Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b90f82f-a495-3d0c-876f-28fd782727a2.roa
File:                     4b90f82f-a495-3d0c-876f-28fd782727a2.roa (raw, json)
Hash identifier:          FTfkVR9yHQcSM8wRrh6bOQwN3AHu5K2mRGel0rb3EQ8=
Subject key identifier:   9F:73:86:87:58:C7:5B:0B:28:BF:1F:D6:44:9C:36:3D:D1:8A:81:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4C3D5B364EC34274EBC46D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b90f82f-a495-3d0c-876f-28fd782727a2.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     396587
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:5b:36:4e:c3:42:74:eb:c4:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=2d1f5adf-2f9f-4ab9-9a55-4df9dc4dc749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:df:b9:10:62:38:14:59:7f:3a:8d:68:93:e6:
                    5e:f9:26:2c:10:3a:46:66:39:64:bf:31:be:9a:c5:
                    64:ce:44:24:ea:e4:a9:e7:0e:da:ea:03:e5:42:fe:
                    ad:d0:13:d2:2a:6d:20:6c:fc:0a:64:95:02:27:de:
                    26:ce:a0:7f:e8:c0:59:23:ba:e2:5e:c2:a0:fd:00:
                    5a:9c:5d:ff:0e:44:b7:67:89:fc:c0:13:35:99:60:
                    30:5b:aa:f8:de:8e:de:1d:d0:74:e9:5a:90:4b:5f:
                    df:2e:75:35:51:08:d9:68:c3:b6:7b:a6:84:8c:32:
                    0f:af:84:e5:58:44:68:c3:87:f3:dc:d3:77:6b:ac:
                    84:cf:0b:22:69:89:ec:af:8b:af:a0:56:97:c6:a2:
                    e8:c4:70:6a:f9:ec:c7:88:c7:5c:35:49:0f:7c:cc:
                    e3:b4:bd:6c:b3:99:19:a8:51:55:03:7b:ad:eb:90:
                    3c:c8:36:8b:29:58:aa:fc:6c:d8:06:7e:4e:f8:91:
                    ea:ea:cc:eb:7c:13:c8:c8:6c:17:39:5a:b1:9f:29:
                    63:04:cb:77:d9:e1:08:dc:d5:0b:53:84:29:5b:87:
                    d1:a6:67:05:96:75:e3:01:d1:d6:82:ad:c8:4d:ff:
                    c3:3c:4f:7f:57:fa:ca:fb:c3:dc:64:a9:86:6b:46:
                    57:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:73:86:87:58:C7:5B:0B:28:BF:1F:D6:44:9C:36:3D:D1:8A:81:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b90f82f-a495-3d0c-876f-28fd782727a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e2:56:85:02:d9:80:1a:68:07:68:6a:b9:24:22:76:1f:cc:
         ab:3b:59:d0:a0:6f:c7:f2:9c:1b:6a:5b:87:d5:ab:a3:97:46:
         6e:ee:12:2d:4b:ca:a1:f8:dc:55:fc:9b:10:d0:d5:82:e2:84:
         a4:60:a3:44:05:06:67:62:08:e2:73:a5:6f:d3:4d:e8:a6:3e:
         6d:f5:af:e3:de:00:eb:fe:78:c3:81:35:3c:0f:e9:d9:f2:9b:
         94:15:9f:8f:16:e3:0b:b3:2a:7b:95:c5:07:d6:5a:7e:29:51:
         f6:c2:da:8c:ca:44:f2:10:6b:5c:30:7a:79:57:ae:27:78:36:
         91:3d:44:c0:e3:a3:47:76:41:f4:a7:85:b4:2b:31:7d:12:19:
         b1:f4:d8:ff:90:e8:12:3d:02:26:e6:9c:dc:dd:ab:be:bf:13:
         fa:d6:f4:d5:90:61:76:f2:ca:fa:b2:22:8b:72:ed:05:7d:2d:
         e4:71:96:8c:87:00:43:6e:3f:27:0e:f7:87:86:15:1f:00:5e:
         40:31:8b:e3:f4:58:1a:21:2b:a2:20:d1:da:1e:e6:c0:d4:43:
         79:a6:ec:6d:29:0a:b9:13:44:c5:97:39:f4:5d:cd:c8:e9:78:
         a6:22:80:77:86:40:5a:ea:08:22:cb:2b:d9:bd:7a:17:eb:ef:
         0b:33:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:42:05 2026 by rpki-client