Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82cd2504-9688-3bee-995d-9ddd144da33a.roa
File:                     82cd2504-9688-3bee-995d-9ddd144da33a.roa (raw, json)
Hash identifier:          E8Pd+NLfqGmTK4xc46zwXCYkzMrIfZHA+34b9S/q+7M=
Subject key identifier:   75:DD:32:22:9C:5A:F5:5C:8F:4C:0C:BC:0A:69:BB:8B:9A:A3:0F:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F66C2BEB94AE077CF912FD180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82cd2504-9688-3bee-995d-9ddd144da33a.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     396591
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:be:b9:4a:e0:77:cf:91:2f:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=688d48b8-e989-43a0-a395-1f2804b7751f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:33:2e:7f:cf:b8:b9:f8:d1:2f:51:d8:4c:
                    1d:73:1b:ab:e4:fc:c0:26:3f:21:1d:53:0b:5a:a1:
                    64:3b:4c:d6:b3:2b:1f:6d:6b:8b:24:c5:2c:95:25:
                    57:c2:2f:b0:23:18:03:23:14:8b:f0:91:59:0a:99:
                    49:3a:ce:af:3b:59:fe:08:d5:ae:c0:30:22:6c:2b:
                    72:a3:dd:13:cc:62:94:18:7b:0a:90:30:d2:86:65:
                    6d:c4:cf:1b:ff:aa:24:67:e9:ab:ae:fa:96:54:5c:
                    29:c4:1c:b3:af:0e:13:d9:e3:54:32:1f:ff:a6:b4:
                    8b:7c:6a:4b:c0:e7:d8:5d:80:4c:64:77:c4:09:e3:
                    07:a9:0f:45:45:ad:f9:b1:64:c0:f1:29:3b:2e:66:
                    a0:66:b4:c0:07:61:ef:99:35:f4:21:91:10:43:22:
                    31:f9:26:91:c2:f7:0a:6d:3e:79:ec:25:93:44:c3:
                    b6:c7:ef:1f:f6:d6:e2:d2:27:8b:f0:cf:ee:10:3d:
                    26:0f:fd:6e:8b:3e:6a:86:af:16:7d:4a:d1:2a:3d:
                    a0:13:2e:f2:aa:38:15:2e:09:3a:f1:f4:90:9d:eb:
                    4e:dd:4b:73:46:78:0f:c2:72:64:b5:c9:62:cf:f9:
                    d9:d5:68:78:5e:ca:7e:58:2f:87:11:43:44:cb:06:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DD:32:22:9C:5A:F5:5C:8F:4C:0C:BC:0A:69:BB:8B:9A:A3:0F:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/82cd2504-9688-3bee-995d-9ddd144da33a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:65:d7:5e:d3:d7:3e:ca:6a:38:2b:c5:1d:ce:a8:fe:48:5e:
         f5:f7:31:a1:60:a3:73:e5:ae:f4:37:a8:a5:9d:a4:f9:0b:f5:
         68:1c:fc:51:88:24:2d:f0:19:f0:ef:35:c5:d6:d7:00:5c:ca:
         6c:b5:99:1e:bd:bf:2d:39:e9:b9:e0:98:1a:bf:97:d3:2b:9c:
         10:7e:0e:df:b8:fc:19:93:9d:11:d0:c1:0e:5a:53:e0:d8:98:
         d3:c1:c6:62:cd:41:c3:5b:60:5d:18:7e:09:7e:9e:ed:68:52:
         e1:00:f5:5a:b2:e2:02:05:36:b6:e6:7b:6a:4a:65:1f:d5:fb:
         c3:92:0e:91:0b:37:98:6c:e2:3a:d7:08:b2:de:36:4a:8d:71:
         3d:11:be:30:5f:c6:38:62:57:0f:6f:fe:5a:f5:dd:cf:e2:bf:
         10:20:cc:f2:d0:9f:55:f5:d6:af:f8:df:57:0a:98:d5:28:ec:
         b9:57:9f:76:1e:25:0f:ff:5a:45:04:61:e0:fe:eb:9f:4a:05:
         e1:87:b8:cb:95:12:71:9b:26:4e:b6:e3:4a:df:3b:89:4d:29:
         d4:a5:82:61:d3:27:70:5d:62:2d:c2:c9:f2:23:f0:db:bc:1e:
         fe:e7:52:59:7c:aa:14:de:0b:7c:a3:58:22:da:21:dc:ca:47:
         fe:24:da:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 18:04:59 2026 by rpki-client