Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fee12b1-52ef-3e51-b367-9a3d642b1775.roa
File:                     4fee12b1-52ef-3e51-b367-9a3d642b1775.roa (raw, json)
Hash identifier:          bq+ImICHqdNvFxOOL8UVcxYM+LjbuUyAWnGBX3Mxdfk=
Subject key identifier:   D0:3C:1C:6D:A9:E3:BD:14:44:75:DF:00:B8:5C:9B:59:34:77:7A:D8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497483E9F4AC9EB75E079138
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fee12b1-52ef-3e51-b367-9a3d642b1775.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396593
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:83:e9:f4:ac:9e:b7:5e:07:91:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=924dccc0-f7db-48ce-9b5c-098da1ae3eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4a:1a:4d:cc:d1:08:76:f1:f3:6b:a1:a0:c1:
                    14:58:a4:7a:a5:65:e2:71:94:81:44:e9:b4:23:16:
                    41:aa:a6:24:8f:b0:22:dc:55:c8:64:83:e7:ba:cb:
                    06:4e:41:a4:21:19:3b:1d:12:65:5a:da:a2:9f:0a:
                    77:ac:fa:e4:66:e2:8b:45:eb:f3:70:12:6d:b1:65:
                    36:f9:d2:61:e4:56:60:90:05:d6:d1:51:5f:4b:c3:
                    cf:e0:5a:5e:5a:6e:31:70:30:da:05:59:0f:ec:bb:
                    0e:d1:5b:8e:9e:4c:71:4b:13:7c:2f:e3:8b:3a:89:
                    39:c6:83:15:6e:79:0e:11:29:ec:fe:00:75:f2:2c:
                    3e:df:7b:e6:6c:d5:27:99:ed:ea:6c:d0:53:53:f1:
                    13:2f:de:f7:98:13:f2:f3:c2:0a:be:eb:ce:a3:dd:
                    56:f1:d2:1e:23:a8:42:8c:da:5a:56:43:6a:59:0d:
                    f7:59:a6:70:95:73:ec:7d:7b:70:4e:6b:e9:4f:86:
                    d4:d9:62:09:97:3d:5e:de:42:1d:f1:26:74:16:ab:
                    f2:5f:42:68:ea:46:e3:37:c2:84:50:a7:3a:a8:ac:
                    9d:1c:88:12:d5:3f:9f:3b:6d:a4:09:09:9a:7a:d6:
                    54:d5:1f:df:1f:4c:a8:41:d5:36:56:e5:8f:68:1e:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3C:1C:6D:A9:E3:BD:14:44:75:DF:00:B8:5C:9B:59:34:77:7A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4fee12b1-52ef-3e51-b367-9a3d642b1775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:d3:72:54:ee:7e:a3:7f:93:d1:82:4b:4c:c2:43:c0:0e:80:
         98:43:c1:d1:11:be:f7:06:96:c5:39:22:0c:60:17:d9:d5:36:
         fa:4b:40:1c:c5:73:73:88:a5:0b:58:eb:26:ea:96:d7:a5:14:
         11:5e:aa:e5:4b:9b:08:d2:cc:be:1a:ba:e0:a2:2d:c3:61:d0:
         fb:b6:da:6f:15:a2:91:a5:5c:38:d9:0a:24:8c:56:b0:4b:b1:
         24:99:1b:2c:38:7e:8a:b9:37:8f:6f:a4:01:4d:5d:e8:9d:07:
         b9:7c:05:e3:9d:70:0b:e4:0d:4b:b9:8a:9a:83:ed:6e:3d:34:
         e6:7f:5c:ff:7e:9f:e1:7f:78:89:47:de:d2:7e:ab:d2:8d:20:
         ba:57:0e:68:4e:04:ee:51:28:b4:c5:ce:64:0c:2b:eb:0f:37:
         31:d6:d4:d6:da:6c:db:28:14:4a:8a:33:e6:e5:75:28:25:1b:
         ce:48:73:16:94:31:07:86:94:6b:5a:f8:63:a5:24:42:4d:9b:
         c7:a0:af:74:b9:be:e8:3f:67:07:94:a3:6f:d9:8c:99:eb:d3:
         f9:77:53:5f:c5:b2:82:22:53:fd:78:8f:47:e5:cb:b1:61:85:
         3a:65:84:fe:a7:5d:71:96:88:27:49:ca:2d:4b:75:c6:ed:7c:
         26:f0:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:21:10 2026 by rpki-client