Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea5cb995-17a5-3692-8824-82293c68330f.roa
File:                     ea5cb995-17a5-3692-8824-82293c68330f.roa (raw, json)
Hash identifier:          WjInTMI63DQfNpw9bX5lb35zl7MlVoazXVXjVY3fHSQ=
Subject key identifier:   5E:C2:5F:E9:C6:F8:DB:00:8A:B7:0F:E7:66:37:A8:F0:68:C9:D1:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06726E29809EF2BFABE45700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea5cb995-17a5-3692-8824-82293c68330f.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     19836
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:6e:29:80:9e:f2:bf:ab:e4:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=c50559b0-bab5-4d26-a912-58fdcee25562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:15:90:53:db:75:62:e5:49:56:62:88:4a:27:
                    b6:be:22:cc:47:c4:53:16:03:95:b2:c7:fa:f2:29:
                    15:a3:e1:18:d8:32:14:3c:cf:71:50:bb:20:6e:db:
                    8f:eb:47:92:82:32:d4:b8:6c:36:bc:44:95:a6:a0:
                    04:d9:6f:35:44:2a:9f:55:f7:49:11:0b:45:f0:db:
                    5c:ac:cc:3d:cf:b4:ab:1d:be:31:5d:15:64:d6:60:
                    b6:08:7c:63:db:89:9d:b1:15:18:02:37:68:7a:f2:
                    a1:26:c8:4f:bc:63:bb:67:8b:3e:49:b2:0e:f7:90:
                    b5:96:1e:4c:ee:72:cd:3c:57:f6:29:5e:19:41:a6:
                    ee:7c:e8:0b:fe:c0:9b:c8:64:b7:ec:e3:b5:ac:1b:
                    84:85:6a:74:bd:fd:d7:36:2e:19:03:39:b0:98:6d:
                    9a:82:ed:70:22:1c:ed:f8:11:c2:27:a7:83:42:b1:
                    c7:f4:95:eb:e5:a0:6a:88:9c:4c:fd:e7:0b:98:5d:
                    b3:02:3d:f7:71:34:75:84:2f:d4:20:64:35:98:f5:
                    25:98:6b:89:f4:7a:32:62:9c:11:3f:dc:c8:59:98:
                    d3:dc:d1:3c:72:0f:60:23:8c:da:99:18:60:ba:7b:
                    40:23:dc:7c:ce:42:fd:1a:47:a7:7e:2d:bc:6b:7f:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C2:5F:E9:C6:F8:DB:00:8A:B7:0F:E7:66:37:A8:F0:68:C9:D1:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea5cb995-17a5-3692-8824-82293c68330f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:70:9b:e7:f2:a8:0e:a0:60:dc:f8:4a:31:ba:15:2a:f3:38:
         8e:c2:ef:07:c6:bb:0f:42:f3:6b:d8:e9:26:d2:ad:55:99:88:
         e6:ba:0b:7c:f2:64:bb:17:57:02:55:ea:72:3e:99:43:3d:e4:
         53:c0:91:80:82:91:dc:0f:8f:28:33:d0:33:15:94:bc:92:7e:
         4a:7f:03:ff:50:16:8b:01:c3:ec:32:d0:26:65:96:0e:b3:a3:
         ce:9e:36:d3:24:83:f2:07:0c:0a:21:8f:f1:4c:f9:ca:b9:0d:
         29:0e:91:13:dd:32:10:72:f0:3b:35:5f:ec:f2:e2:b9:6a:f6:
         59:ad:5a:1a:8b:1c:92:a6:fa:eb:dc:d9:2a:f1:41:18:e6:d2:
         a1:8b:43:d6:0b:cf:fa:9f:d6:e9:e1:ae:0f:47:1e:ad:33:d4:
         e5:58:5b:11:ec:12:c0:60:92:04:00:da:e6:fc:80:89:82:00:
         80:c6:36:88:00:1e:b4:34:f5:c7:09:09:bd:f0:9a:b9:3e:67:
         97:d5:c8:52:4e:ab:0d:83:0b:71:ec:c1:9d:fa:51:8e:a9:65:
         d7:03:6d:8f:b9:aa:c6:f0:b7:67:6d:7e:51:05:d9:aa:ab:a9:
         bb:dc:0b:e3:e9:0c:09:9e:37:82:f0:f2:c8:7f:d5:d1:5a:5e:
         5b:21:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:41:22 2026 by rpki-client