Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4704152a-3c47-3434-8cfd-d05b571722e0.roa
File:                     4704152a-3c47-3434-8cfd-d05b571722e0.roa (raw, json)
Hash identifier:          QK1vmWNqhSsgK+yhFWdNnJJAwBMqBQSBZMgQVBFMKGM=
Subject key identifier:   DA:41:B6:36:67:41:A1:4F:D7:A0:B8:28:EA:FD:41:74:C2:20:F3:18
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067270844D96ADD1CE880720
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4704152a-3c47-3434-8cfd-d05b571722e0.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396617
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:70:84:4d:96:ad:d1:ce:88:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=9fd26a05-af0c-44f6-84cd-803ef2877e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d0:5c:51:83:ec:bd:ec:db:dc:71:71:ab:ea:
                    af:10:4e:25:11:b2:cf:56:c3:5f:df:14:c6:9a:31:
                    c8:12:a6:25:dd:7a:6c:a1:cc:e8:4e:d4:bc:cc:4a:
                    33:12:b7:8d:fd:62:71:26:cb:9c:7d:f2:58:c3:62:
                    2e:19:81:d3:fb:cd:54:eb:b7:b8:1d:02:31:f7:97:
                    33:d1:b5:62:04:36:6e:65:7b:44:e4:3a:1e:b3:bc:
                    e6:dd:df:69:3b:a5:03:e7:9e:5f:d6:af:29:f3:01:
                    9f:9d:4c:92:cb:4b:79:01:dc:e1:c0:72:90:e7:ad:
                    1a:76:9e:3f:e5:5a:9f:e6:6f:d6:eb:86:42:8c:c7:
                    69:be:6b:11:e1:b4:91:21:34:1a:ff:b4:69:5c:aa:
                    1a:05:f0:68:e9:74:20:a4:71:30:51:30:b8:e6:0b:
                    17:a2:f6:99:fc:34:3c:3f:85:bb:6f:fd:f2:f0:44:
                    9e:6c:5e:27:1e:af:87:5b:97:cf:36:84:28:c3:93:
                    a2:9c:ef:e6:17:96:e5:a1:dd:da:bd:05:73:57:2c:
                    0a:25:22:ba:9a:61:0b:2e:4d:70:1d:46:bd:46:17:
                    13:eb:ec:8b:09:33:de:19:d6:06:3c:02:b7:82:a1:
                    ad:21:2f:a9:1d:82:de:d6:2d:a6:c4:85:63:64:f1:
                    65:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:41:B6:36:67:41:A1:4F:D7:A0:B8:28:EA:FD:41:74:C2:20:F3:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4704152a-3c47-3434-8cfd-d05b571722e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0b:44:80:4f:36:e0:ad:13:97:be:fb:20:66:5a:32:2e:c0:
         fe:b0:77:b7:04:9d:36:e9:a7:d1:ff:25:05:d9:8e:be:19:c4:
         6e:c3:f7:38:fe:d0:88:54:bd:33:54:63:72:e3:6f:94:50:bc:
         8f:3d:83:70:2a:b8:34:15:73:85:1f:5a:db:f3:94:7f:45:ca:
         3a:1f:6d:f4:0a:2c:d2:67:ac:c7:97:3d:de:7a:5f:d7:2c:30:
         62:9f:2a:fb:a7:4c:c5:2a:96:89:2c:d7:1f:d8:9e:b6:cc:13:
         0c:52:18:5f:98:e3:2b:6c:d0:57:4a:2b:11:9d:9f:92:f0:75:
         8a:62:f9:fe:d1:38:f5:fe:01:75:bd:22:9f:99:b5:89:29:38:
         26:bf:14:58:ff:cd:c5:8f:de:2b:b0:28:4f:dd:59:4e:6f:e7:
         74:1d:e6:45:3f:56:f8:41:20:6f:ba:98:ce:7f:c0:fb:1c:53:
         47:35:4f:45:43:a3:cc:a5:fe:37:65:54:af:27:91:ac:90:00:
         e0:d2:a9:18:42:8f:28:34:7d:45:e5:bd:82:22:61:2d:01:82:
         6f:ab:9c:b1:c2:f0:ce:d2:f6:ad:85:1c:c3:1f:f2:e9:1c:ac:
         2c:ce:62:74:62:b9:6c:fa:ba:72:9b:b1:12:09:36:ed:68:39:
         88:68:89:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:50:10 2026 by rpki-client