Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bd38c89-19e5-3687-bde1-bacdb1bf7b97.roa
File:                     1bd38c89-19e5-3687-bde1-bacdb1bf7b97.roa (raw, json)
Hash identifier:          1baoscA8IYY4o0TI/CU0theEkkmAVB3SOh1WbtBoLEg=
Subject key identifier:   FD:B9:1A:25:C9:71:E5:AC:FA:2E:84:B9:A2:51:C9:D0:70:30:1C:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F15CCFA95CF0174435AB62880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bd38c89-19e5-3687-bde1-bacdb1bf7b97.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     36622
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cc:fa:95:cf:01:74:43:5a:b6:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=fe390503-80ca-4e42-8584-b7b023748e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:06:07:e2:2c:f4:4e:e8:c5:03:65:9a:11:
                    65:b9:00:21:93:43:bd:8f:f0:6c:48:15:49:d8:ab:
                    89:ab:e6:9c:27:8c:cd:3f:fc:17:06:51:1d:db:f4:
                    a1:05:7e:6d:9e:66:9a:99:62:c5:c0:ff:4b:de:b4:
                    24:f1:b2:6d:ff:8b:ff:6b:5c:f5:86:97:21:d2:2e:
                    8a:fa:93:7f:cb:ae:0c:16:a4:04:71:4c:7a:34:9d:
                    60:d4:f8:35:69:d4:c7:03:33:79:f6:f8:d7:04:1c:
                    c3:97:43:11:2a:f3:5d:cb:5d:8f:e2:e5:f3:8f:93:
                    0e:a3:6e:80:ee:b5:d3:43:60:69:0b:05:52:ab:52:
                    3b:2a:1c:19:7c:c7:9f:69:72:f8:22:6a:99:f7:90:
                    22:21:29:56:1e:b5:6b:f1:78:27:2f:fb:e6:b4:6e:
                    dc:ca:1c:82:a3:28:ed:96:3f:fe:ab:47:e7:90:86:
                    6a:e2:c5:db:12:e0:c8:b9:73:d4:55:79:1f:5a:86:
                    a6:e1:0b:ad:37:b2:72:ce:55:25:c8:85:c9:f6:ea:
                    16:b3:1e:d7:09:97:29:4a:c6:fb:95:0e:78:2d:2e:
                    08:d0:5c:d0:1f:0f:ae:00:a4:4e:26:b4:c4:82:ba:
                    25:f0:b5:f6:78:73:65:2c:16:1a:8b:e4:08:ed:52:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B9:1A:25:C9:71:E5:AC:FA:2E:84:B9:A2:51:C9:D0:70:30:1C:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1bd38c89-19e5-3687-bde1-bacdb1bf7b97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:fc:31:ed:2d:19:41:7d:e9:09:d6:a1:7c:eb:c9:19:b1:
         02:d3:c7:0e:cb:c8:ea:e7:52:6b:ce:d7:6e:b3:e6:56:09:73:
         7a:d8:64:0a:da:92:c9:3f:a5:b9:38:e3:64:d2:85:ac:7c:8d:
         33:44:0b:46:6e:94:d1:9a:1c:22:7d:1f:98:00:bb:6a:6b:d0:
         91:33:86:57:fb:bc:37:93:53:42:25:75:a9:67:c6:61:a3:ba:
         75:19:36:60:9a:d9:35:e3:49:05:11:2d:a5:ff:fe:45:5d:e8:
         0b:5a:34:1d:ac:b7:f7:8d:37:d0:87:35:6e:8e:c8:27:60:13:
         3c:08:b3:49:a3:38:a7:1c:51:f9:2c:91:3d:77:96:4b:6c:c4:
         e2:2a:9b:d6:04:6e:60:63:3d:95:c4:c0:7b:f9:2c:c6:71:b6:
         7b:a8:77:ef:bb:8c:a7:9c:27:0a:a9:cb:ff:bc:e0:02:71:ec:
         9b:49:c0:79:40:ee:f5:f7:5f:55:66:a3:4d:0a:f7:ce:ce:a6:
         0a:41:37:1c:17:c7:63:0d:2c:5e:ce:ea:4d:c3:3a:8f:ba:aa:
         25:63:28:d7:fc:50:4a:38:17:48:e0:24:78:80:d0:23:91:6d:
         e3:a2:5d:79:a5:f6:eb:6c:2c:19:20:da:96:67:27:58:68:00:
         a3:3f:eb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:27:24 2026 by rpki-client