Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab7600e6-6a9a-3240-a1cd-fe52e2e09180.roa
File:                     ab7600e6-6a9a-3240-a1cd-fe52e2e09180.roa (raw, json)
Hash identifier:          CJwJqW7bc5bVPLhb1WD2LaqKM7CLoSaI1yYO8Fm1IMs=
Subject key identifier:   17:83:FE:E6:A9:83:FE:8F:96:6B:B7:7E:F0:93:27:A0:6B:B4:DD:81
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06728917F578BAF89B306000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab7600e6-6a9a-3240-a1cd-fe52e2e09180.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396564
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:89:17:f5:78:ba:f8:9b:30:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f55285ad-d62e-4702-a4ee-2ff1b4c9cc07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ef:31:d5:bf:90:3a:df:c0:41:06:ca:85:6d:
                    25:23:e2:51:e1:af:bf:ff:68:15:54:17:74:6e:08:
                    af:77:99:be:a8:ae:f0:65:39:6f:2e:d1:a9:1e:9d:
                    37:be:5e:b3:c6:8a:e3:c4:f9:12:4a:42:99:ee:33:
                    8e:d3:26:e7:a6:89:21:bf:ac:34:f1:23:3e:e5:af:
                    6d:a9:b5:38:af:86:97:39:1f:40:49:d2:f2:d1:c3:
                    0e:e4:c0:21:b4:8a:fe:12:b0:bf:c3:0e:7b:08:03:
                    a3:79:6e:17:25:f0:2a:34:4c:5a:58:34:e1:1d:6d:
                    8f:1b:ad:5d:70:a7:a1:c9:8a:b1:74:1e:84:74:56:
                    70:c3:de:db:c7:97:ea:2e:8f:d1:94:52:69:1e:39:
                    43:f3:b7:c1:50:2c:9b:92:0c:4d:66:87:9a:61:4b:
                    22:1a:60:9b:dd:d2:5d:bc:37:37:4a:c3:8b:7e:82:
                    05:4c:43:34:48:b7:ae:de:b7:9c:8a:da:03:07:0c:
                    36:6c:a0:82:76:d3:a8:a0:5e:12:8e:48:75:a8:25:
                    7f:a1:7e:12:3a:44:4b:cc:c5:0f:59:83:b5:ba:5c:
                    64:9d:eb:72:8b:f8:78:7b:ea:1b:09:80:bd:8a:de:
                    64:8a:c4:f1:a6:ab:67:a1:a1:4e:a9:8f:5d:12:a0:
                    3e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:83:FE:E6:A9:83:FE:8F:96:6B:B7:7E:F0:93:27:A0:6B:B4:DD:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab7600e6-6a9a-3240-a1cd-fe52e2e09180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:33:81:c1:8c:4f:9a:7e:c1:81:1b:89:e8:fd:22:b5:1d:7f:
         c3:10:36:be:85:99:8d:93:3a:36:35:15:be:93:6b:b7:b8:e7:
         ee:95:3f:77:85:cc:2a:99:73:12:82:f6:4b:13:9f:b3:8f:c6:
         72:42:67:88:e3:20:25:08:12:ab:be:d4:54:ba:35:c6:77:63:
         6c:5f:b5:ad:cb:9b:c6:dd:07:ba:69:96:e2:f5:a4:71:7b:60:
         cb:51:7a:a4:c9:40:dc:d3:7e:c1:ff:51:7b:64:c5:d7:9b:b1:
         f0:10:d3:01:b1:fb:df:c7:cc:94:ac:79:b8:39:0b:bf:a3:b4:
         cf:39:47:d0:b5:75:ad:47:a4:05:92:6a:58:f2:d5:08:77:81:
         2f:cb:5a:09:0d:1b:06:42:d6:57:7e:d5:69:d6:35:6e:3d:17:
         a4:87:b6:aa:51:e2:70:60:92:18:02:04:90:ad:cb:8e:e9:7b:
         da:00:dc:e7:a5:71:3d:04:3d:65:c5:50:38:5f:15:7f:1e:5e:
         a7:36:01:7f:fb:d7:90:70:ee:d6:47:ba:72:9b:57:2b:55:88:
         1f:ea:90:48:86:4b:46:60:de:d7:ab:dc:0d:f1:73:6f:9f:41:
         a1:41:47:59:08:41:cb:2d:b1:1f:28:3f:d0:ea:08:d3:e0:3f:
         8f:38:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:51:32 2026 by rpki-client