Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8537c6e6-f6e8-38a4-b16f-86da5e54d6e5.roa
File:                     8537c6e6-f6e8-38a4-b16f-86da5e54d6e5.roa (raw, json)
Hash identifier:          mzpaRLiBdKDwFC7Rn6LI8wJCwEBOhf/TeO8B0rQSyAY=
Subject key identifier:   5A:AC:F4:86:BC:D2:4B:FE:EE:CA:0D:11:EA:2C:BC:9C:25:C8:7B:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CD3BF0038FE9A6E8EB980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8537c6e6-f6e8-38a4-b16f-86da5e54d6e5.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     396581
IP address blocks:        2001:503:eea3::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:d3:bf:00:38:fe:9a:6e:8e:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=07e10765-eb19-4f94-ab70-43846f3b6723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:34:f9:5f:27:6c:d5:d8:09:87:6b:6e:0b:
                    04:13:92:81:ab:72:b9:18:8f:77:eb:56:01:2f:34:
                    83:76:08:a0:56:5d:7c:89:51:f3:47:7a:da:6b:69:
                    a8:e3:b4:97:c2:b5:f8:9e:90:39:ce:49:31:2f:04:
                    62:0e:ee:eb:b4:dc:7c:58:0d:14:ec:91:20:9f:2f:
                    89:c7:3d:06:c3:8a:21:01:6c:40:d2:7c:f9:fa:d9:
                    a2:97:05:84:66:41:e2:38:da:07:8d:25:86:7f:e8:
                    6e:54:05:2e:6c:80:ff:4b:cd:a8:ff:58:95:15:ff:
                    2e:4a:0b:e1:67:78:4d:13:76:93:92:a6:1f:a1:8c:
                    24:41:4e:ca:fc:11:d4:44:23:31:f2:14:e5:ff:48:
                    0f:40:35:55:28:8c:0d:7a:11:1d:a6:27:82:b9:79:
                    84:ef:33:3a:4a:f6:e3:90:95:e6:e3:75:9d:51:54:
                    35:1d:e5:ec:c4:a9:64:ee:3a:2d:b6:cd:8d:de:61:
                    62:51:e0:10:d6:57:33:5a:99:43:ab:62:7f:98:2b:
                    0b:18:a0:4c:7a:ec:f7:60:4b:77:60:22:3d:8d:10:
                    6b:be:39:f5:27:a8:b6:ed:ca:13:82:25:17:37:4a:
                    b8:7c:36:92:21:03:ae:80:87:87:66:46:8a:f1:12:
                    b0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:AC:F4:86:BC:D2:4B:FE:EE:CA:0D:11:EA:2C:BC:9C:25:C8:7B:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8537c6e6-f6e8-38a4-b16f-86da5e54d6e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:eea3:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:51:c0:7f:4d:a3:c8:6d:1e:56:ec:67:d5:02:77:29:60:
         f9:01:ed:d1:d2:b2:c3:28:1e:62:b1:ad:88:fe:f1:58:d8:c7:
         c7:27:13:14:01:02:de:d8:1d:9f:1a:4d:f9:c7:e9:cd:2f:17:
         4d:5c:6a:26:ac:3b:ab:60:9b:8e:56:fb:2f:51:df:86:ea:03:
         47:68:cb:6c:68:f4:0e:93:6b:dd:de:be:8c:bf:65:50:e6:3b:
         6e:2b:a2:12:6f:7f:7e:c1:47:24:8a:92:0f:a1:90:f7:86:ab:
         16:e4:c4:00:8e:98:2a:62:40:f1:e7:5e:44:92:ae:f9:69:d2:
         d8:12:d3:ee:e0:21:63:83:8b:07:0d:52:3d:2d:ad:92:b6:d1:
         ba:ef:9e:5b:47:59:79:8f:49:19:9a:ab:4f:e6:4d:11:04:39:
         04:bb:89:6f:f6:21:ca:72:22:f9:89:89:ba:80:fb:ce:90:5b:
         23:9b:23:42:94:0f:ce:74:5c:89:05:9d:c9:0c:74:63:37:d3:
         84:5f:53:19:ff:f1:bc:57:c3:51:d7:a4:05:01:ee:af:ec:2c:
         62:d4:47:85:26:3c:42:a2:01:13:51:da:ad:d2:fe:8a:c8:17:
         5f:3e:e3:13:68:51:e5:9a:3b:0a:a6:45:a0:57:f9:3d:58:f6:
         bf:c7:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:36:24 2026 by rpki-client