Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce6acbb0-6ae6-3092-85b1-f25fd0db2b80.roa
File:                     ce6acbb0-6ae6-3092-85b1-f25fd0db2b80.roa (raw, json)
Hash identifier:          WS5jHglgI93x78PJwcvaWL0+vgtVTVSrwYimzgXMxUk=
Subject key identifier:   2A:AF:D3:C4:49:11:E2:AE:B0:0E:35:28:40:B3:18:0B:EA:6D:9A:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498B7FCC77A57F32E628D740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce6acbb0-6ae6-3092-85b1-f25fd0db2b80.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396562
IP address blocks:        2001:500:d937::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:7f:cc:77:a5:7f:32:e6:28:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=4e947ec9-c65e-48c6-bfe9-945eb6446896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:40:11:32:08:d5:37:ff:7b:e2:8e:38:27:76:
                    1e:1a:15:cc:0b:ed:f3:ce:06:81:63:0e:5f:16:c0:
                    a1:de:b6:5c:5a:42:72:b1:7e:91:17:51:52:61:cf:
                    1e:4d:e5:43:d6:6b:76:28:13:71:35:e2:30:4e:a5:
                    54:ad:40:33:44:22:d7:ee:b6:4a:bb:82:32:4f:fe:
                    9b:eb:2a:87:51:ad:15:a1:e0:03:64:68:f7:97:2c:
                    bf:92:a6:90:de:48:d4:6b:91:a5:db:7c:e2:c9:a9:
                    04:66:cf:f8:2d:c5:4d:a4:52:22:53:2c:be:30:59:
                    51:b0:e0:cb:fb:c6:4d:42:55:55:c2:6c:30:63:c3:
                    ab:5b:9a:b4:cc:32:52:7b:3c:d8:a3:2c:45:92:a8:
                    2c:f8:3b:4f:ed:8c:5e:71:e4:63:19:96:cc:58:03:
                    0d:73:32:86:b2:ec:9d:44:ad:38:a4:ab:01:db:6a:
                    75:b0:ed:b9:b5:81:b4:29:06:41:7f:c6:6d:cb:39:
                    39:dc:f4:04:e7:8a:e0:39:76:a3:f9:9b:d4:63:65:
                    d4:c6:36:9b:3c:2f:db:a0:f8:d9:84:7b:cc:c4:8e:
                    52:06:5f:c5:a6:67:aa:93:44:5b:5a:73:99:13:74:
                    62:17:18:4a:f4:45:dc:e8:71:03:c9:cb:cd:3b:91:
                    dc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AF:D3:C4:49:11:E2:AE:B0:0E:35:28:40:B3:18:0B:EA:6D:9A:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce6acbb0-6ae6-3092-85b1-f25fd0db2b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e0:fc:d4:0c:71:50:6f:34:cd:1b:5c:43:31:9a:c3:55:f4:
         2e:36:3f:01:ea:f3:34:e1:8b:7e:7a:ac:60:70:42:49:33:8c:
         52:bb:5d:56:62:0a:e7:67:c2:c7:ce:72:c0:5a:20:39:c0:31:
         c8:b9:79:da:c1:3a:59:9c:e9:4d:08:a0:2e:b6:62:f3:b4:c0:
         ac:95:10:ef:a7:b0:d2:92:e2:f1:32:81:f1:b7:b6:bf:50:97:
         ef:d4:38:9a:89:89:a5:2a:e9:8b:48:76:e3:69:fb:c2:62:01:
         5f:92:15:b2:04:4d:2a:cf:f0:89:6a:66:43:00:1e:eb:c5:ca:
         13:a2:39:66:26:20:83:95:ec:7d:00:ec:d3:a8:27:8a:39:6f:
         08:49:90:86:86:70:75:a9:33:f2:39:fe:0c:a6:46:00:27:e7:
         ca:5e:eb:ba:ca:d7:a1:ba:ee:a7:05:e6:f1:10:bf:b6:f9:d5:
         75:8f:37:68:9c:d7:cf:a4:9e:74:88:ec:a0:27:ee:be:7a:aa:
         ed:55:44:19:d1:03:ee:9a:ec:5c:f6:b2:6f:aa:fc:45:22:91:
         1e:2d:a2:44:58:5b:5a:b3:18:47:3c:7c:97:b5:c3:0c:ea:57:
         0e:5f:25:d4:0a:ac:40:e4:2a:26:e3:fa:55:3c:60:d8:bb:84:
         81:87:62:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:22:19 2026 by rpki-client