Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09941b86-8859-3be5-bd99-4ebd81ec999d.roa
File:                     09941b86-8859-3be5-bd99-4ebd81ec999d.roa (raw, json)
Hash identifier:          gPzSmGoD+oMGC6EaZW+36Q7MNUZCSuJQxJQiD2a5z8o=
Subject key identifier:   F4:13:42:F7:97:EC:30:B8:C5:3F:82:A0:42:40:E1:7B:60:90:D3:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0ED23D0A0129562F25F6BB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09941b86-8859-3be5-bd99-4ebd81ec999d.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     21313
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:3d:0a:01:29:56:2f:25:f6:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=ac358562-3e87-4b61-897d-5849dc59ce94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:df:b5:fb:0a:a6:55:76:f6:2f:aa:5d:2b:fa:
                    44:da:b5:af:0e:70:8f:b2:13:89:ed:ea:aa:c8:3e:
                    b8:b1:be:74:fc:2a:32:1c:88:c4:aa:e0:2c:19:3c:
                    c7:52:d1:7a:ed:4b:ac:98:a1:e4:0f:89:ef:5a:87:
                    81:af:21:7a:28:9a:b6:f9:91:f7:2d:26:f3:fe:35:
                    03:0b:f9:fe:e8:63:71:25:0c:74:4b:07:19:37:e1:
                    5d:1a:ff:de:82:6c:52:53:48:d1:ea:36:a1:be:6c:
                    14:17:1e:4c:4c:31:81:e5:62:03:be:b6:e3:94:16:
                    c5:c9:3b:47:4a:e2:46:bd:9b:c9:2a:35:d9:ba:cd:
                    1f:96:42:42:a3:f8:6c:0e:66:6d:5f:2f:bf:04:06:
                    58:b5:f4:60:93:03:5c:f0:cd:26:aa:79:d1:d6:2c:
                    86:fc:fc:d3:49:b9:d5:e6:aa:3c:b0:cd:d3:cc:7a:
                    d3:85:91:5a:37:07:f9:fd:b3:38:e2:b3:b4:51:27:
                    8c:d9:38:1b:c5:4c:6e:2e:15:19:a2:1f:98:c8:72:
                    d5:f4:71:5b:a2:fd:8a:29:ea:18:93:17:3d:73:1d:
                    a4:0e:c0:ec:19:c6:b2:da:d2:4d:dc:0d:d5:66:96:
                    33:1d:18:d4:fd:21:d8:ef:f2:5b:eb:fc:97:2e:53:
                    43:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:13:42:F7:97:EC:30:B8:C5:3F:82:A0:42:40:E1:7B:60:90:D3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09941b86-8859-3be5-bd99-4ebd81ec999d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:28:2b:99:01:ea:a4:b8:e3:90:f7:69:67:67:44:a1:ad:
         85:ab:4c:af:02:55:99:c9:fa:b4:81:ea:98:07:2f:6a:8a:7d:
         3f:f7:03:21:55:b3:bf:84:0f:e4:d1:45:88:8e:e9:e2:9c:87:
         82:36:4b:58:30:3c:b7:bd:ff:f1:5e:de:d0:96:2d:96:53:66:
         2d:97:0c:cc:99:9f:f1:7f:fc:ef:f4:a8:2e:6e:b9:f4:60:71:
         cc:38:06:13:5d:75:23:23:b2:94:d0:9d:75:d3:6e:a1:a9:47:
         de:da:e2:d6:ad:49:17:ce:8b:a5:38:be:bc:51:5d:c6:cf:6d:
         72:b4:70:f2:5e:57:f2:f6:a0:25:c4:eb:ae:31:0a:ac:5e:44:
         0a:83:a8:d3:b3:1c:39:e6:5f:ec:5d:64:fa:17:e2:3f:01:f1:
         07:a5:51:b1:d6:86:ea:64:e1:40:ab:09:0b:12:da:01:f8:ba:
         32:5d:98:08:56:70:e4:9a:cc:b9:42:dc:59:65:b2:bb:c1:0e:
         07:9e:c6:df:54:85:da:7b:f6:63:57:ac:d8:71:75:bd:0c:9e:
         ee:8b:31:b4:f4:ea:f1:96:1e:c4:37:06:e1:31:00:a8:41:6f:
         56:77:43:80:a0:bd:8f:09:38:10:05:13:56:be:66:ab:d2:e9:
         9a:f9:5a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:50:55 2026 by rpki-client