Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae4126-4d48-32ac-beb7-429581920c17.roa
File:                     fbae4126-4d48-32ac-beb7-429581920c17.roa (raw, json)
Hash identifier:          3DMyP0Oe6/N202JIGBul73+SZUg9B4XyCabkYY3tJMY=
Subject key identifier:   C1:48:57:E3:B5:40:FC:2A:C7:5F:BF:5E:5E:3A:76:E2:06:24:49:78
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F119CFFD731CDAA0A1BEDA920
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae4126-4d48-32ac-beb7-429581920c17.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     396563
IP address blocks:        2001:502:8cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:ff:d7:31:cd:aa:0a:1b:ed:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=86840aea-c01a-412f-94cb-dff253747765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:5d:30:a4:be:c9:3b:8a:c6:6a:30:90:a2:
                    b8:89:0b:75:6e:e0:dc:e3:73:27:f1:db:aa:3b:91:
                    bc:e4:c7:10:6d:f9:95:d3:c4:d1:13:48:c0:50:ea:
                    0b:15:8b:d0:c1:91:40:f6:15:7c:6d:b6:da:44:4a:
                    e0:70:1d:f7:6c:77:8f:a1:0d:74:e4:e4:11:0e:25:
                    82:02:0c:b9:75:1b:8a:bd:25:7c:60:43:34:2e:c1:
                    e1:f2:36:7a:65:bc:46:f4:55:74:dc:d8:0e:d6:60:
                    f5:6a:7d:5c:72:3e:49:b0:c3:be:99:a9:82:5d:78:
                    3e:87:24:d4:0a:03:f5:50:79:81:ef:05:18:df:9f:
                    a2:0a:0e:14:14:5d:91:f9:75:92:2c:d6:3e:65:54:
                    9b:11:e7:c6:5b:79:8d:2c:00:43:e1:c7:67:1d:b3:
                    98:c6:c6:7d:2d:fa:d3:9b:a5:c8:cc:58:ba:06:24:
                    15:09:af:23:c7:7a:9c:7a:1c:9a:48:09:dc:46:20:
                    3d:6c:41:28:71:3b:8c:15:06:a2:78:dc:cf:dd:63:
                    0d:78:e4:c7:6c:df:71:89:f2:b6:4d:90:e1:63:dc:
                    6f:7e:d7:58:3a:21:2c:8b:c4:ca:77:f3:11:f7:db:
                    09:2e:a2:f5:86:7a:0b:a4:ee:f1:2a:28:ae:89:e9:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:48:57:E3:B5:40:FC:2A:C7:5F:BF:5E:5E:3A:76:E2:06:24:49:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbae4126-4d48-32ac-beb7-429581920c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:03:dc:87:cb:50:e5:d3:a1:5f:73:4b:68:62:a5:9f:e7:94:
         37:ab:c4:e8:43:a9:67:cf:f8:9d:1d:3a:0e:79:c4:4e:0a:cd:
         1d:d0:b2:db:b3:87:53:af:92:f1:9a:fb:09:fa:b0:89:60:61:
         aa:64:6e:1f:bb:84:47:c4:fa:67:1c:bc:12:f0:c7:41:8d:4c:
         f0:76:fc:12:2a:23:7e:c4:ce:4c:e9:02:b3:42:d8:5b:18:b4:
         49:96:f5:4c:b5:f3:b8:f2:20:aa:03:57:6c:92:b9:14:af:c1:
         df:f3:a2:2a:5e:00:8b:2e:72:21:43:2d:39:58:f9:6c:d8:00:
         1c:9a:1e:a3:58:bc:d9:c8:ae:35:ce:2a:a6:3d:0d:6b:79:35:
         7c:19:42:eb:29:9e:e8:f6:83:19:90:9c:b8:c8:cd:eb:21:f9:
         42:65:3e:b6:55:9e:b7:15:23:98:76:12:3b:80:27:b1:df:b6:
         ff:ea:07:5d:fa:21:81:e6:9c:04:b9:98:99:92:d8:d7:70:5a:
         04:85:c9:b8:fc:4d:d6:3d:60:96:20:7a:86:a2:55:d9:b5:05:
         57:03:1b:88:5e:d7:19:ba:c8:19:85:2b:cd:06:14:ae:c4:5f:
         8d:6f:5f:b1:a1:cb:8a:5c:52:af:91:30:3e:6b:52:90:ee:8d:
         3e:9d:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:02:10 2026 by rpki-client