Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa37ee07-1855-3127-9b76-1cdeba89c189.roa
File:                     aa37ee07-1855-3127-9b76-1cdeba89c189.roa (raw, json)
Hash identifier:          emUQ2aUGTfBuPjl3Q8rg/+pAz2ZqFwuaxeA32Nh1kMo=
Subject key identifier:   EF:A7:0B:1A:30:A0:7B:8F:A2:5C:9F:26:54:ED:0E:CD:F1:75:21:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498ACE8569A0812FC32CBE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa37ee07-1855-3127-9b76-1cdeba89c189.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396593
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:ce:85:69:a0:81:2f:c3:2c:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=7991fe6a-d90f-4cf2-93ca-9aaf023b6287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:06:94:54:b1:17:55:f7:65:e7:23:32:8b:52:
                    04:62:f0:d0:a1:a0:c1:3c:fe:a5:d6:e4:7c:11:37:
                    db:6d:ed:ba:bf:4f:84:6d:93:3e:83:56:ac:4c:ab:
                    31:8b:f3:24:f5:51:92:c8:81:6b:11:cb:07:a5:5a:
                    22:70:76:32:0f:80:a0:81:42:98:68:22:d1:61:10:
                    94:43:2e:81:49:78:e2:58:3b:f0:81:3f:13:06:d1:
                    3e:c4:f5:33:a4:91:65:ae:fd:49:ab:63:eb:50:cb:
                    14:92:37:c1:c8:e6:54:f1:f2:a3:eb:05:2d:fc:6c:
                    43:cc:8c:da:87:bd:2d:58:80:fb:54:13:4c:a7:72:
                    6f:62:29:f4:db:fb:a1:56:0c:2b:66:48:3b:91:3d:
                    3e:aa:c3:14:b2:85:ea:a0:27:0e:1a:a1:17:2d:ab:
                    6d:94:0c:8c:74:77:87:38:79:af:f0:8c:ce:0a:66:
                    7d:42:89:8d:ee:e8:71:e7:ca:6d:11:0f:02:c0:8b:
                    4d:d5:5c:f1:ee:55:57:d8:bb:d8:87:ec:84:f2:33:
                    13:3a:9e:fc:ec:1c:6d:c0:11:45:22:1f:5a:d0:75:
                    65:66:ba:ca:d3:10:5d:13:da:9d:97:ed:a5:57:67:
                    ad:4a:49:8d:df:bf:8f:78:49:9f:38:ef:eb:b0:f8:
                    75:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A7:0B:1A:30:A0:7B:8F:A2:5C:9F:26:54:ED:0E:CD:F1:75:21:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa37ee07-1855-3127-9b76-1cdeba89c189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:52:b6:08:2b:e0:60:ab:82:78:fa:39:00:32:73:3e:cf:92:
         f8:e1:52:e7:e4:50:4d:a4:93:99:f2:90:20:94:a1:21:3c:69:
         aa:65:2c:9c:9e:5a:e6:b8:87:72:43:1d:7a:a0:62:19:9a:97:
         7e:f7:de:16:5d:7e:8f:73:b9:a8:79:78:ed:87:50:4f:6a:5c:
         7d:70:b9:b5:56:13:95:63:17:6c:92:76:65:38:b5:ea:e5:32:
         9c:7a:16:1a:4b:65:f8:0e:d3:19:62:44:06:24:47:8a:71:c4:
         83:bb:3a:85:8f:ba:d1:33:8d:67:76:aa:be:60:86:32:b9:11:
         bb:40:70:bf:27:ff:35:99:40:45:4a:e1:8e:52:d4:af:bd:ed:
         c0:37:3e:38:ea:1a:35:e9:e0:d3:60:4b:16:30:36:65:78:55:
         ee:92:5b:e7:46:c0:b5:49:f4:c2:74:20:1e:92:b5:3e:04:0e:
         20:6c:a6:d7:9d:39:ff:13:43:4e:7c:25:3b:11:c5:89:ba:83:
         6a:67:6b:ec:26:57:b5:5a:63:a4:95:64:72:ae:10:c6:a5:97:
         ee:21:0d:2a:60:65:79:a3:ba:b5:c8:f1:93:62:70:0c:64:a6:
         88:c1:18:16:43:6a:86:8f:50:96:bc:b5:30:62:49:2a:cb:e2:
         59:b4:83:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:14:59 2026 by rpki-client