Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc80b007-4109-35cf-8bd2-e93ee56fd045.roa
File:                     dc80b007-4109-35cf-8bd2-e93ee56fd045.roa (raw, json)
Hash identifier:          Ku1ut01HvMdJGIh9vE2rTL77x40hM2NiSlZN0PL52D8=
Subject key identifier:   FD:81:12:23:A5:C3:51:FB:A1:8C:D7:58:65:ED:66:CB:92:DE:DF:62
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F7C5E44B366BAB962E980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc80b007-4109-35cf-8bd2-e93ee56fd045.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396544
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:7c:5e:44:b3:66:ba:b9:62:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=02fe9dc3-1fae-4df0-baef-7f2e9ca7b447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:f0:6c:ba:9f:5d:ee:2d:f6:f6:23:25:88:
                    25:70:75:09:42:99:48:fa:48:c5:cb:1e:c3:08:c8:
                    34:90:66:7a:cc:63:9c:dd:4d:2b:c4:47:3e:fd:de:
                    b2:09:3e:00:1f:e3:f8:00:9a:4d:53:24:d6:e4:40:
                    76:79:f0:38:e8:d6:03:94:ac:f6:1a:21:28:3a:48:
                    a2:32:5a:a1:d0:3e:5b:79:9a:34:06:53:ae:2c:c2:
                    bc:69:ec:d7:65:0f:85:89:2f:e5:c5:ee:7c:f0:e3:
                    54:5b:e8:d3:14:9a:f0:09:5f:81:1f:2b:5e:86:15:
                    5d:34:b3:7d:f3:d3:3f:70:86:6d:24:24:79:99:cc:
                    04:69:04:28:10:d8:b9:52:4b:0c:98:04:a8:24:b6:
                    0d:49:8b:d4:ea:98:63:f2:4b:00:10:0d:ef:5d:84:
                    f1:d3:88:56:cc:be:eb:5c:2d:0a:ed:d2:41:87:b2:
                    8d:43:ac:85:4f:34:e4:f4:2f:47:a3:91:73:f0:be:
                    54:d0:be:0d:b1:97:0e:06:2a:5c:0e:e5:fc:03:58:
                    b4:29:e6:05:61:54:c4:26:4f:87:6a:d2:08:c2:46:
                    9d:02:ec:cd:d9:d8:a0:25:09:8e:e3:2e:54:27:e6:
                    e7:eb:a0:03:7a:e5:d0:3e:8f:60:4d:39:4f:d3:1f:
                    b6:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:81:12:23:A5:C3:51:FB:A1:8C:D7:58:65:ED:66:CB:92:DE:DF:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc80b007-4109-35cf-8bd2-e93ee56fd045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:1d:f0:4c:4e:99:54:4a:37:47:77:fa:38:73:2d:7a:e1:26:
         5e:67:5e:05:3a:81:7b:ca:04:15:31:18:16:7d:d6:7a:1e:48:
         43:db:c1:32:48:f3:6e:22:10:b7:9a:b6:30:38:88:75:ce:ea:
         40:6e:42:e4:18:4b:88:67:0e:40:f1:b3:82:77:3d:50:bf:25:
         d7:b3:7b:b8:96:00:e0:d6:c9:1f:28:ba:59:be:92:08:c2:f8:
         29:40:e4:fe:d0:73:c3:04:40:be:f2:92:89:a6:16:29:13:02:
         9e:e9:99:16:55:b5:fc:1e:29:02:46:63:20:60:1b:5c:75:58:
         4c:aa:2b:a7:34:29:93:47:f1:92:b8:25:ad:a3:82:98:51:44:
         92:24:07:41:27:9a:dd:0d:44:a0:d8:bb:ef:bb:92:19:c6:3d:
         f4:a6:cd:55:78:62:9c:39:ec:c8:12:99:d8:a4:20:b8:e2:0d:
         b2:4b:2c:17:bd:5a:06:47:a4:19:a0:d5:96:86:13:f9:30:e8:
         70:85:44:40:dd:46:84:7e:e5:19:1e:9a:01:0a:f9:66:9f:29:
         76:c3:81:61:77:3e:0f:f8:69:48:de:e0:27:64:8c:e6:3e:03:
         b2:2e:c0:af:be:cd:e6:3e:56:99:70:36:08:43:1b:4c:f9:3c:
         ac:59:4b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:49:11 2026 by rpki-client