Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa
File:                     a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa (raw, json)
Hash identifier:          Cezm1cp+/rkgXXtEvsth5Pm6I9jJnxJtR11AGnDtd2E=
Subject key identifier:   74:FF:BD:26:9D:BE:9A:C4:65:FE:85:07:82:5D:85:EF:AA:F6:03:95
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497497D7262F4E8C7393DD40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396576
IP address blocks:        2001:500:134::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:97:d7:26:2f:4e:8c:73:93:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ab5b3705-a452-42c7-8e8b-bacc2d0f25af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:fa:f0:0f:e5:a4:dc:9d:5b:0a:af:4e:a3:32:
                    5f:75:f6:3e:4d:be:ad:27:fd:73:90:44:72:c8:78:
                    45:53:c1:6c:87:98:bc:f4:13:0a:3b:dc:e6:33:f0:
                    58:d1:95:82:3c:9a:db:c9:28:34:d0:3f:38:15:e8:
                    43:62:41:1f:56:47:4a:7c:ce:6d:30:8d:ee:10:38:
                    e6:83:fc:c3:ba:f3:2c:e4:59:fe:1a:62:27:de:08:
                    05:da:87:f3:3e:05:2e:10:1e:27:0c:c5:ca:34:6e:
                    e9:22:72:4c:28:a2:af:12:78:32:b9:68:a3:9f:e6:
                    04:7d:7f:d3:1e:45:5e:56:b8:e4:4e:f2:21:e2:5e:
                    16:90:e6:5d:b8:c4:21:1f:de:82:29:70:31:42:31:
                    26:ef:f0:ae:b6:74:c2:ee:a2:3a:9b:b9:fb:57:0e:
                    94:c7:61:1b:ef:59:a5:38:43:a6:c1:f1:41:c6:94:
                    56:ec:ef:6a:17:5b:c2:d7:73:00:11:d9:90:89:d6:
                    c0:88:c3:ca:aa:94:65:db:b1:53:db:29:d4:98:73:
                    44:17:06:31:c2:9f:52:bc:a6:c0:49:b6:66:3c:9d:
                    02:3c:f4:ea:d1:87:b3:0e:f7:c9:63:37:2a:13:a6:
                    bf:f5:9e:78:fa:ac:cb:c4:bc:06:cf:78:d9:2b:33:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:FF:BD:26:9D:BE:9A:C4:65:FE:85:07:82:5D:85:EF:AA:F6:03:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a22dd4fe-0b38-346a-bde7-98bbb12eaf29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:fc:22:ee:26:f1:45:b1:9b:f1:60:0e:41:eb:b9:50:81:f9:
         00:d2:30:c7:18:78:8f:dc:8c:87:f1:49:b9:e9:c7:76:92:2d:
         7e:86:fb:02:79:ab:88:89:77:e5:4f:8c:d5:23:cf:e3:0a:84:
         c0:28:55:5d:f3:09:2f:72:e3:c1:54:33:b7:2b:fb:72:4b:93:
         0b:87:46:ca:81:09:86:e5:29:18:f8:f1:c8:f1:47:88:13:7f:
         37:26:5b:0e:59:34:59:21:41:5a:c7:cd:c3:5a:21:24:e3:09:
         11:9b:9d:77:d0:8f:c8:c9:6d:d9:e0:79:c7:10:83:84:4a:ea:
         0f:67:3e:93:89:43:c5:a9:00:72:04:df:28:f5:e7:71:e7:02:
         9f:73:30:76:b8:31:bf:f6:e5:c7:7f:b6:9d:40:ce:74:ce:5e:
         db:d9:90:35:2d:cb:5c:6b:16:20:ec:76:ff:7a:a7:7e:ff:15:
         a7:eb:4e:75:04:5c:a2:c9:cc:a7:be:b4:9a:eb:94:b5:81:e0:
         3c:e1:2e:53:89:a7:94:01:71:5f:37:eb:86:40:1a:e9:dd:3d:
         d1:16:cf:54:51:33:94:a7:c1:06:f8:60:fd:f4:bb:96:ae:c8:
         e2:12:66:d4:f5:15:f0:9d:b9:b6:0a:33:64:f9:95:49:ac:d8:
         2c:c3:86:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:15:58 2026 by rpki-client