Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c37f4d09-021c-32b1-9a90-707015d311c5.roa
File:                     c37f4d09-021c-32b1-9a90-707015d311c5.roa (raw, json)
Hash identifier:          Jq5NbacOOZ+0aWG2UgpPjXRHf0xi7OjSyHzZ/jwl3Lc=
Subject key identifier:   95:15:9C:5F:E6:46:00:02:9B:0A:F7:25:8E:81:EA:43:31:FB:08:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0AA22AF9397FF4F9A870C038
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c37f4d09-021c-32b1-9a90-707015d311c5.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     396563
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:2a:f9:39:7f:f4:f9:a8:70:c0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=2f9db946-a4c5-4670-a212-f55008efd169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:c7:7d:bc:5c:4b:fe:a9:ea:93:15:4a:48:
                    c9:39:ed:ce:ad:32:63:b9:e6:6b:3c:4e:d2:34:33:
                    7b:e9:fa:97:c4:d6:78:ba:fd:0d:7f:76:0b:31:e4:
                    af:0c:bb:97:5f:41:83:40:b5:19:59:dd:8b:68:80:
                    57:31:71:e2:d0:29:60:f8:b9:c0:1a:2d:7a:a9:03:
                    ce:bb:f6:e2:ac:d7:a7:b5:b8:a3:cc:bc:0f:15:4c:
                    e1:4b:7d:65:73:74:29:5c:4d:9d:61:c2:bf:f8:29:
                    9c:7d:b8:ad:29:48:b2:33:85:42:ad:2d:2c:21:ca:
                    01:71:47:22:ad:c0:56:a3:88:d4:6d:4a:53:f2:db:
                    fa:be:1a:20:cf:c0:85:09:0c:f3:da:16:98:ed:e7:
                    67:dd:6c:23:43:cb:f4:60:b3:c3:41:0b:71:45:44:
                    26:b9:e5:53:1a:bd:23:e8:dc:8d:d6:c7:b1:eb:4f:
                    7d:e0:05:df:a9:c9:d8:bf:6a:96:82:77:df:2d:41:
                    dc:87:48:8b:56:6b:02:64:70:fd:10:50:43:99:a4:
                    c3:67:dc:0e:89:8b:c3:39:b3:6b:e7:24:04:51:cc:
                    c1:6d:e2:8b:9b:ff:a4:74:e7:79:23:b0:23:5b:c3:
                    8d:8a:91:2f:a3:af:8f:09:a1:f0:47:e1:bf:4e:ec:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:15:9C:5F:E6:46:00:02:9B:0A:F7:25:8E:81:EA:43:31:FB:08:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c37f4d09-021c-32b1-9a90-707015d311c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:67:a8:b0:67:00:8d:cf:48:ad:23:fa:a0:b3:e9:3f:09:a5:
         03:05:24:f2:ff:6f:de:aa:94:ea:bf:a6:9f:78:14:8b:75:3f:
         8a:75:78:7c:3c:23:5d:e0:9a:96:e4:53:38:97:16:0e:51:e5:
         7c:55:02:99:d9:7c:ee:df:ea:db:16:e3:74:f0:f2:12:9d:b4:
         8e:92:a4:ca:ca:e9:34:2c:ca:35:c5:fe:8a:e0:04:65:3d:ed:
         87:c7:70:28:c7:c1:03:a2:f6:69:5b:53:e4:b3:90:de:6b:61:
         d8:4e:11:34:71:2f:7b:a6:16:4c:7e:75:d2:ff:17:fd:10:10:
         f8:74:88:2f:ca:1a:1b:3f:9b:19:24:06:98:8e:f9:51:f2:7c:
         2e:be:4b:e5:5a:d1:2a:6d:99:94:8b:41:b3:4b:bd:c2:0b:0b:
         da:6e:00:dc:67:f6:7b:30:c0:5e:27:f6:40:15:ee:3d:85:f5:
         92:09:6f:c1:38:30:98:40:1e:99:b8:c5:1f:29:8d:bc:16:ca:
         4a:94:6e:b8:4f:e1:23:96:e3:ef:d0:df:dd:ce:40:6b:db:f4:
         90:fe:21:0a:49:df:47:e1:94:32:0f:08:ce:0a:e1:5a:6f:24:
         fa:9e:8f:dd:81:a1:e0:7a:ce:a1:48:5b:ce:29:30:63:fa:72:
         a7:7a:23:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 13:52:25 2026 by rpki-client