Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/713dd4f2-6e53-37a7-afd4-e0dc8c917703.roa
File:                     713dd4f2-6e53-37a7-afd4-e0dc8c917703.roa (raw, json)
Hash identifier:          VKmqU9FPwFkxws0Gw3AIEB3ZT4fv1FV9Pl4jus0TGWI=
Subject key identifier:   11:39:FE:0E:23:39:2C:27:89:F6:52:05:AC:F4:21:05:C9:E4:78:FA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0AA230A01E6D6107CEC9EFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/713dd4f2-6e53-37a7-afd4-e0dc8c917703.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     211369
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:30:a0:1e:6d:61:07:ce:c9:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=8d1a2baa-45ea-456c-9295-bb213d7b27c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:8f:a4:8d:45:ad:14:f1:0f:19:ab:9f:a6:61:
                    d9:50:04:b6:57:b2:01:06:b1:6d:29:84:94:ea:b3:
                    32:19:7e:8c:7b:aa:f6:44:45:c0:88:04:1b:95:2d:
                    8e:68:20:28:f3:8b:12:19:8a:4e:67:35:03:4c:07:
                    c3:b4:56:62:bc:53:97:6b:08:4e:74:2f:4b:d1:1c:
                    b1:6a:34:76:e2:0e:cf:25:a5:a8:fe:bc:15:58:81:
                    82:88:e7:de:4c:2d:f8:61:9f:07:b3:9f:fe:b8:14:
                    d9:4f:c3:05:38:92:18:1e:03:13:58:02:df:01:94:
                    47:cc:69:dc:56:49:35:ff:bd:ff:a1:94:53:25:88:
                    12:9f:47:39:51:87:15:7a:e1:f0:52:61:ef:40:3a:
                    6b:b3:52:11:e1:be:1e:00:88:ba:06:45:6b:4e:cd:
                    25:38:0f:42:c1:ea:0b:f4:d7:38:63:f4:cb:a2:cc:
                    58:05:dd:62:aa:6c:51:ef:a2:c3:70:80:e2:97:8d:
                    72:04:94:9a:d0:2d:13:02:a4:7d:30:8c:90:cc:45:
                    52:d6:21:55:0b:0d:a8:c0:e2:b3:61:4c:8f:4d:09:
                    eb:41:37:c1:28:76:ae:11:e1:53:fa:e1:42:e4:4b:
                    42:b5:b3:bf:f1:fa:bf:af:57:f3:f2:a1:2e:0b:5e:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:39:FE:0E:23:39:2C:27:89:F6:52:05:AC:F4:21:05:C9:E4:78:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/713dd4f2-6e53-37a7-afd4-e0dc8c917703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:b6:0a:4f:78:0c:47:31:3c:ac:46:ec:11:24:de:be:f9:9e:
         ef:d6:13:99:40:78:a1:41:0e:ae:96:23:ad:6d:45:7b:52:1f:
         19:0c:19:3b:ba:b2:56:00:76:1e:3d:80:81:48:ca:81:24:f2:
         57:0c:08:e3:50:a3:69:da:ab:1e:b7:60:44:11:8b:8d:70:c8:
         9b:ce:23:71:aa:54:d6:af:51:51:17:e7:ae:a7:82:76:e3:3b:
         c7:79:de:41:29:2b:ce:1e:07:58:c8:c7:e2:b3:1d:ee:08:40:
         32:38:0e:76:f6:60:92:4c:86:96:71:96:21:ad:48:61:fc:59:
         36:89:4a:58:f9:da:1b:fb:47:a2:d1:76:14:08:f6:47:66:f1:
         73:d2:5e:c2:c3:0f:fe:2a:b1:52:8d:f7:e1:12:2f:f6:bf:76:
         d2:ae:f9:8d:f4:d0:79:99:3a:f3:0d:ef:c1:d7:33:f7:3e:ee:
         7e:96:c2:d4:da:6a:e7:eb:6c:bd:30:45:fe:34:7e:f7:15:95:
         80:34:49:b3:b0:9f:1b:89:c3:a0:64:64:12:47:69:2e:52:94:
         1a:85:1f:e3:44:62:8d:a5:f0:31:f8:0f:a3:31:20:10:44:07:
         7c:8b:82:49:a3:df:c1:9d:28:6b:27:2d:ea:d8:f3:7a:3a:2e:
         0c:fe:b8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:15:08 2026 by rpki-client