Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2d5a80b-ce71-34fa-be26-a8658c2e4e68.roa
File:                     f2d5a80b-ce71-34fa-be26-a8658c2e4e68.roa (raw, json)
Hash identifier:          v7Vu3Pl0PaAdDnUX/KfGNSH1TVVUz8B1kTSalh7WC2s=
Subject key identifier:   C1:91:62:11:6A:49:5C:08:62:3C:6D:97:CA:8B:1C:27:C1:4D:1D:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498B92E51E332EFC360F7280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2d5a80b-ce71-34fa-be26-a8658c2e4e68.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     397206
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:92:e5:1e:33:2e:fc:36:0f:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dcf1ac9a-14c1-4dd2-b1e5-57277c1c4888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:03:78:45:71:7d:e9:62:61:2b:a7:0e:bf:f9:
                    9b:d6:95:21:88:71:02:35:e3:dc:50:38:8c:f8:20:
                    7c:90:dc:c0:be:8c:57:00:17:76:25:ad:61:ec:a0:
                    7d:ed:a5:5a:52:25:1c:24:1d:72:bd:d1:d8:f7:6d:
                    aa:2d:dc:7d:0f:71:81:9b:86:aa:f0:21:bd:0c:0d:
                    6d:72:bd:47:51:46:c6:0b:fd:19:0d:ee:79:89:f4:
                    a3:21:52:d0:05:6c:bc:66:3c:30:53:2a:94:a3:ba:
                    6c:1c:4c:a8:22:74:df:34:d7:11:ab:48:62:c9:fb:
                    16:83:93:e8:83:2b:0b:7a:d2:98:05:7e:b4:4a:ed:
                    6a:ea:31:c5:bd:5c:22:d6:81:80:55:ce:4a:37:c7:
                    5f:42:39:7c:14:e4:9f:6b:2a:af:b9:f8:b1:65:85:
                    86:5a:85:a4:9a:3d:c5:9e:7f:fb:fe:6d:aa:f1:95:
                    de:26:1b:01:03:b4:81:c3:8a:35:55:55:8d:a0:dc:
                    f9:a6:3e:76:69:2f:c2:c0:53:72:3a:9c:43:ef:5c:
                    5e:39:9d:bb:1b:81:06:f6:37:4f:c0:83:92:96:be:
                    34:38:1e:ae:75:e0:4c:67:04:87:57:25:aa:88:99:
                    1d:05:1a:c4:a6:05:6d:e0:16:8d:23:de:31:b2:2e:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:91:62:11:6A:49:5C:08:62:3C:6D:97:CA:8B:1C:27:C1:4D:1D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2d5a80b-ce71-34fa-be26-a8658c2e4e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:f0:84:81:f9:e4:cb:78:b9:07:1e:88:6a:89:fc:d2:cd:19:
         3a:26:22:ae:9d:e6:b5:32:a4:d2:37:ae:93:ed:c9:10:5c:72:
         e7:ea:78:62:6a:f4:a7:21:cd:46:14:11:9b:d5:32:4b:3b:54:
         c6:73:12:ed:44:b0:9f:b8:52:7e:1f:cd:2a:ba:04:f6:6f:bc:
         2c:7f:b3:5b:bd:3f:d2:3b:dd:95:13:08:1e:d3:28:3d:ca:5b:
         a0:a1:8c:e5:3f:68:0b:5d:f5:48:37:06:7e:42:4c:b2:6a:96:
         0b:47:d4:b9:3f:3f:05:78:8a:b0:32:a9:9a:79:4b:9f:66:65:
         49:13:9c:52:e9:05:3f:fd:94:a4:8b:bf:a2:7c:d7:80:23:b5:
         8a:7c:33:99:53:81:5e:5c:87:ae:db:7b:14:ac:22:ed:e6:3f:
         43:a0:ef:9c:cf:2f:b3:3e:06:40:bf:54:55:2c:f2:be:73:4f:
         56:52:8f:1d:e3:fe:4a:f5:65:df:a5:1c:08:2d:f2:91:24:ff:
         04:08:67:4e:0c:8e:b1:3a:1e:a7:61:00:8f:7f:5f:00:f8:8e:
         19:54:e6:4c:21:29:18:43:10:7e:82:22:27:86:ac:b2:79:66:
         13:48:bf:9a:f0:5b:ac:5f:8d:a6:c4:59:d3:29:93:51:a8:5c:
         4d:02:74:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:02:32 2026 by rpki-client