Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa
File:                     36db3a37-3c69-3146-ab84-6135cf19ca68.roa (raw, json)
Hash identifier:          lHteXom0Oif3mSoRCkiyCQBwyXuZNoVCq3m7r0+k3EQ=
Subject key identifier:   FC:C3:08:D2:D6:57:BA:1C:F3:AF:C2:A2:CC:D6:CB:94:41:CC:15:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06728B53D765188F191DF220
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     25485
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:8b:53:d7:65:18:8f:19:1d:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=5d4e539f-81d8-4cc1-9fa9-6813fc85462a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:f1:0c:78:8f:4b:31:14:a9:ce:93:78:c7:
                    60:18:2e:90:7e:d1:27:f4:e8:d7:a3:d0:b9:28:0e:
                    9a:47:fb:c1:3e:64:09:6f:38:a1:70:25:59:27:7a:
                    28:fe:d8:74:6d:ea:94:98:13:e6:3e:06:37:3b:ba:
                    98:cf:f9:8d:23:85:f2:a0:a9:79:23:84:df:fd:ab:
                    41:fe:30:70:f9:8c:e8:d6:3f:4e:a9:a3:b8:51:a5:
                    c2:47:39:f4:8c:97:29:b6:4a:4f:54:54:87:c2:a7:
                    10:ca:b9:fb:43:87:3b:e2:84:da:11:bc:8d:8b:bd:
                    ff:f1:1b:4e:fc:cb:56:6f:7f:2f:94:cf:d0:82:34:
                    db:5f:71:cb:1d:aa:c2:76:fa:fb:c5:20:5a:5f:a7:
                    3a:57:45:fc:69:99:d3:3d:a7:aa:f6:c9:93:83:5c:
                    ab:16:91:ac:4c:4b:e4:a9:b9:40:9a:4d:d3:6e:dc:
                    67:2c:cc:75:02:ce:77:eb:f6:b9:8e:85:93:6f:9c:
                    ad:20:50:2b:e7:bf:03:19:32:40:00:90:d0:50:1e:
                    bf:43:46:8d:9f:d0:5c:ba:49:64:4d:ae:da:72:53:
                    8a:c6:77:67:5d:c4:aa:6c:57:6b:f2:bc:f2:ff:d8:
                    f5:79:df:71:40:2d:a2:9f:56:64:00:0e:0e:31:09:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C3:08:D2:D6:57:BA:1C:F3:AF:C2:A2:CC:D6:CB:94:41:CC:15:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:33:61:34:1b:f0:24:23:b7:47:c9:13:27:88:c2:46:8d:a4:
         dd:37:8d:72:87:af:ff:e3:da:71:c3:4c:51:ac:d4:ac:4e:cb:
         3a:83:ff:8c:aa:66:5b:60:ea:07:5c:60:e0:ce:9f:3d:ca:f1:
         ba:b1:f1:a4:a2:a3:7c:1c:e2:70:ab:70:5c:72:55:97:17:08:
         5a:4c:03:41:5d:65:66:9d:da:0d:0a:e0:d9:9d:e5:cc:4e:62:
         7b:1f:c5:05:ae:83:16:32:3b:f4:28:ec:6c:8d:ff:4f:90:8f:
         7d:7a:3f:11:d8:8d:33:3b:8f:cb:df:d2:58:92:8f:6a:56:11:
         5b:36:8e:41:c7:3f:6d:6d:3a:4d:7e:fb:b1:5c:80:1a:43:55:
         d6:7b:ac:ca:b9:20:11:14:32:de:87:0f:0b:4a:d6:4c:d9:49:
         bb:c5:12:d8:cb:ef:7d:9a:29:9c:35:38:ec:e2:fc:62:40:12:
         c9:30:16:b7:7f:b2:e9:e8:d1:4c:06:4a:49:97:f0:49:9a:9d:
         71:cc:4d:cd:05:eb:26:d8:ba:ca:be:a6:30:63:dd:30:65:4a:
         ae:04:cd:4a:59:e9:6d:90:79:cf:ea:d5:c3:6c:41:19:45:2a:
         c6:00:0f:64:9e:15:9b:ff:ca:2e:8b:a4:5c:21:68:85:af:64:
         31:6a:76:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:06:03 2026 by rpki-client