Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6922738d-5849-376c-a41e-1d4ea8843d8d.roa
File:                     6922738d-5849-376c-a41e-1d4ea8843d8d.roa (raw, json)
Hash identifier:          xGRTI6p0FJpGGFevT8fTSDZx3F9u132Y/ox5odbIAKo=
Subject key identifier:   DC:84:5B:34:4C:C8:42:AB:B3:03:2B:CA:FE:27:7F:29:19:E2:59:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EFCACE6894A0A115C0AAC7500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6922738d-5849-376c-a41e-1d4ea8843d8d.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     396592
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:e6:89:4a:0a:11:5c:0a:ac:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=5626ae98-79df-4f22-9f63-5e4787db8f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:dc:f5:03:4e:a8:60:70:02:22:95:d9:bf:ab:
                    59:6a:eb:8f:72:7f:7e:98:d4:21:37:09:78:1b:5a:
                    a0:31:e6:f7:18:28:bf:c5:94:e7:98:b8:0c:7f:a1:
                    37:74:a3:03:a6:39:2e:84:6c:20:8e:2e:cd:a3:94:
                    1a:a1:77:2f:d4:fe:0e:cf:8e:e8:97:df:30:9b:9a:
                    26:e9:3e:12:16:13:3b:d8:17:74:b5:75:f7:ee:69:
                    56:09:ff:40:3d:d2:53:12:03:2a:db:b7:59:4f:60:
                    8c:91:cd:0c:ac:f7:e7:56:f7:45:bd:dc:9d:1e:9e:
                    50:05:54:8e:59:58:66:8a:cb:b4:db:40:7c:a8:bf:
                    09:f6:ea:27:94:7e:63:7c:7a:c0:99:c0:2a:56:c2:
                    40:26:48:49:a2:0d:7b:4f:1a:7d:2e:17:2d:3a:f2:
                    78:bb:9a:ef:ab:ce:34:0c:ae:9d:d4:77:62:48:4a:
                    56:4e:d6:76:d8:cb:3f:5f:20:91:a0:89:46:9f:fb:
                    1b:6d:dc:fc:ad:92:bd:1d:25:b1:de:6e:b7:5b:80:
                    82:74:30:01:9b:fb:37:15:6b:7e:17:44:41:32:62:
                    68:3d:2d:00:1b:ba:47:ba:34:af:65:64:17:7b:0a:
                    b6:6c:6f:b7:8a:3c:b2:89:ab:71:50:05:01:f6:75:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:84:5B:34:4C:C8:42:AB:B3:03:2B:CA:FE:27:7F:29:19:E2:59:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6922738d-5849-376c-a41e-1d4ea8843d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:9f:b1:24:6f:b3:29:2a:14:d0:e3:ce:7b:51:88:3f:7f:4b:
         83:27:1c:0e:60:1d:37:ca:0c:36:97:87:dd:53:21:a2:d3:71:
         81:96:32:bf:3e:c4:36:91:f7:87:f9:bd:44:96:20:63:e5:16:
         9c:58:12:2c:af:98:4c:f8:6b:23:02:d8:a8:3b:e5:93:91:67:
         43:52:f1:b4:6b:c8:61:3a:ef:94:0f:1b:13:ac:3e:9b:6c:c2:
         af:f9:bc:84:4c:5f:b7:39:b5:2c:4a:5d:65:99:e0:3a:87:45:
         5f:64:a8:af:f4:30:57:5e:65:8a:17:3d:c6:ff:1a:7e:5f:2d:
         5b:eb:73:de:e3:2d:9c:7f:92:48:00:8f:b1:ad:0b:4e:4b:9e:
         7c:74:02:81:9c:c5:c9:bc:21:0b:07:d8:69:fc:3e:62:97:11:
         1b:c2:87:42:c8:ac:e5:d9:cb:46:f3:f9:22:10:fc:12:93:a0:
         22:68:6b:88:42:c4:7b:37:1b:21:ab:28:58:79:a7:2d:50:c3:
         09:f6:5f:3e:68:79:3d:81:4a:a0:90:64:e3:bf:00:8e:c6:dd:
         75:03:aa:68:99:d4:99:0c:ca:6f:d6:5c:f1:14:e8:53:8a:f5:
         52:4a:ba:62:2c:f7:b2:10:f4:c8:1b:77:07:05:c8:fc:49:43:
         14:f7:6e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:24:46 2026 by rpki-client