Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40dd2ff4-3924-3e95-9441-e2be137fdfdd.roa
File:                     40dd2ff4-3924-3e95-9441-e2be137fdfdd.roa (raw, json)
Hash identifier:          tx4v1ljXRtcyOfXPyM3e3fhfxCmjcPgnAs8Cu4R40zw=
Subject key identifier:   95:B7:23:CE:60:D0:58:35:F7:31:42:9B:C5:75:97:F0:DE:1C:0F:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498749D1F628532C1A973180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40dd2ff4-3924-3e95-9441-e2be137fdfdd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396542
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:49:d1:f6:28:53:2c:1a:97:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6c42d4db-1470-49ba-ba6b-b363b5176b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e2:6f:be:d6:bb:8f:d9:d0:f4:58:86:d5:ba:
                    6e:7d:23:7e:b3:a2:70:1d:a5:fb:c9:38:47:7f:5d:
                    5b:6d:f2:21:9b:08:8b:18:9e:3f:e7:50:ab:37:87:
                    fa:ee:a2:d9:5a:32:a0:c7:85:f1:20:36:df:98:7a:
                    8c:af:c2:90:5d:4a:f2:71:7b:6b:bd:a9:ee:b3:9f:
                    b1:f7:78:62:f3:50:7a:7b:db:1a:06:5d:46:e7:2a:
                    da:11:1f:ad:f2:88:48:97:18:8d:45:8a:26:79:19:
                    ce:0a:35:1a:9d:08:36:9b:e7:e5:c7:21:68:90:34:
                    04:7b:35:8e:51:fc:07:10:ab:b0:d8:ff:36:b7:e2:
                    94:48:d9:c8:72:ae:13:b3:70:af:4c:77:8b:a7:4b:
                    e7:10:38:ea:3b:ae:99:dd:fc:b8:1c:56:49:71:e7:
                    e2:09:72:87:f3:12:b0:07:88:0b:91:9e:75:f7:a9:
                    17:84:9e:3b:82:8c:00:c0:ed:89:ef:3f:ef:25:d5:
                    38:dc:66:e7:93:0c:b8:63:25:66:3f:dd:76:d7:75:
                    4c:99:02:c3:f3:58:d5:94:4a:bf:80:90:15:25:f7:
                    c2:c3:fe:bd:b3:03:2b:5c:eb:9c:42:2e:0f:2e:21:
                    ea:ac:51:a0:89:3a:42:41:b5:e6:96:95:e1:aa:23:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B7:23:CE:60:D0:58:35:F7:31:42:9B:C5:75:97:F0:DE:1C:0F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40dd2ff4-3924-3e95-9441-e2be137fdfdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c4:1d:7b:77:6f:e9:e5:06:ad:ef:49:3a:9a:2f:86:4c:ba:
         60:7c:20:73:c8:7f:7b:e9:8a:8b:24:a0:f1:df:3f:5d:12:73:
         76:a7:a3:79:58:bf:74:ff:d2:9a:c4:d7:16:dd:5e:b2:8a:80:
         68:2c:aa:05:60:69:82:7f:62:3f:7a:62:34:4b:54:35:5e:86:
         3b:4d:69:7b:6b:2a:46:5e:25:e2:27:3a:0c:2e:b0:30:8c:2a:
         2b:13:1c:21:31:06:1f:11:6b:69:5f:b3:df:20:e5:c1:f5:06:
         bd:85:59:67:3c:71:da:79:e3:0b:bb:ef:33:e2:7f:8c:d8:1e:
         d7:d6:59:5b:a4:9d:3a:01:35:25:87:71:d8:21:eb:b4:4d:11:
         26:29:f8:3e:57:f9:b2:f3:fe:fb:cd:9b:2d:48:cc:a0:ec:95:
         69:7e:24:76:20:0f:9c:7a:7d:8b:74:d1:b0:f0:45:54:25:b3:
         1a:96:8a:f8:b3:0a:b9:25:26:16:92:c8:16:b3:38:ea:a0:54:
         f9:e8:a0:fe:9f:3d:2d:80:cd:ef:0d:cf:dd:5e:10:1a:5d:78:
         98:01:ea:7e:b4:6b:ce:81:c9:5b:b6:d3:c9:61:6b:02:2e:9f:
         7b:c6:ec:3f:35:52:43:7a:36:82:58:cf:2b:52:ee:1c:79:da:
         be:f3:b9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:08:09 2026 by rpki-client