Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c02e728-16c9-38a1-befa-e177f7851d0a.roa
File:                     7c02e728-16c9-38a1-befa-e177f7851d0a.roa (raw, json)
Hash identifier:          Rm0q6swKDCp5dISxiFehOar4e/mLebzFdnjGSXY2sxo=
Subject key identifier:   7D:A9:02:4A:02:E0:21:23:7F:DE:E5:15:66:A3:2D:02:A2:00:1D:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4988C5388CE2096A94346A20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c02e728-16c9-38a1-befa-e177f7851d0a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396585
IP address blocks:        2001:503:83eb::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:c5:38:8c:e2:09:6a:94:34:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2971f552-7552-450b-bc6b-149e0e2056c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:03:24:63:12:cf:3b:7a:d6:d5:9d:a5:8c:
                    01:fb:2a:31:e8:da:f4:87:6e:ea:c4:63:2c:32:a7:
                    73:95:a7:18:46:d0:5f:22:fc:f4:23:cd:8e:5d:69:
                    1a:89:2f:b2:52:1a:37:cf:e5:ed:8e:e8:18:a3:a0:
                    dc:93:44:28:8d:eb:a7:93:e9:99:de:5d:37:6a:65:
                    23:90:29:db:43:93:10:1b:c0:d8:a6:c3:42:ba:be:
                    a5:27:18:ec:15:4f:42:3c:9e:6b:06:ea:95:48:2f:
                    41:46:10:e4:12:22:64:4a:a5:b9:f8:47:ae:5c:6e:
                    b1:b1:2d:75:9f:ae:af:d4:d1:63:b5:08:00:d9:07:
                    cd:80:52:1c:b7:21:41:cf:59:c0:c7:04:42:b8:94:
                    13:f8:38:2b:62:27:3e:64:56:c9:5f:d7:bf:df:e1:
                    01:52:de:e3:9d:4d:da:15:de:b3:f0:2d:3e:1e:72:
                    c5:a5:c9:ed:3c:9e:6c:ae:5d:be:a7:a4:84:ed:b1:
                    d0:d9:79:4e:9a:5d:4b:8d:eb:64:2f:4e:26:95:2d:
                    2b:21:4f:d2:f0:70:ae:5a:61:aa:d2:04:91:e7:35:
                    d2:63:64:75:9c:5b:cf:ce:eb:d3:12:0e:06:bf:37:
                    03:59:b8:bb:9d:a6:71:b0:ef:7b:c3:36:78:57:77:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A9:02:4A:02:E0:21:23:7F:DE:E5:15:66:A3:2D:02:A2:00:1D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c02e728-16c9-38a1-befa-e177f7851d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:83eb:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:7a:92:b6:5f:9a:ca:62:18:e8:99:2b:3c:2d:94:f9:c1:9a:
         ea:e4:b6:d8:10:de:78:02:9a:b5:bc:4a:9f:f4:7c:8c:5e:2a:
         c4:1f:b6:6a:d5:a0:39:f2:6c:04:05:56:ae:a2:8c:df:e7:b7:
         6a:ab:01:14:6c:e9:2e:33:6e:e3:7d:b9:2b:a9:84:40:f0:ba:
         7e:6f:5f:4e:6e:8b:5d:65:4a:75:15:6e:d5:01:fa:29:1b:d1:
         b2:b6:df:c8:fd:87:da:61:f8:4b:35:24:60:9d:b1:e7:d7:ff:
         08:31:d7:2f:4c:2d:da:fa:4b:cf:a8:43:00:a7:ee:9b:ea:e2:
         c2:a3:38:3d:52:4a:a5:ea:74:6b:01:a2:7c:9e:19:1c:02:f9:
         6a:dc:a2:fa:41:15:45:79:55:40:b5:a4:d8:a5:19:a9:4c:c5:
         8c:e3:33:8f:06:c5:c8:c7:b4:c7:64:06:f1:d4:fd:27:e7:f8:
         09:cc:e8:a7:bc:1d:44:39:e8:ed:5b:b5:aa:f4:91:cf:93:46:
         4c:db:e7:54:23:60:4e:8d:b9:1b:18:9b:d3:f2:4e:60:81:a4:
         ac:3f:d3:46:b2:ce:22:58:b6:15:75:95:f9:f3:91:46:51:94:
         e5:09:69:b2:2a:4a:c6:54:8f:07:93:a3:1a:c3:4c:35:c7:85:
         e3:4c:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:01:29 2026 by rpki-client