Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb116d9-f532-34d9-9bcc-9ba034fd9f97.roa
File:                     ffb116d9-f532-34d9-9bcc-9ba034fd9f97.roa (raw, json)
Hash identifier:          wg2cqwdB6K17C9ZXsBH4dR/rsPGh6NrDTziet1MP6lk=
Subject key identifier:   57:A0:0F:EF:1F:77:69:B6:3C:ED:FE:A1:20:19:15:A6:49:7A:9C:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF01CC88B412C103116340F40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb116d9-f532-34d9-9bcc-9ba034fd9f97.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     20431
IP address blocks:        2001:500:120::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:c8:8b:41:2c:10:31:16:34:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=9d50047e-a4ff-43d3-9ebb-c9f49cd612fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:47:d5:05:21:a2:95:6a:a1:67:d9:60:20:94:
                    cf:ed:d8:06:44:98:5a:7f:f1:75:dd:e2:27:e0:72:
                    f2:03:35:0a:b5:48:b0:86:cf:15:e7:2e:82:cb:e6:
                    e9:92:5c:c6:3f:5f:2b:34:c2:14:5f:72:38:20:4d:
                    52:a6:60:f1:ac:15:3e:c1:db:f5:66:96:e9:06:9d:
                    1c:aa:26:49:ec:e7:45:2f:72:a8:6a:f2:1b:19:a1:
                    e0:31:69:af:29:de:c1:90:78:30:66:58:0e:4f:4d:
                    7e:66:a3:61:b8:ca:37:f4:17:dc:ea:8b:62:c4:6a:
                    cf:57:f6:55:b0:64:9f:09:fe:bb:8d:cd:64:b4:c5:
                    f1:68:0b:22:6c:8e:75:62:0a:ab:4c:af:cc:2e:ef:
                    37:3f:f0:51:53:80:49:57:0b:6f:38:a9:55:55:df:
                    9c:fe:9e:19:f5:85:90:fc:9b:4b:75:09:c5:16:3e:
                    c5:2e:6f:9a:33:c1:3b:29:8d:b2:f0:74:73:48:1d:
                    f5:a7:f4:dc:31:32:f6:39:e0:aa:a8:04:c0:b4:3d:
                    26:7e:dd:a6:de:43:28:ae:2c:8e:1b:4b:c4:b8:d8:
                    b0:13:78:a9:a7:ae:c0:92:6b:76:3c:a4:53:c5:88:
                    ff:8b:88:46:43:24:eb:dd:43:4d:54:f8:64:47:e2:
                    18:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A0:0F:EF:1F:77:69:B6:3C:ED:FE:A1:20:19:15:A6:49:7A:9C:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffb116d9-f532-34d9-9bcc-9ba034fd9f97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:23:fb:40:12:c0:f7:ae:d9:e1:66:a5:bd:17:8b:ca:8f:95:
         2f:91:d4:b4:59:83:ed:04:67:32:07:6a:3f:7d:4b:77:34:22:
         b9:b2:53:6f:c0:b1:43:26:2d:bb:b3:a2:28:3f:de:07:b9:2c:
         80:43:76:0e:0e:a0:58:26:ad:2b:6a:8a:34:53:e6:43:f2:82:
         d9:a3:f3:62:62:d3:d4:98:c6:16:94:b0:80:27:2c:cc:d4:38:
         f0:3c:36:94:6c:bc:3c:5d:27:29:38:a3:4e:d8:37:51:6b:5f:
         5c:fc:f9:71:d4:52:c6:48:eb:5b:dc:2c:f1:49:34:84:23:80:
         da:b1:b5:50:0d:82:d2:a9:27:61:c1:81:35:5c:1d:0c:19:d9:
         3a:c3:a8:18:4f:0b:57:48:71:d4:d3:e2:bc:bd:24:7a:fd:3b:
         4c:f4:a0:c1:04:19:50:b2:e0:7c:07:d6:07:54:de:1e:c5:ce:
         08:66:9b:21:12:e2:25:70:cd:0d:4b:7e:6f:6c:6a:62:25:a4:
         91:39:b0:f5:1f:84:fa:92:19:2e:43:8f:06:3e:c4:02:c0:d8:
         aa:2b:e7:62:4f:89:ec:aa:1a:a8:be:95:b4:e3:1e:3a:10:6d:
         7c:56:49:5b:14:e0:9b:cb:fa:03:b2:91:e5:f5:5d:a8:f8:78:
         24:77:bd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:55:04 2026 by rpki-client