Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c96b6e02-fdff-330b-b1b3-7712ee57e9a7.roa
File:                     c96b6e02-fdff-330b-b1b3-7712ee57e9a7.roa (raw, json)
Hash identifier:          THk9Y++ia1sA+U513eOyCe8zvhpP61ANgmseOxehPzQ=
Subject key identifier:   E5:E7:F0:9F:24:39:35:C6:0F:1C:A3:34:7A:98:33:88:73:CE:BB:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49736AFF5F06FBDF46FD7460
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c96b6e02-fdff-330b-b1b3-7712ee57e9a7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36616
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:6a:ff:5f:06:fb:df:46:fd:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e364a6ea-2bce-4df2-938f-b5450d965e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:55:03:a9:7f:45:33:d8:67:a6:9f:c7:69:35:
                    1b:05:81:f3:bb:81:82:c6:18:ef:bc:4f:9b:c7:4b:
                    04:c7:3b:3b:64:45:72:3a:03:b4:bf:1b:d9:44:4c:
                    9d:e8:9f:42:52:3b:ec:4a:b5:a9:46:3b:13:40:45:
                    2c:aa:97:b7:83:ad:db:59:35:0f:1a:f8:ed:0d:44:
                    3b:21:12:af:c7:ed:00:36:fa:46:2d:0b:f9:ed:9d:
                    b0:9a:8e:12:f2:a7:df:3e:81:88:19:9a:ad:c7:9e:
                    60:97:5b:78:cb:f0:3c:ed:d4:37:66:79:d5:f2:b5:
                    5a:d7:09:9b:6f:87:84:cf:95:69:d2:43:d2:c8:18:
                    ab:7b:58:0b:d6:46:b1:bc:c0:7b:17:2d:0c:60:6b:
                    ab:c0:91:67:4b:bb:57:b8:9a:10:a9:a0:0f:ed:73:
                    80:47:ed:5c:ff:06:1e:22:7d:7b:01:d3:23:5c:a3:
                    73:6b:ac:a8:40:ab:7d:00:24:51:a3:2c:dc:96:b9:
                    b2:28:62:c5:8a:38:96:c2:4d:fc:e2:ab:4f:b7:6c:
                    83:de:0a:00:23:87:a8:90:05:69:f3:ff:2a:97:f2:
                    2f:31:8f:b5:15:76:b1:52:c1:27:3b:bc:fd:6f:53:
                    9a:9b:fe:86:14:94:14:79:2d:d8:ea:02:8c:ec:d0:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E7:F0:9F:24:39:35:C6:0F:1C:A3:34:7A:98:33:88:73:CE:BB:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c96b6e02-fdff-330b-b1b3-7712ee57e9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:40:2c:c9:50:d9:66:e4:76:45:13:96:ee:cf:a3:8e:2a:ee:
         72:5c:b5:84:63:e7:c9:74:31:38:60:9b:33:49:5c:d3:1c:c0:
         92:7d:26:ad:6b:12:24:24:76:ed:c9:af:e0:a3:a6:ed:33:e9:
         e3:b5:c7:36:b8:b4:07:c3:55:4b:9b:e1:32:2e:70:a3:b8:cc:
         28:51:f9:58:56:72:34:dd:7b:22:9d:5d:af:3e:d7:83:52:49:
         88:fa:2c:9b:64:2b:34:df:31:e4:c0:fa:0a:da:ac:d8:da:d7:
         4b:52:e0:4a:10:74:1e:71:3d:33:f2:d3:f2:31:d2:dc:6c:72:
         28:c0:e4:7e:51:54:7f:ef:8b:0e:25:4b:f3:0e:81:b2:82:ad:
         1f:f2:6c:db:69:01:8a:da:0e:03:83:c8:45:f7:d3:1d:b5:25:
         6f:f3:32:f1:8c:a0:90:b7:59:53:97:91:7b:e4:1a:85:e3:28:
         71:f5:1b:a7:fb:e2:2a:56:e3:1d:2e:67:b9:fe:36:4e:40:5b:
         6a:de:ca:ad:d7:21:34:46:1b:ab:38:08:55:07:29:05:d6:26:
         fe:0f:85:52:b2:ed:29:a0:bf:f1:9f:43:99:df:b8:83:61:8f:
         3b:79:f6:f8:71:a2:84:f9:2e:5d:0b:7e:f9:bb:da:d6:97:84:
         5e:eb:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:32:53 2026 by rpki-client