Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1970ca-96d4-3fa4-8770-e7a7da798fe6.roa
File:                     fd1970ca-96d4-3fa4-8770-e7a7da798fe6.roa (raw, json)
Hash identifier:          Td8KddwYnJzgBjgfahkP96ENum4z+KRoeA2S62DjNaU=
Subject key identifier:   87:A1:BE:70:2D:61:D4:DA:D8:2C:8D:22:0D:0C:6A:71:48:E9:93:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F103792EA7CDB1536BFB12C40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1970ca-96d4-3fa4-8770-e7a7da798fe6.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     397211
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:92:ea:7c:db:15:36:bf:b1:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=c874b6bc-66b6-4c90-81e4-3fcd85f68e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:98:b5:7a:c8:f8:25:4b:a1:cb:30:c0:c3:c6:
                    2b:a2:ae:92:eb:97:c7:68:6c:6e:bc:f3:0b:a0:cb:
                    6e:17:d8:54:c2:5f:8e:24:3d:86:d5:b5:20:2a:91:
                    8f:46:f7:93:5a:fa:4a:e7:6c:61:cf:ef:05:bb:78:
                    ac:05:80:3c:a1:47:9d:e7:40:a9:de:aa:d9:80:5a:
                    19:ba:ff:fd:54:e7:b1:49:31:9a:c6:ce:12:43:93:
                    9f:79:e0:5f:1e:9c:a5:61:b6:4d:7f:18:fb:57:22:
                    d3:6f:c1:a7:21:13:a4:0e:ec:0a:81:52:d4:f9:57:
                    76:de:6b:dc:5e:52:1b:3b:ed:1b:ab:90:fd:aa:48:
                    c1:ce:15:b1:4a:24:f8:4a:e6:8d:ad:85:60:30:89:
                    01:f3:00:fd:53:82:85:cb:bc:17:07:45:bf:34:ba:
                    cc:d1:8e:e5:74:c0:c9:15:95:5e:d2:f5:d3:38:c8:
                    9c:0f:45:ef:29:28:b4:c8:35:f4:4d:49:7a:b9:a4:
                    32:78:bf:86:4f:c5:ae:cc:b4:40:fb:13:b6:9c:d3:
                    92:6e:4f:65:57:1c:80:00:21:34:42:27:8d:f4:61:
                    f3:24:01:f2:2d:be:9c:89:1c:25:ac:ca:8f:ae:78:
                    8d:5a:88:63:49:77:c0:35:54:b4:7f:94:ae:d8:31:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A1:BE:70:2D:61:D4:DA:D8:2C:8D:22:0D:0C:6A:71:48:E9:93:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd1970ca-96d4-3fa4-8770-e7a7da798fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:41:57:5c:67:55:af:90:2f:53:ef:14:99:6f:c7:5a:bc:18:
         d1:02:b3:49:4f:bb:b7:b3:fb:94:e7:ea:19:90:72:19:dd:b2:
         8a:12:08:82:16:1a:d9:ac:8e:91:99:e9:81:a7:43:22:5b:a3:
         54:5e:ff:42:9c:51:d4:85:32:ce:9d:b7:59:5b:07:d0:5e:55:
         2e:8a:e3:b9:6e:bd:f2:6a:00:79:08:86:78:3c:49:9b:9e:a1:
         76:8b:c0:4b:7d:51:77:b2:94:c5:39:a8:24:19:31:9f:e5:23:
         3b:33:b7:c9:6d:8a:ea:15:d6:a0:ce:42:58:c4:f6:d5:13:59:
         07:54:f2:e3:72:50:0e:ca:98:b8:3e:39:fa:4d:f8:1b:e9:b2:
         5d:9e:37:f4:71:8d:e7:11:07:ff:e6:18:e1:97:18:11:44:1d:
         1f:7b:e1:46:77:b1:bb:7d:87:6e:51:0a:e7:f2:68:db:ab:4a:
         62:62:f1:a5:2b:a7:4d:60:f5:6a:8f:2f:6a:92:85:a8:16:c6:
         d3:ac:57:66:46:37:13:87:92:1b:d7:28:77:e7:10:09:c0:52:
         74:ce:cb:57:54:ac:7c:9e:d6:ff:bd:33:20:2e:27:55:62:4c:
         52:b0:17:19:66:14:ce:57:b9:54:5e:3c:cc:eb:90:c1:7b:3d:
         71:c4:60:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:31:37 2026 by rpki-client