Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69789050-07b2-3584-a8d4-30adff35f178.roa
File:                     69789050-07b2-3584-a8d4-30adff35f178.roa (raw, json)
Hash identifier:          8y3gkye5/sgyIyrPsPiCJaCsy5/jckKz+QTRiNyZQ6o=
Subject key identifier:   69:58:48:6B:00:60:D0:83:22:FD:D2:A9:3A:E8:49:65:7E:F4:64:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F119CE732C67ADF0829FE4E40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69789050-07b2-3584-a8d4-30adff35f178.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     36623
IP address blocks:        2001:502:8cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:e7:32:c6:7a:df:08:29:fe:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=1341ae4b-d989-4304-a6e9-17ef385a0ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ed:b1:3e:08:0e:0e:ba:8c:dd:5f:fc:00:27:
                    0c:e5:83:6f:26:bd:57:8b:58:0d:38:e0:a1:86:c8:
                    35:66:c3:ec:43:a8:0d:b0:32:a2:fd:73:af:5d:a0:
                    a4:52:73:de:08:3e:f2:f2:3e:c0:9d:3d:24:c9:81:
                    55:d4:17:fc:58:a4:21:b6:2f:e3:d8:30:1d:bd:2d:
                    48:ac:2c:c9:57:09:ec:55:38:f2:f8:56:f6:c1:ff:
                    3a:e6:e8:ec:62:8c:29:74:bf:f3:f6:0a:4c:f7:dd:
                    c6:39:49:8c:5d:e5:d0:ae:19:35:9e:89:fc:f2:e2:
                    ae:99:2e:a6:5f:89:42:e7:02:0c:a2:ff:cc:df:55:
                    7e:df:cc:8f:08:f3:91:92:36:9d:cd:eb:75:d4:18:
                    18:c8:07:32:92:98:fe:6e:4f:ab:f7:06:e6:d3:bd:
                    db:ac:19:7c:9b:7c:02:3c:73:39:58:d8:57:fe:ed:
                    86:6c:f0:63:6b:1a:5a:f5:e2:16:25:0d:66:07:e6:
                    43:a2:d0:d6:59:6b:fc:5e:1d:bd:72:8a:17:f6:6d:
                    d3:ef:15:19:3e:10:64:73:f8:2f:f5:a9:5f:e1:f1:
                    ff:fc:f8:1e:45:9b:c1:1a:e7:64:91:b3:50:02:cd:
                    20:00:db:c5:d7:c4:20:b3:2b:b1:53:ce:35:db:7b:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:58:48:6B:00:60:D0:83:22:FD:D2:A9:3A:E8:49:65:7E:F4:64:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69789050-07b2-3584-a8d4-30adff35f178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:06:04:a0:2c:c6:fd:03:1b:aa:58:94:32:c2:e1:e2:06:d5:
         14:c0:ed:c8:20:d8:d4:4b:3b:d6:39:ce:82:2c:d7:d5:98:f8:
         0f:8d:97:bb:5b:8a:24:16:34:d2:da:00:fa:9f:2e:d3:ca:18:
         33:c9:9e:5e:2f:c0:b8:ab:da:49:a4:16:90:e8:48:00:46:8e:
         80:34:22:27:e7:73:72:5e:f9:2d:90:e5:fd:0b:8a:72:8e:3e:
         42:0a:0b:57:c3:6d:fd:5c:7e:6a:ae:97:6c:fb:3c:59:a2:63:
         89:ee:d4:7d:fd:41:3b:b6:c1:be:81:b6:2a:ea:90:6e:80:07:
         e4:53:33:40:a4:7a:68:f4:2a:b6:cf:df:20:5e:63:cc:34:8d:
         95:e9:3e:48:96:7a:dd:21:ed:56:d8:59:2d:4b:0c:f3:63:95:
         fe:46:d7:ae:fb:30:8d:17:9f:d6:4f:a9:35:7f:da:0e:8c:d6:
         cb:64:be:e9:2f:5e:78:fc:b6:ba:26:fa:c6:eb:ff:3f:75:b0:
         b9:5d:04:cc:17:a6:da:c3:34:0a:37:a1:4c:01:2f:57:bd:cc:
         2a:fc:ad:ef:55:2a:c8:d2:4b:12:18:54:4c:a9:26:d1:11:46:
         0a:7e:d4:00:36:22:d9:d8:e7:89:b7:a2:3a:39:76:e6:a2:99:
         1a:c1:e1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:01:30 2026 by rpki-client