Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53757ec1-1252-3302-aa49-c6f3c13e7fe9.roa
File:                     53757ec1-1252-3302-aa49-c6f3c13e7fe9.roa (raw, json)
Hash identifier:          SawTbOyMxcSHDQq4GPqikY7XSSdlygpJO38DfkeL8K0=
Subject key identifier:   28:94:A6:A9:1A:7C:3A:ED:27:97:41:22:A9:3D:CE:E6:F9:15:06:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727E9BFAEA4D9DA6A39AD0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53757ec1-1252-3302-aa49-c6f3c13e7fe9.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396580
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7e:9b:fa:ea:4d:9d:a6:a3:9a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=7855e1ac-dc79-4de5-829c-3c4bce47c99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:62:6b:bb:1e:28:1f:f1:b0:ef:27:11:d7:
                    a4:e5:bb:ba:1e:09:7e:dd:8b:50:7d:a2:55:d1:cd:
                    31:3e:4d:66:7c:cd:af:b4:85:6b:34:a8:c3:26:ab:
                    cc:b5:70:63:35:fa:c5:b3:7f:89:82:d4:6a:87:49:
                    3e:92:ef:a2:31:53:96:91:ac:c7:ca:d6:8a:3a:c9:
                    fa:ea:16:ce:24:40:c5:41:9d:5e:94:13:68:ab:2f:
                    69:ad:47:20:c9:e2:af:9b:40:e5:41:3b:ee:e8:22:
                    51:57:b7:68:61:f1:f3:3f:a3:1b:39:2b:a3:c3:f3:
                    7f:7c:1d:40:4f:25:2d:d2:8e:57:20:c0:93:6e:85:
                    26:e6:45:f1:22:46:10:cf:be:32:27:f7:0d:4f:00:
                    03:49:f8:32:e1:fc:08:6c:50:b5:f6:d4:03:d8:2f:
                    1e:30:3f:aa:a8:93:0b:18:7f:07:7d:d6:f1:60:9e:
                    7b:f3:ce:b3:4b:a0:3b:32:9e:83:8b:02:63:9c:8c:
                    a7:32:53:9b:b9:cf:79:f3:7e:37:c1:18:ae:c9:15:
                    8d:a2:36:5d:ca:1a:a9:93:ec:53:de:bd:b6:90:4e:
                    49:c7:b6:0c:d6:1d:65:26:8c:a4:d5:bf:46:25:89:
                    2c:01:48:a6:81:18:3b:5a:0c:a8:b4:5d:b8:2f:10:
                    16:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:94:A6:A9:1A:7C:3A:ED:27:97:41:22:A9:3D:CE:E6:F9:15:06:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53757ec1-1252-3302-aa49-c6f3c13e7fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:80:17:10:a5:42:7e:4a:2b:70:bb:26:29:bc:cc:d3:2a:1f:
         80:82:c8:49:54:e1:4b:dd:2f:9f:ad:ad:23:01:fd:62:fd:e3:
         18:ba:8c:d0:cf:90:90:91:99:c7:21:13:96:ed:03:fe:e2:de:
         11:32:43:09:89:f3:39:50:2b:2b:34:24:42:49:81:0d:51:ec:
         e9:1f:ab:6d:45:b3:19:21:3d:49:e3:f6:ec:31:ca:64:a8:6a:
         ef:4f:68:e6:af:e9:6d:14:c8:14:d7:dc:df:cb:86:2e:10:15:
         d9:0d:5c:79:18:f8:eb:3a:5a:3b:a8:5f:0f:e3:c5:de:04:07:
         c4:04:ba:7c:7f:df:81:8e:e6:57:75:9d:f0:b7:18:d1:42:df:
         53:a5:56:ea:fe:ae:0d:08:1f:88:7d:64:c0:93:72:a3:a3:4a:
         c9:35:9e:85:9d:6a:64:a6:42:49:99:8f:f2:2c:1a:12:47:27:
         c3:27:3b:3e:32:33:2e:9d:4a:30:22:27:29:87:56:af:76:c0:
         2d:47:9a:d5:2a:77:b3:43:c1:01:13:f0:65:e1:c7:58:44:ae:
         d7:1f:bd:37:ad:05:57:82:ce:e7:50:99:d4:80:f9:15:d4:de:
         e2:a9:e9:ea:d5:72:1f:f8:9a:85:62:b3:28:54:bc:64:b4:5b:
         05:37:90:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 20:48:36 2026 by rpki-client