Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/717d70bf-69b0-3c6f-8648-8f9fce6b0a50.roa
File:                     717d70bf-69b0-3c6f-8648-8f9fce6b0a50.roa (raw, json)
Hash identifier:          D4vRbCjiIyhRfE1trK+7bTh6sIMV4sCcNsKZH/YXPC4=
Subject key identifier:   EC:92:84:CB:75:1A:3C:B5:A9:29:EA:B4:70:68:9D:FE:51:BE:07:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498A6BF28F69FE8BA9A6642F
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/717d70bf-69b0-3c6f-8648-8f9fce6b0a50.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396600
IP address blocks:        2001:503:d414::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:6b:f2:8f:69:fe:8b:a9:a6:64:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8b7fb2c1-98e6-491f-8d82-d579d115eed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:09:fb:b9:d4:c0:c4:f6:ca:e8:f4:24:8a:b1:
                    56:b3:22:7f:5d:88:fa:59:60:f6:fd:00:fc:f9:68:
                    f1:73:3b:13:3d:0d:9d:6b:0d:50:72:cd:40:f8:89:
                    91:93:95:e3:a4:76:6c:22:e6:5e:76:df:36:60:41:
                    45:73:ce:bf:d6:64:b5:dc:71:06:3a:c6:be:68:46:
                    ec:ff:d9:83:24:71:69:13:37:37:a7:97:31:fc:a8:
                    c8:10:f1:4d:32:b5:b3:3f:75:9b:da:c8:b5:f5:e2:
                    c0:dd:82:c8:26:96:5e:87:e9:00:88:38:c4:bf:eb:
                    4c:0f:04:64:70:a4:ba:b4:2a:2b:f3:a4:59:96:2c:
                    56:ba:3a:d6:fb:9e:83:25:8a:e8:08:b1:84:a1:cd:
                    42:24:eb:ed:24:93:b3:3b:5d:db:25:b3:0c:35:2d:
                    0c:4a:22:bb:fe:6d:1c:90:6c:fa:dc:d4:58:f6:5e:
                    86:6c:15:d8:74:30:82:e2:46:d8:e9:0d:63:c8:2d:
                    94:cc:2b:92:17:e0:89:bd:60:79:20:6c:d8:94:cc:
                    c8:86:7c:f4:3b:33:d7:b7:50:3a:db:00:8c:37:0a:
                    01:62:a7:52:41:f4:76:af:1c:19:93:6a:e0:26:8a:
                    11:7d:94:ef:b5:4f:53:c0:d1:0a:94:19:97:f2:fb:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:92:84:CB:75:1A:3C:B5:A9:29:EA:B4:70:68:9D:FE:51:BE:07:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/717d70bf-69b0-3c6f-8648-8f9fce6b0a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:d414:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:1d:1e:f9:9f:3c:b0:97:18:7a:ba:50:b3:dc:25:b2:b0:7d:
         fa:80:f6:14:b2:0b:9d:17:32:4c:72:1b:05:88:d6:d0:cd:66:
         6d:23:67:e1:17:af:1f:bb:e2:4e:9c:e7:28:13:a8:7f:83:2e:
         ba:d7:af:a7:63:6b:0a:da:ee:b2:87:66:48:f9:26:a7:6c:1f:
         46:db:a3:16:52:f5:96:9c:38:17:0a:d6:3f:21:d2:f5:6b:f3:
         d4:38:e5:58:07:a4:85:79:4a:ee:17:d6:be:c7:5d:68:57:c0:
         b4:14:36:8b:32:06:92:10:26:e2:de:19:5e:81:80:8a:50:9e:
         08:8f:3f:46:db:4b:b0:66:ae:d2:7a:16:f5:e0:3f:48:84:88:
         b0:59:7a:54:10:9f:ac:9e:a6:6c:81:c5:d7:cd:0a:e2:3a:9a:
         83:01:e9:ea:6f:a8:b7:d0:69:85:85:58:f9:25:04:c3:ca:e0:
         92:2c:28:61:12:71:c4:68:fd:a6:ef:bd:65:57:d9:54:bb:c6:
         6e:d0:7e:d0:31:dd:6f:4d:99:67:d9:fe:8e:aa:17:61:e2:ed:
         1a:b9:85:38:0b:f1:ac:a4:34:4f:0c:9a:b5:8c:9a:c3:50:77:
         1d:1d:57:cd:ec:48:7c:05:56:e6:8c:b8:46:2d:79:d9:d8:a0:
         b0:a1:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 21:10:17 2026 by rpki-client