Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c530c06b-f7aa-309f-8ae6-4a3ae65ece6e.roa
File:                     c530c06b-f7aa-309f-8ae6-4a3ae65ece6e.roa (raw, json)
Hash identifier:          rKHjaIG+aRUOD/ilqEKD4QmqWxTRRYWX8sHuW4gA1ek=
Subject key identifier:   CE:31:D9:C8:BE:73:53:7C:DE:38:62:E5:22:39:C3:45:22:91:AA:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F19FCFCACF18C7EEFF72F2400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c530c06b-f7aa-309f-8ae6-4a3ae65ece6e.roa
Signing time:             Tue 08 Sep 2026 01:00:12 +0000
ROA not before:           Tue 08 Sep 2026 01:00:12 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     396547
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:19:fc:fc:ac:f1:8c:7e:ef:f7:2f:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  8 01:00:12 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=33906a80-5fe3-4d5f-88b8-c0a7ba1ccf13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5c:c2:a6:eb:19:c1:22:43:16:9d:c3:c6:e4:
                    9d:ad:3d:25:80:48:c2:47:9d:11:e0:25:8b:c0:43:
                    c3:c6:02:20:d8:71:7b:c3:e2:1d:44:ca:00:df:e7:
                    14:c0:c3:61:a7:fe:c1:f7:3e:00:f9:48:c0:62:20:
                    fb:99:e3:87:f6:4a:80:f9:ef:c8:23:38:71:5c:cd:
                    b7:58:6e:ca:98:2f:f4:9f:cd:a1:a9:7c:59:6f:a6:
                    b5:65:35:94:c1:94:b0:8e:c0:2a:d9:d5:48:4c:51:
                    8f:a3:3c:66:09:e7:ce:59:0b:f7:81:53:0c:c6:e5:
                    d6:af:0f:b5:55:24:26:53:a6:50:e7:29:21:24:bd:
                    92:52:29:99:dc:b4:1a:7d:77:09:c4:a4:be:88:ed:
                    18:93:42:4f:d8:af:0b:5b:b2:f7:d7:37:08:e8:10:
                    18:93:c8:c4:cb:c9:87:17:b0:e2:34:42:a7:a8:0e:
                    60:6a:5c:5a:5b:ca:b5:3b:40:0a:8c:2c:81:92:8a:
                    07:2b:d9:bb:dd:55:cb:3c:e0:d2:40:87:dc:93:a1:
                    0e:8c:04:ff:32:90:4a:65:8c:96:fa:28:5a:68:f5:
                    3d:ad:a1:44:6c:45:5c:a3:38:b3:09:a1:f6:b6:89:
                    d6:51:7f:64:99:dc:38:b8:db:ac:fe:d8:d7:4e:da:
                    35:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:31:D9:C8:BE:73:53:7C:DE:38:62:E5:22:39:C3:45:22:91:AA:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c530c06b-f7aa-309f-8ae6-4a3ae65ece6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:72:ce:26:73:05:a1:a9:a0:16:0c:ab:df:de:f4:ba:2d:3e:
         96:0d:44:5a:b2:3e:14:ef:fc:89:be:26:f5:e2:33:cf:ed:ee:
         31:a9:e3:96:90:b9:53:1a:11:9a:fa:a8:cc:a0:62:b2:71:ae:
         2a:4a:15:e2:dc:ab:a0:44:72:94:b6:f9:37:ab:cd:b4:ba:cd:
         bf:5c:0d:91:47:6f:5b:d1:97:d4:7e:1e:66:93:bc:6b:4b:a7:
         92:ff:d9:e8:4f:4a:19:c5:57:fd:4b:5e:de:e6:2a:27:88:bf:
         3d:4f:63:0d:fd:e1:b5:8c:51:7b:bd:20:4c:3f:b6:49:02:d9:
         b0:7b:d2:24:f3:15:06:e2:e5:ef:1e:ed:74:be:02:d4:e0:7f:
         94:52:03:8e:5a:f6:54:20:c1:1b:5f:de:5a:f2:f0:47:69:ca:
         b6:5a:ea:3b:c8:24:9f:6c:7a:b3:95:61:e5:69:a6:ac:49:69:
         cd:68:6b:83:cf:e8:21:d9:d3:1c:40:1d:ff:79:be:2f:0b:cd:
         ac:a4:4e:eb:df:cc:64:7d:60:d2:47:36:63:b2:fd:41:3e:24:
         51:14:04:46:aa:4c:aa:2f:a8:26:1c:cd:a4:a4:39:b3:98:33:
         9b:73:ff:57:e2:0e:d2:63:ec:4f:01:cb:96:16:d7:d2:8d:69:
         31:53:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:14:24 2026 by rpki-client