Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4b6b1f3-cff2-370f-8b94-5158208f1736.roa
File:                     e4b6b1f3-cff2-370f-8b94-5158208f1736.roa (raw, json)
Hash identifier:          jxVFWBt4xlU57NjtMiu/2O/jLoZrj/8Cn7MgM1cNKUU=
Subject key identifier:   2D:5D:5E:E2:E6:88:1F:16:31:F3:9B:4A:FE:7C:22:96:1C:4F:61:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4974468BE9E417BD0B7A5F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4b6b1f3-cff2-370f-8b94-5158208f1736.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     40717
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:46:8b:e9:e4:17:bd:0b:7a:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=69952936-062e-49bb-a537-654df6a582f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:27:c9:b1:48:8b:79:c6:11:fb:87:ae:71:
                    21:a7:8e:12:90:aa:76:6d:3b:38:c5:d1:55:0f:b3:
                    1e:11:34:9a:6f:03:4a:6b:4d:a8:70:21:f1:f7:e9:
                    cd:38:de:7e:67:e2:38:d9:7d:29:1a:20:40:ad:33:
                    5b:d9:1a:f9:6d:fb:fe:44:4a:bd:10:c3:b7:6d:af:
                    ff:48:55:11:15:a8:bb:e3:97:ef:e9:da:f9:8e:f7:
                    96:6f:4d:e4:e9:50:af:6f:23:02:41:44:c9:05:b3:
                    89:b0:86:18:9a:0d:25:a7:60:93:2e:3c:01:2c:bb:
                    58:bd:5b:de:9b:62:6b:ce:bb:f7:52:a5:f8:6b:55:
                    20:ec:0f:ec:0c:34:84:be:21:cd:ce:a5:5e:3a:0f:
                    81:9f:b4:75:6c:81:1d:10:4a:48:e2:0c:f9:76:6d:
                    ae:e9:0d:45:23:35:40:fd:2a:61:dc:59:9d:11:e6:
                    87:4b:29:a4:b9:92:6f:93:ef:18:d7:b6:b3:d3:2b:
                    b0:22:5d:c6:fa:53:0d:72:d3:7e:06:47:04:3c:e5:
                    0c:ee:f6:97:1e:42:58:68:f0:f6:87:3b:8a:23:dd:
                    1c:df:30:e0:10:bf:b3:92:70:83:96:a0:b4:7c:43:
                    7c:c0:4e:04:8e:62:22:a4:22:e8:34:39:2a:9f:5c:
                    a8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5D:5E:E2:E6:88:1F:16:31:F3:9B:4A:FE:7C:22:96:1C:4F:61:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e4b6b1f3-cff2-370f-8b94-5158208f1736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:7d:39:6d:d0:f0:8e:b2:fc:b9:87:5f:0f:06:99:c1:93:2b:
         f3:59:81:bd:3e:dc:5e:fc:02:b1:93:0b:aa:3d:ee:ab:9f:f8:
         98:cb:17:39:57:ce:d5:a9:c3:21:6d:50:d7:b3:e1:6e:d7:54:
         9d:6f:c1:48:d7:62:75:90:f2:72:e9:53:18:8f:27:c2:89:73:
         89:89:b4:e8:6b:21:83:5f:69:bb:5f:33:a1:35:e5:fb:b6:59:
         fe:64:1c:46:83:b5:17:3a:92:fd:45:36:7c:02:0a:5c:8c:d9:
         8b:47:7d:f6:17:c9:67:54:c7:6c:d0:80:1f:38:a6:6a:9b:0a:
         68:cd:67:53:c5:a3:ef:72:50:ec:ca:ee:c5:35:45:5a:fb:61:
         1a:9a:8c:99:55:c9:2b:38:f9:38:40:8e:2f:8f:12:e2:58:40:
         36:e0:8c:79:79:cb:b7:fb:c6:61:c6:1d:53:0b:19:9f:44:f8:
         f0:15:73:ae:3b:f4:f6:29:10:8f:d3:00:36:71:70:97:c5:0e:
         a8:a4:3a:61:e3:f8:7d:a2:d3:99:85:01:bb:99:4c:63:d7:9a:
         9f:80:59:6e:c6:95:58:b6:fe:b0:d4:0f:99:6c:8e:5e:db:ae:
         a2:48:74:b2:69:f3:e3:ce:1f:6e:7e:dc:f2:8d:28:9e:18:12:
         8b:25:cc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:22:05 2026 by rpki-client