Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fa5eaad-f255-3fbe-9eca-19fe20461dd5.roa
File:                     8fa5eaad-f255-3fbe-9eca-19fe20461dd5.roa (raw, json)
Hash identifier:          awYW2Lc1UiS9YbJc4I8gOGUhzEbPZlzCWzdVDatkhe8=
Subject key identifier:   CF:F4:D2:D9:FC:58:4F:83:54:F9:CC:69:47:71:04:07:1E:DC:20:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F576825A3357263E37404F900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fa5eaad-f255-3fbe-9eca-19fe20461dd5.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     21313
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:25:a3:35:72:63:e3:74:04:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=7c28e1f5-651f-4ebc-9ff2-06df6d3daa63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:8d:2c:ae:a9:95:59:01:59:c4:00:cd:75:
                    80:e3:48:34:0d:28:cb:69:e8:ef:58:6c:db:ae:c3:
                    3d:a7:fc:30:ea:3b:b7:2d:03:d0:ed:75:ca:87:05:
                    87:a3:9b:90:e1:a6:1b:6f:e6:32:7c:67:7f:f1:bf:
                    67:b9:b6:b8:00:14:b8:39:22:1f:70:c1:22:df:eb:
                    3c:c0:c2:cc:17:4d:de:cc:c9:99:9d:8c:0e:99:fc:
                    71:10:1d:28:74:39:1d:ec:d1:e4:f2:b6:3b:ff:5f:
                    0e:3d:c3:2d:de:10:45:54:50:93:6f:12:dc:31:6a:
                    56:c9:94:83:eb:37:5e:cc:b2:41:15:18:13:6d:81:
                    e2:87:4c:60:50:9e:2f:33:52:65:28:7e:11:74:75:
                    be:ae:4a:f6:06:8d:cc:c1:fc:b5:64:6a:02:15:79:
                    ca:20:6f:fd:8b:53:fb:d9:ea:46:8a:84:54:b7:eb:
                    e5:54:d6:4e:5f:10:b9:8f:07:65:d7:47:fd:59:c3:
                    6e:4c:0d:8e:17:62:15:eb:90:d2:b2:be:85:dd:c1:
                    aa:88:6c:e3:90:3f:fb:fb:0d:bf:8e:cf:af:6a:a8:
                    0e:a5:f4:57:bd:da:77:1e:63:ba:0a:94:3e:37:5a:
                    7c:39:fd:32:76:1e:1c:65:99:67:1d:74:a6:5c:69:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F4:D2:D9:FC:58:4F:83:54:F9:CC:69:47:71:04:07:1E:DC:20:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fa5eaad-f255-3fbe-9eca-19fe20461dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:5e:9a:1c:46:d1:48:cc:ac:04:8c:d5:64:89:a1:ae:df:e5:
         7e:01:8e:b1:f4:6c:51:c3:57:94:83:95:74:38:5c:1c:20:f3:
         3e:80:76:ae:a6:c1:c9:a4:b5:1e:41:78:98:b7:86:6a:02:25:
         57:b3:68:dc:5f:72:bd:12:ed:87:27:93:28:6d:40:7a:73:97:
         a8:52:82:8b:52:51:ec:5e:4e:a7:ab:2a:14:bc:5d:1b:7b:17:
         0d:de:e2:2f:bf:7c:c8:ab:12:d6:58:ee:64:77:5e:7f:bd:5c:
         e2:d0:a7:57:25:5d:fb:62:0f:53:34:41:b7:30:a6:9b:07:4b:
         d4:2c:55:ea:8f:11:51:05:cf:bc:32:bc:dc:8e:d5:34:c8:1c:
         a3:4e:e2:f1:98:6b:52:3c:fe:6f:50:74:73:db:e3:8c:c6:ba:
         0a:ff:87:cd:2a:75:77:08:a8:7f:66:b2:2a:a4:24:fe:98:2f:
         58:11:49:b7:d5:75:18:d2:09:7b:f4:fc:79:dc:9f:51:97:dc:
         62:3a:ae:52:7a:2c:6c:8d:0a:b9:63:03:95:cd:07:c0:0a:13:
         12:0a:92:47:6c:f3:ea:a0:51:6e:0a:23:4b:9f:b3:af:bc:7f:
         8c:13:46:41:65:dc:b7:c7:d9:41:7d:2f:b8:20:15:a0:d5:5b:
         55:47:8a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:59:26 2026 by rpki-client