Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926ea4bf-bd76-3931-a192-05e08f68364c.roa
File:                     926ea4bf-bd76-3931-a192-05e08f68364c.roa (raw, json)
Hash identifier:          3q3mnZHvyXCtsmGUKIOkNCWULSG5mKmHkRjo1uu/TnM=
Subject key identifier:   4C:EF:1D:24:A6:2B:22:6F:05:85:E3:70:A6:BA:74:95:B6:F8:A0:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986BF011435CD5114ECD500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926ea4bf-bd76-3931-a192-05e08f68364c.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396586
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:bf:01:14:35:cd:51:14:ec:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2157f9a7-bef5-45ec-ac63-f810cfeff986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b9:d5:03:f8:6e:0f:98:2e:87:02:39:de:2a:
                    0f:f6:ba:e8:28:29:7e:5e:f5:f4:96:4e:f3:10:ad:
                    e6:a0:66:e3:71:a0:a7:5d:89:21:fd:a2:7c:1f:42:
                    67:c3:ae:81:d6:1c:df:0c:5f:06:aa:cb:3c:59:4c:
                    f6:c6:53:61:74:87:e2:07:55:2c:ec:18:0c:8e:79:
                    58:b2:30:33:03:50:fc:84:5b:67:9c:5c:0e:17:c2:
                    fb:c6:79:0e:5b:65:88:59:05:12:da:52:e8:2c:dd:
                    1e:e3:1f:34:b0:ac:79:cb:e6:25:08:5a:8b:1b:d4:
                    cf:f2:65:d2:94:b5:ec:0c:64:86:f1:b9:f3:19:dc:
                    ee:c1:86:ff:de:c9:7d:4e:ff:4d:6d:85:21:9f:9a:
                    3f:be:a7:1b:51:7b:68:c8:30:7d:c9:06:4b:6b:87:
                    17:bf:b9:06:67:06:eb:36:da:00:17:5c:56:1c:62:
                    e1:4d:1b:d3:ce:1d:6a:5e:a8:de:d0:2d:13:ea:44:
                    e0:71:88:63:af:28:95:8a:da:cb:13:14:62:ed:e8:
                    b2:c4:52:d0:48:16:8d:ae:02:4d:12:32:2b:43:b4:
                    ef:dc:59:88:86:85:92:ce:73:b0:07:a5:82:9a:67:
                    1a:58:0a:f0:ed:d6:da:7a:c0:76:32:6f:cd:16:ac:
                    af:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EF:1D:24:A6:2B:22:6F:05:85:E3:70:A6:BA:74:95:B6:F8:A0:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/926ea4bf-bd76-3931-a192-05e08f68364c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6e:ef:9a:25:c8:cf:e5:0c:a9:d7:ab:c2:e6:39:84:d9:e5:
         55:18:0a:38:a2:9d:56:63:05:26:f2:74:bf:d3:14:36:d4:65:
         8e:00:66:10:f4:f8:42:28:f3:2b:7c:0a:2d:f2:eb:c8:d9:d9:
         74:68:b0:8c:fb:e6:16:38:98:7d:1a:6c:50:87:85:13:5a:d5:
         02:cc:c4:fe:09:e5:6a:2e:a9:62:03:47:96:e6:81:39:f5:46:
         73:c7:fb:11:0e:88:ca:7a:33:f5:7e:0b:d8:54:bd:a1:3d:e6:
         71:43:91:0b:05:84:30:87:ea:3b:3b:3b:b0:93:5d:9a:18:ac:
         fd:3b:1e:2f:a4:c7:93:2a:27:e4:10:c3:f6:f9:25:8c:aa:1f:
         fc:04:6c:33:83:e2:f2:ab:5f:49:30:23:b4:31:68:77:c6:c2:
         f3:21:75:43:cf:77:71:00:e5:bd:eb:22:3c:ea:1d:b3:bb:d3:
         ce:1c:18:1e:8b:4b:7f:26:d2:ff:27:2e:5e:25:82:57:5b:b2:
         2b:6f:5a:a7:ea:97:36:62:df:55:c0:7c:2f:e2:9b:3f:3c:1c:
         2d:5b:a2:dd:c2:43:df:45:24:ed:eb:9e:3a:a7:36:94:e4:13:
         69:2e:f7:d1:a7:b7:9a:d8:ee:e3:f4:7f:88:ee:5d:ad:0a:7a:
         d6:db:2d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:59:57 2026 by rpki-client