Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b6697ae-1be8-3f62-9b9c-2edd78e42f62.roa
File:                     3b6697ae-1be8-3f62-9b9c-2edd78e42f62.roa (raw, json)
Hash identifier:          xNs0VGmtXE6vTQ87SAYAsNF2phMkgSKxDDMS9hfPr5w=
Subject key identifier:   38:70:D1:F6:80:9A:D6:3F:AF:50:EF:D5:F3:D6:B3:D9:75:A3:E9:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE2274B5DB6AC259D66820A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b6697ae-1be8-3f62-9b9c-2edd78e42f62.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     397200
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:4b:5d:b6:ac:25:9d:66:82:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=01ec0218-48b6-47dc-8227-cb323da4c2cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:27:25:5a:93:48:39:7d:d2:24:9e:14:25:
                    eb:df:bb:b0:06:c6:46:34:62:de:5d:21:be:8f:a4:
                    f4:89:d4:04:95:ec:f2:04:bd:41:e8:c3:16:85:6f:
                    e0:20:95:21:4a:1d:8b:c1:e2:13:3b:b9:92:1a:42:
                    cc:a3:80:2a:44:1e:c8:2b:7c:e0:0a:49:a8:80:4f:
                    15:61:3c:5f:02:2f:55:0e:ab:52:56:3f:d6:46:14:
                    83:9a:91:a7:30:30:4c:6b:cd:50:04:09:ef:9b:f0:
                    5c:e4:da:cd:7b:f4:76:df:ef:7d:4f:94:b6:56:a4:
                    88:fe:bc:70:b5:8d:94:81:71:aa:d7:4e:55:30:2e:
                    1d:9e:ed:51:ec:a1:37:72:f3:64:a8:8c:eb:4a:e1:
                    70:90:24:d2:16:49:4d:9a:96:f7:7b:fe:12:8c:85:
                    83:0d:b8:90:26:87:85:05:bb:8a:70:8a:b4:df:ce:
                    77:f4:6e:45:52:84:01:8e:d3:c4:8b:c4:80:9a:41:
                    87:41:a4:b4:30:4d:9b:cb:29:1b:61:76:cd:ee:e0:
                    28:02:ab:89:bf:fc:b8:c1:4d:5f:76:b9:80:fe:2c:
                    40:85:63:2c:df:89:8d:ec:c8:4d:de:39:3e:25:22:
                    e7:27:82:90:9e:25:f8:31:53:3a:3a:d3:70:e5:74:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:70:D1:F6:80:9A:D6:3F:AF:50:EF:D5:F3:D6:B3:D9:75:A3:E9:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b6697ae-1be8-3f62-9b9c-2edd78e42f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:6b:0c:88:26:0a:2f:1b:6a:46:67:8d:1b:d3:fe:a9:4c:f9:
         f0:1e:5c:d3:08:ec:47:0f:86:0b:01:32:66:dc:7e:f9:ba:f1:
         d5:0c:52:13:7d:1d:a4:cd:22:a7:2f:48:b3:80:0f:6b:bb:fc:
         ab:dc:66:ca:67:a4:91:04:46:1f:db:32:40:6c:06:75:f8:eb:
         d2:91:53:4c:ee:e5:2d:62:c9:a2:6e:0b:ed:4c:b0:0d:d9:94:
         8d:18:27:49:b8:6b:90:ac:85:51:b5:c8:87:06:de:fb:cb:92:
         7a:6f:82:06:77:84:d9:0f:76:75:93:ef:dd:50:06:4d:2a:c1:
         ed:a4:c9:3d:ae:b5:3b:cf:7b:d1:24:a2:d8:98:cf:54:e5:46:
         18:f4:ee:ce:ae:31:52:09:e0:f7:ca:a1:bf:84:bf:89:b9:bd:
         c9:cb:4f:b0:4c:ea:4f:58:2e:98:d2:07:f0:ca:e8:04:19:e1:
         9f:37:44:55:48:50:52:f6:fc:9e:72:69:80:e4:a9:dc:40:ec:
         06:d0:3b:ce:dd:01:14:9e:ac:3a:a4:76:8a:cf:af:10:d9:14:
         56:34:b4:d6:ba:d1:55:54:86:32:3b:31:90:7a:ec:54:c0:f4:
         74:9f:40:21:b8:44:78:b0:79:b7:d4:5e:39:f9:8a:a0:73:e8:
         dc:28:b2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:05:53 2026 by rpki-client