject key identifier:   82:07:C3:08:86:F1:0F:34:86:39:15:78:DD:CD:3F:80:00:C2:60:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF182215DD0878FD494834960
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     396612
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:21:5d:d0:87:8f:d4:94:83:49:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=8edfb374-ba28-4c92-971c-2dfb5eae1ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:e5:b4:3f:ea:b3:7d:5f:77:bb:56:5d:fb:
                    d3:fc:5b:4a:4c:25:0e:ce:9f:b0:45:f4:89:57:f9:
                    78:3d:53:97:81:2e:0e:2e:16:74:c3:16:f1:e7:38:
                    d5:3d:d0:05:92:18:70:da:7b:ff:1f:76:58:a1:1e:
                    7f:66:e1:4a:a2:d5:ab:f9:ed:8b:39:c3:5d:5e:14:
                    8e:6a:41:41:55:21:45:14:95:54:b7:2b:70:dd:a9:
                    8e:c5:53:78:6b:55:43:f7:9e:de:12:82:ac:ee:31:
                    2b:0d:cc:d7:a5:fd:d7:53:f7:d2:15:a2:b1:38:be:
                    03:84:0a:29:6c:ec:e8:bc:9b:2a:fd:f3:40:1c:a5:
                    a0:8b:c8:2c:20:c9:6d:a4:9e:0e:e8:bc:da:3b:aa:
                    5f:22:0c:58:69:87:d7:7e:10:77:67:4e:74:8b:9b:
                    63:01:a7:e4:7f:72:9c:e7:2b:72:84:18:87:6a:c6:
                    e1:9a:b3:30:24:d7:87:aa:41:fb:a0:fc:35:6d:85:
                    ef:75:c3:83:42:ed:d3:87:55:82:61:22:e3:d0:5c:
                    ad:3b:42:7f:61:3b:35:52:c8:41:ec:39:2a:c6:93:
                    f5:e8:ba:cf:0a:06:0f:a7:d1:61:3b:f9:45:f2:dd:
                    55:b9:4f:d8:3c:7c:dc:ef:24:5b:43:cb:23:ec:a9:
                    ea:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:07:C3:08:86:F1:0F:34:86:39:15:78:DD:CD:3F:80:00:C2:60:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc0dded1-7211-3c87-bb88-c2a0da76db5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:7c:2b:5a:59:84:6a:3e:52:c4:06:75:39:48:3c:ef:e4:d5:
         36:ab:4b:f8:19:63:f9:d1:68:4c:1f:f1:d7:df:e3:e5:85:8c:
         c1:2e:1c:48:e6:12:7d:9e:0e:5d:00:bf:22:15:3c:d8:de:9c:
         18:e6:38:f8:3d:25:40:64:43:ab:e2:8b:df:94:d2:e6:7a:e9:
         6c:38:2e:69:b0:8d:b2:0a:76:57:8a:94:0d:0e:a2:5d:bd:8f:
         5c:01:d4:2f:34:c8:b0:8d:68:0c:e8:3d:4d:59:87:b3:36:1b:
         ef:52:80:56:8a:88:3e:d1:82:36:f7:79:bf:61:04:6a:3a:11:
         51:b5:85:cc:a8:cb:19:b5:d1:20:7c:06:0f:dd:b5:41:7e:83:
         37:b1:aa:bf:92:d8:7c:79:92:47:de:41:e4:5a:1c:13:85:55:
         da:b1:89:ed:6f:87:21:e0:f8:51:7f:df:bf:6e:92:8d:46:a1:
         dd:00:d5:ca:1a:8d:64:fc:a0:e2:a1:5d:03:ae:14:70:02:1f:
         fe:2c:51:20:25:fc:ca:56:22:e5:b3:d0:6c:d4:63:f5:97:9f:
         f8:17:64:21:ec:0b:6e:62:f7:ba:35:83:e3:77:61:23:77:0c:
         bd:8e:d6:51:5a:98:d4:6f:ec:9e:b6:6b:46:48:a6:c4:45:77:
         b1:f6:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:11:33 2026 by rpki-client