Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95d73fcb-cf83-3350-9914-2bcd4177cbe3.roa
File:                     95d73fcb-cf83-3350-9914-2bcd4177cbe3.roa (raw, json)
Hash identifier:          OW9YdqHzkIWJfITsPdKGrhl9W03oS+6koJDJwDScE2w=
Subject key identifier:   78:45:2F:F4:CC:8C:B9:B5:72:DC:DE:8C:6F:A2:48:63:75:62:07:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497330F4F305FAE4939A3F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95d73fcb-cf83-3350-9914-2bcd4177cbe3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36621
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:30:f4:f3:05:fa:e4:93:9a:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=be44aaa9-8a75-48e0-b2ff-781ff6a30e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:ce:7e:98:4f:dc:de:31:61:be:b7:dc:48:
                    08:6b:e3:01:12:b6:09:b0:f7:50:d7:fa:30:60:a1:
                    b0:d4:6e:75:ef:7b:aa:13:6f:63:e9:9b:b7:e0:d3:
                    ff:55:73:5b:eb:13:53:76:b9:9a:81:18:51:fe:b0:
                    f4:02:40:6e:b2:f6:0e:01:50:9d:2e:f1:81:57:61:
                    e0:c5:87:82:3d:2c:fc:ad:fc:57:bb:84:c2:d0:f3:
                    1a:24:39:e7:1e:54:27:38:71:6e:ff:5a:43:58:2e:
                    94:d8:92:32:34:73:ec:d3:4a:d4:b4:c2:75:79:84:
                    84:4a:43:0a:bf:8a:76:aa:01:9f:63:71:3b:12:a2:
                    ae:a9:c9:f3:f7:70:9d:83:49:10:67:09:3c:64:3a:
                    d0:44:5c:2d:e4:c9:f8:8d:76:eb:44:35:b5:33:b7:
                    aa:a9:66:45:27:8a:16:bb:ed:d2:e6:3b:0a:11:70:
                    84:6c:33:56:d1:11:e8:09:48:85:03:b1:4b:7d:86:
                    12:9f:28:1f:41:91:fe:a7:8a:78:aa:d5:ec:a6:7b:
                    42:50:69:c7:18:71:b6:3b:ac:af:22:11:0d:d5:e4:
                    dd:f7:51:3d:f3:b5:7b:16:69:6e:30:4d:2d:82:1d:
                    41:5c:d1:f1:ad:f3:5d:c9:be:33:a1:4d:fc:36:5b:
                    18:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:45:2F:F4:CC:8C:B9:B5:72:DC:DE:8C:6F:A2:48:63:75:62:07:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95d73fcb-cf83-3350-9914-2bcd4177cbe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:90:e5:4f:a4:25:02:38:22:0a:37:d6:2b:19:d7:41:00:41:
         1d:4b:07:98:67:6f:6e:14:49:9e:69:f0:5c:49:2a:19:f2:79:
         ee:b3:8d:a4:70:5f:ca:3b:59:1c:57:ec:d3:bb:9f:a7:8a:83:
         b8:22:06:35:3d:78:82:85:07:92:9b:ac:49:65:34:7e:70:61:
         29:04:53:d8:c1:67:e6:ee:fe:4e:5f:b9:c9:77:ab:97:02:29:
         e5:87:87:d7:6f:c7:7f:4a:1e:65:3a:cd:f5:2b:52:00:6f:ed:
         72:8d:7e:bf:d3:99:59:0b:84:00:5d:a5:10:5e:d7:c8:69:9a:
         5f:e0:fa:e9:75:38:73:a1:c9:1a:d3:49:f6:b8:b9:53:b3:bb:
         64:5d:cf:2d:88:6c:c8:96:ed:55:76:dd:d3:2b:0b:e7:71:a2:
         d3:f1:06:d0:4c:a3:db:4b:58:ac:6e:ac:9a:e0:b3:3d:5b:72:
         ea:26:55:5e:c4:9e:7c:57:94:78:9e:10:3c:3d:68:26:43:71:
         45:73:63:bf:63:8c:2c:b9:d5:b8:0d:2b:c1:5b:7f:0b:34:e2:
         0a:b4:51:aa:e3:39:14:ed:49:4d:dc:65:cc:d6:7b:db:31:e9:
         3b:9f:36:a1:b7:9c:7d:fe:f9:ea:7d:9b:78:42:0f:4b:76:e1:
         50:dc:37:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:03:49 2026 by rpki-client