Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fb06a1e-154d-3c71-a36a-eead65795a82.roa
File:                     0fb06a1e-154d-3c71-a36a-eead65795a82.roa (raw, json)
Hash identifier:          CGjoFjWrV8gPQyT/ZMYtFpVxNVtBK8lG24hGA7QXEVc=
Subject key identifier:   F0:09:85:59:BA:7D:39:D0:24:51:42:FF:96:AE:F8:04:EB:F4:94:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49869B73B1AFED368B9DDD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fb06a1e-154d-3c71-a36a-eead65795a82.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397194
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:9b:73:b1:af:ed:36:8b:9d:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e0cffab4-a578-42fb-9ba6-71c1b5b3b883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a1:8e:88:ad:31:18:29:55:4c:5a:5f:b2:35:
                    3c:01:4c:80:12:ee:80:64:73:46:29:52:db:d6:86:
                    e1:9f:be:89:9e:36:95:de:ea:b2:0a:d9:b8:8c:d5:
                    04:0f:14:28:d7:9a:fa:2f:53:66:35:1e:55:0f:bf:
                    0c:fd:35:aa:3d:6d:65:4c:b6:63:a9:a3:06:c2:66:
                    75:c2:9a:69:99:ea:a7:9e:5f:53:10:30:82:68:81:
                    58:b4:a1:5e:c8:23:ea:17:99:5b:ef:64:dc:39:c2:
                    61:49:5a:75:c5:b4:13:0f:94:2b:cb:73:c1:cd:bd:
                    95:df:c8:92:aa:5c:71:29:a7:14:c5:33:f6:50:8b:
                    d7:b1:7f:24:cb:ee:c6:1f:b4:8f:3c:5b:49:2f:57:
                    93:e1:4c:53:ba:35:9b:f6:7f:8d:45:58:48:72:05:
                    d7:88:2f:92:26:7b:95:de:07:cc:1e:df:a5:5a:7b:
                    67:d5:59:d9:54:1e:0d:48:6d:07:4f:0c:02:34:68:
                    87:c3:3e:af:20:23:6e:70:cc:9e:0b:98:31:63:82:
                    3b:be:14:14:36:cf:45:48:a1:8c:ee:2a:ec:50:c7:
                    bc:72:31:0a:0b:50:1f:aa:56:de:3a:be:7c:e2:b6:
                    2c:15:ac:e0:24:19:bb:7b:ad:bb:67:88:9a:bb:0a:
                    94:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:09:85:59:BA:7D:39:D0:24:51:42:FF:96:AE:F8:04:EB:F4:94:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0fb06a1e-154d-3c71-a36a-eead65795a82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:01:0f:11:46:f4:19:ba:10:72:a5:c4:2c:49:86:9a:73:b7:
         ba:75:a4:e7:5f:8f:c3:87:01:8f:5d:2e:2d:a6:13:20:d9:8f:
         20:28:80:45:07:b3:a3:7f:1b:24:4f:fa:cb:b0:2d:15:f4:84:
         c7:bc:eb:49:75:fe:ea:44:a3:e7:06:d3:a5:63:f8:39:cb:7b:
         6c:55:98:c2:61:bb:4a:64:19:3f:4b:c5:4b:46:0c:92:89:15:
         be:b3:c1:92:12:ca:ac:86:e0:11:a6:1a:c4:f0:8f:91:42:55:
         b3:72:3d:9f:17:1f:a1:b9:75:93:c5:be:5a:ed:bf:7b:df:ff:
         7d:ae:54:93:ef:30:99:6f:9c:f9:35:23:f5:e4:93:0f:f6:83:
         f4:07:d3:da:09:3b:ea:e9:f2:98:f8:25:ec:84:ec:94:0b:ae:
         3f:a5:39:a2:87:e8:4c:3a:2a:37:5f:7f:35:18:59:01:18:b2:
         d2:53:c9:80:54:4b:8a:e5:06:9d:ad:34:de:2c:18:ba:84:86:
         26:80:5c:f9:11:97:e0:d8:18:fd:39:f2:59:60:ef:08:b4:a9:
         e6:a0:76:10:7f:44:55:df:ce:4f:14:e5:3e:94:6a:8b:13:6a:
         a3:43:fd:3c:e5:c6:ad:28:df:1d:e2:40:7b:82:37:f6:fd:ab:
         e2:c1:61:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:50:53 2026 by rpki-client