Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58934b2-aafb-394b-bb48-efc577ca6e88.roa
File:                     e58934b2-aafb-394b-bb48-efc577ca6e88.roa (raw, json)
Hash identifier:          /my/xPkMetqM7qUupkjUj7jGUlFvpKFPVZNDXTvHVe8=
Subject key identifier:   DF:78:DF:19:58:03:23:99:ED:5D:32:7A:4B:C1:AC:6A:9D:3F:E3:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0ED23CB199A32AB512CDBD48
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58934b2-aafb-394b-bb48-efc577ca6e88.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     36627
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:3c:b1:99:a3:2a:b5:12:cd:bd:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=4973bfbc-9027-47c4-bc9e-b21f177b4b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b2:ad:00:13:25:c4:68:a0:d4:ea:20:96:e0:
                    cc:19:99:5b:06:2b:1d:3b:d4:dd:4f:14:81:bb:52:
                    94:6d:3e:86:90:7d:5a:18:7a:27:c2:26:4e:ed:5e:
                    3d:be:90:ee:2b:6b:4d:54:7d:98:5c:e5:0b:46:b7:
                    5b:c7:87:99:0f:7d:9f:0a:3e:3c:5a:3a:a6:c5:96:
                    49:74:f3:f7:3b:8a:cf:65:78:1b:a3:2a:ec:53:bb:
                    67:1e:39:c3:60:09:62:88:3f:c1:24:f3:4f:7a:7b:
                    d4:33:b2:ca:21:2b:96:10:94:21:3f:23:ba:eb:69:
                    85:08:10:1d:7d:1c:77:4b:8e:59:d9:65:d0:93:54:
                    e2:27:f0:70:53:a0:8b:ab:c9:0c:83:91:cf:60:90:
                    92:2c:84:58:23:a3:c2:3b:9e:6f:81:aa:30:d6:20:
                    ba:9a:86:07:e6:da:11:6d:02:67:69:99:12:6c:92:
                    c0:8f:74:53:96:a5:8d:c4:1f:2a:ea:27:a7:b2:81:
                    96:3e:9a:79:cc:aa:fa:52:aa:e0:da:a6:0e:4e:3c:
                    40:9e:07:8c:55:87:a7:3c:2e:80:c8:fa:50:5c:cd:
                    3b:6c:d1:97:6b:e3:17:92:cb:8a:a8:ed:6c:02:83:
                    fc:46:a9:6e:55:f7:46:97:cc:ee:cb:03:05:35:eb:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:78:DF:19:58:03:23:99:ED:5D:32:7A:4B:C1:AC:6A:9D:3F:E3:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e58934b2-aafb-394b-bb48-efc577ca6e88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:bc:86:16:fd:5e:f2:bc:8c:e7:07:8b:ac:2c:e9:34:97:b7:
         e7:ca:1a:2c:7b:eb:3f:75:d8:7a:d6:72:91:eb:9f:ba:44:16:
         f7:f4:12:87:3c:80:0e:bd:58:87:29:25:e3:ff:b1:16:d7:cb:
         ed:65:90:0c:f1:0c:3a:4b:e1:17:f2:c4:ce:eb:7c:21:03:cd:
         8e:4e:e3:7a:d7:bf:d3:09:13:06:43:90:93:2d:11:5a:fd:ad:
         18:a9:95:ce:bb:1b:b9:ea:2a:91:68:3d:37:54:7e:b9:36:8b:
         d7:9b:9c:3a:b8:5d:89:a5:14:35:41:74:44:b6:fe:bc:ec:8c:
         21:46:c3:57:f6:87:32:d5:48:6b:3e:f2:ea:e8:13:fc:24:7c:
         38:b1:d4:4e:05:85:73:6e:bd:a5:4e:bd:26:72:f8:7a:55:d0:
         5b:c9:fe:38:86:40:15:ea:e5:49:02:0a:33:f7:13:4c:27:bd:
         4a:7d:86:dd:7f:32:c0:fa:24:a7:d3:96:73:f5:82:18:9c:b2:
         eb:ee:7f:87:bb:f1:63:01:2f:70:70:d5:5b:4b:f0:5e:f5:1e:
         2a:58:0a:b6:d8:f4:35:80:dd:0b:29:47:a1:21:d6:79:47:63:
         1c:47:8a:7e:d4:0a:bf:27:b3:6e:e8:0a:b2:0d:03:c4:40:73:
         65:a0:11:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:41:12 2026 by rpki-client