Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1fff147-714c-33a6-b93b-01f780d6cca6.roa
File:                     a1fff147-714c-33a6-b93b-01f780d6cca6.roa (raw, json)
Hash identifier:          yILLLqvBUcJbrIUeu923AQrB6g1ycsI0TqEoTFreknI=
Subject key identifier:   C2:5F:6F:0A:CA:FB:A9:10:96:04:22:72:11:CB:75:F6:BC:19:9D:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F08118520AE35D6B5D77E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1fff147-714c-33a6-b93b-01f780d6cca6.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     397206
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:11:85:20:ae:35:d6:b5:d7:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=5f062fb6-4c22-4ef6-bdf7-a80867a9f48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:9f:5e:a9:74:be:91:0e:5e:7e:5b:f3:f4:
                    de:c7:a8:91:74:32:94:60:00:e1:d3:76:85:3a:14:
                    71:66:27:13:cc:48:fc:df:ea:95:5c:e9:52:b9:23:
                    b9:fc:6a:d3:81:6e:d7:e5:3b:8d:95:2b:d1:90:56:
                    d7:c4:76:5c:2e:0b:48:ba:f4:fa:21:ec:f7:22:8a:
                    62:47:1a:c6:e7:4f:54:48:01:cb:c4:26:21:78:c8:
                    f3:fc:88:6f:9f:76:53:fc:b1:0a:16:5a:ce:a6:92:
                    55:6a:a4:8a:7f:10:4b:72:9a:40:f9:9b:90:25:46:
                    b0:64:5a:51:8c:35:c1:f1:7e:5a:5a:95:ea:5d:c4:
                    a8:35:84:11:b4:0e:c3:60:59:b1:67:5d:32:30:1f:
                    0a:47:4b:75:33:62:be:a9:f8:48:e7:cc:d3:4c:e8:
                    8d:7c:3a:85:d6:45:80:61:f0:c4:6f:0f:9e:c8:39:
                    81:15:a5:8c:c1:3d:82:f0:d1:1e:68:45:85:f7:00:
                    8d:76:70:6a:56:4f:69:3e:29:58:a2:4b:ad:f5:81:
                    0f:37:e1:78:47:f7:24:5a:0e:8c:4a:24:82:6c:4f:
                    8d:7f:e4:d5:f4:16:4f:61:7a:1b:ac:6b:2c:b8:95:
                    13:fb:76:b6:0c:37:a2:e7:e2:aa:c4:b2:96:0d:13:
                    29:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5F:6F:0A:CA:FB:A9:10:96:04:22:72:11:CB:75:F6:BC:19:9D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1fff147-714c-33a6-b93b-01f780d6cca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:5c:86:e2:1d:3f:21:af:91:c3:43:f3:87:64:b0:4f:79:
         2c:e4:8d:1b:4d:fa:28:0a:f2:d5:2b:97:43:2c:0e:4c:85:98:
         0a:82:4d:01:b2:f7:40:da:71:8a:09:67:87:7e:c9:6f:0a:0e:
         9b:9a:24:30:52:52:8b:a5:6d:b9:8d:c6:4c:3b:69:68:6b:8b:
         00:67:0c:f5:9f:b8:0a:e7:ea:5a:5e:8c:82:e1:e6:03:69:95:
         fd:e4:34:da:49:51:28:cb:4e:f3:13:7d:cc:54:6f:99:a1:02:
         e7:68:0e:04:46:36:f4:27:ce:fa:4c:a8:e3:7f:1d:a9:6e:5e:
         a7:42:49:65:4a:ba:cd:c0:9a:4c:f2:27:a8:9b:f2:35:7b:de:
         18:0d:17:aa:5b:97:ca:6d:e1:d9:a9:ba:8c:6b:e7:2b:63:23:
         1c:8d:ae:f2:fd:f7:93:ef:07:ff:10:2c:69:0d:48:fe:95:25:
         c1:0f:a6:e0:45:7e:df:9e:94:bc:0d:40:f6:4e:2c:1b:da:48:
         7e:4f:ec:f7:fe:76:ee:34:2e:8a:66:8e:9f:9e:02:fc:7a:3d:
         21:0a:d2:0c:c1:ec:0e:76:0a:45:cd:0e:fa:42:d6:57:9a:f5:
         12:57:00:1a:c1:a6:ee:f4:14:ce:98:20:b1:f6:c9:30:6e:c5:
         87:21:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:53:50 2026 by rpki-client