Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4b709b4-940e-3523-85f0-4316b7dac985.roa
File:                     a4b709b4-940e-3523-85f0-4316b7dac985.roa (raw, json)
Hash identifier:          9/5cCHn12uDGMP4/zzpN1pL5tG0TvHroltnbaRDOTgg=
Subject key identifier:   AB:6F:8C:47:F5:42:45:ED:1F:7B:C7:48:3C:CF:F4:31:54:8D:61:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CFD3BC148E8AE91E7CA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4b709b4-940e-3523-85f0-4316b7dac985.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     396544
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:fd:3b:c1:48:e8:ae:91:e7:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=cdb8cd7a-7e55-426c-a492-5ce6c751b4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:1f:c6:fe:6a:d8:a2:b4:59:2d:c3:b6:01:
                    90:1c:e2:f8:02:b8:da:b2:01:35:c1:3f:d5:cd:ed:
                    4c:21:30:6a:e3:6f:62:b6:28:23:a3:c4:d7:c6:ea:
                    db:2d:8b:9f:ba:ed:e9:1b:a9:41:92:2e:f3:26:f4:
                    1a:5a:8d:b4:a9:69:a9:b6:11:0d:b4:eb:65:bb:a3:
                    9e:1c:24:43:39:1c:ed:0e:ee:52:3f:33:7f:67:35:
                    0f:9d:2d:c8:89:e1:5f:ba:59:a5:93:9e:b0:e3:75:
                    ac:e0:b4:6a:c7:09:92:3b:7d:65:dd:50:1c:1e:05:
                    c7:7d:b6:93:5c:a7:a7:39:ec:8b:c0:8d:78:d7:af:
                    92:df:74:4d:d2:71:eb:91:51:d8:84:dd:73:23:66:
                    07:33:1f:cc:a2:9d:dd:76:c1:df:b7:08:2f:f4:44:
                    d6:d9:11:5c:29:d2:95:a4:21:98:ae:41:d9:89:b5:
                    3d:31:8e:94:ac:46:a3:28:d6:78:a2:95:0a:60:6c:
                    18:7e:da:f7:0a:fa:8f:51:31:67:d9:e1:de:4c:8a:
                    82:d0:47:a0:65:c6:f2:c8:81:ed:1c:3a:5f:5d:a6:
                    25:20:28:d9:02:ea:44:c4:ae:07:3b:10:98:1c:2a:
                    70:67:63:b3:23:52:30:cf:67:33:f9:f5:c1:d2:59:
                    4a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6F:8C:47:F5:42:45:ED:1F:7B:C7:48:3C:CF:F4:31:54:8D:61:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4b709b4-940e-3523-85f0-4316b7dac985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:66:6b:d2:22:c3:67:40:8d:1d:2e:50:f2:81:0a:d9:f4:ad:
         d6:f3:0f:fe:c0:e3:f3:6b:c0:05:2d:15:79:13:ee:18:75:97:
         c8:cc:a6:8b:48:3d:ad:cc:52:cd:e6:a8:b3:ad:34:1c:d3:11:
         9f:a6:40:6b:af:be:8d:44:34:5d:cb:29:81:42:8f:ac:4c:0c:
         8f:08:43:23:24:cf:41:78:75:06:f9:84:73:93:f3:78:d7:3c:
         20:4c:70:d7:af:49:23:b1:44:44:fe:2c:75:bc:f4:1c:92:74:
         57:b2:54:94:d9:34:a8:ee:9f:83:33:14:88:19:4f:a4:27:b9:
         08:ca:6a:fc:5c:bd:0a:d8:5c:50:bf:70:25:3d:2d:98:5f:6b:
         de:26:38:2c:60:89:68:c6:d6:e7:9b:f8:07:6e:7e:62:fd:80:
         d8:2d:aa:fe:ac:2e:ca:24:50:4c:5c:f7:6f:70:ee:e0:8f:17:
         1f:f7:3e:7f:46:10:07:5e:2e:71:27:30:9c:1a:c8:86:22:8c:
         de:8e:9f:ee:07:a5:83:4c:62:82:30:61:47:3d:d6:08:86:6a:
         ab:1b:15:0d:df:a8:72:a8:2b:3a:18:c3:e4:bc:f6:2a:6b:7d:
         48:29:8d:a5:35:03:ab:f3:5a:85:79:e9:3c:e4:dd:3d:fd:85:
         0c:89:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:28:40 2026 by rpki-client