Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bffa3c-0cff-310f-9749-fc810daba093.roa
File:                     50bffa3c-0cff-310f-9749-fc810daba093.roa (raw, json)
Hash identifier:          y3kmS41lzRtcc0tzb7NmbT86U1NaerctNoiW9OfNhSE=
Subject key identifier:   AA:4B:92:D3:27:06:99:F0:7A:F0:39:3D:5F:D0:0B:A8:5F:56:1D:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067277D06511DA70E4902200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bffa3c-0cff-310f-9749-fc810daba093.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396617
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:77:d0:65:11:da:70:e4:90:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=ed8ea8cf-a482-49d6-b72d-832f2f06365c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9f:8c:ad:e1:12:4e:00:5c:f8:6d:d4:96:eb:
                    1a:e5:25:b0:1a:b3:99:47:a3:17:35:d8:eb:7e:66:
                    d8:cd:96:3e:47:24:3d:04:ef:f2:61:74:f8:a6:f1:
                    5c:d1:f6:ab:26:dd:f2:91:67:32:1e:c3:eb:e3:59:
                    f8:f6:87:22:16:02:eb:00:fb:1f:a8:23:f4:ac:f4:
                    92:9c:b6:75:1e:86:45:2c:7e:c3:1e:a6:09:bc:bd:
                    22:25:4d:66:55:8e:98:7c:28:0f:aa:9e:0d:e6:bc:
                    98:9c:6a:b3:bf:f1:30:11:db:dd:ab:e6:e6:1b:a2:
                    8b:3b:4b:b3:60:f2:4e:65:2d:22:c3:9c:f7:da:17:
                    e6:79:60:a9:c4:19:ef:64:96:c6:17:05:6e:bf:27:
                    dd:30:61:0e:4f:94:8d:65:6f:6c:8a:51:a7:7b:1c:
                    96:0c:3e:59:e1:a7:28:e9:44:ac:4c:ec:43:04:85:
                    e4:5c:75:44:ae:ec:b7:12:bf:87:a5:1a:5f:d3:f1:
                    de:89:e9:40:2d:37:88:d6:e1:37:d9:13:f7:ec:cf:
                    ab:55:6c:fc:a9:e2:47:e6:04:3a:23:5c:86:0b:d2:
                    c8:08:fa:28:bf:52:d8:9f:f5:93:41:a8:d6:7b:30:
                    d9:eb:c2:68:0c:f2:52:88:e7:2d:6e:73:0a:b5:b4:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4B:92:D3:27:06:99:F0:7A:F0:39:3D:5F:D0:0B:A8:5F:56:1D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bffa3c-0cff-310f-9749-fc810daba093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:b0:90:d8:ab:61:36:ee:e0:65:d6:e6:c9:fa:b6:88:ce:74:
         fa:be:98:f4:9b:f1:5b:af:7f:99:f6:b6:5b:a3:35:5b:f4:40:
         17:ff:1c:5f:46:23:58:d1:b6:7a:19:f0:44:ed:49:99:06:4e:
         61:fd:1a:9e:75:28:bb:49:f0:1b:83:28:cb:99:61:f5:ba:83:
         63:d3:98:1f:ad:7c:43:56:fd:2d:ef:b0:d8:4e:9a:07:db:3f:
         21:a8:2b:35:68:f2:6a:37:cc:4d:50:52:e3:7c:a4:6b:28:38:
         24:6f:ba:b7:25:a9:26:cd:96:d7:cf:04:29:13:2f:52:bd:d4:
         4d:a1:0b:d9:cd:9d:d9:38:d4:4a:f1:c1:47:bf:de:82:ef:7f:
         24:6b:7b:c1:ed:f9:7c:82:24:c6:c8:67:2e:c5:23:67:16:df:
         b1:a7:b5:8e:f1:87:3c:dc:39:31:5f:d0:94:f1:cd:a7:51:fe:
         bc:3b:f5:4f:32:80:66:06:6c:9d:f7:b5:91:7a:50:fd:7e:b9:
         5c:df:a4:dd:3e:86:27:80:86:8d:1d:c7:48:bc:35:7c:bf:f9:
         07:6b:80:94:3b:07:42:fd:f0:e9:f7:11:b7:e6:66:e0:a0:40:
         db:ec:8b:7a:b5:46:71:37:81:12:5a:38:a1:00:97:9d:75:32:
         9d:49:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:12:11 2026 by rpki-client