Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94379592-c00d-3d20-80c3-75fc6158f78c.roa
File:                     94379592-c00d-3d20-80c3-75fc6158f78c.roa (raw, json)
Hash identifier:          jJL/lcSGJ+qXgIgDrJulSZtV5157lIMVgS3QwNf0XMM=
Subject key identifier:   2D:FB:41:31:CC:C0:1E:CB:43:D5:DC:CC:C0:9F:9D:63:12:82:05:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F57681138D5B49A1AC6A3FF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94379592-c00d-3d20-80c3-75fc6158f78c.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     396580
IP address blocks:        2001:500:856e::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:11:38:d5:b4:9a:1a:c6:a3:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=6f36dc9a-eba4-4167-8099-d7c5c1da12ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:a6:37:d9:6b:38:6b:d4:ee:88:1b:09:eb:
                    c1:2a:01:07:5f:06:f7:e8:dd:c6:71:12:cd:dc:93:
                    99:69:4b:38:6c:56:9f:0a:70:5a:e3:ee:7c:f6:a5:
                    82:6d:53:cf:11:9a:b1:b3:86:8b:32:10:9c:1a:8f:
                    e1:29:80:ec:7a:a3:2d:c0:d7:2e:5d:f3:df:61:66:
                    c4:ff:40:c8:49:4c:0a:0c:15:c2:73:ab:59:95:38:
                    99:56:3e:59:bb:74:cc:ea:b2:cb:0e:05:b0:79:a0:
                    de:a8:1b:28:eb:f9:c4:30:7f:da:02:9d:50:45:e8:
                    11:d8:f0:e0:39:c3:a8:e0:56:07:86:73:bc:87:d7:
                    6b:fd:75:57:6f:d8:7d:56:4d:c9:79:e5:1e:27:51:
                    92:f6:00:fa:82:87:df:20:c7:32:c2:7b:4d:ce:be:
                    69:92:7b:0e:59:21:d6:6b:39:08:cb:4c:ef:bd:8c:
                    44:78:bb:f0:72:2f:93:e8:3d:54:0c:0f:33:e4:40:
                    0e:88:cc:8d:53:be:b5:f3:a7:2b:42:3c:2c:3e:b5:
                    a2:74:71:de:48:86:53:ab:84:80:d8:68:bd:f1:fc:
                    3f:c4:f4:77:fc:1d:b1:48:71:18:1e:4e:92:cb:fb:
                    cb:31:51:ac:70:2f:da:14:1a:cc:51:d8:14:ce:fd:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:FB:41:31:CC:C0:1E:CB:43:D5:DC:CC:C0:9F:9D:63:12:82:05:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94379592-c00d-3d20-80c3-75fc6158f78c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:856e:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:80:02:ff:f3:98:f9:ef:85:6a:7d:55:c4:7b:ff:8d:b7:14:
         4a:e6:a4:38:e7:94:b1:18:f5:e9:67:bb:8b:60:25:88:92:60:
         dc:6f:92:8d:25:e3:0d:94:eb:35:36:fa:4c:88:fb:3a:01:65:
         ad:06:0a:a6:15:e7:a5:e4:e3:8a:6b:4d:09:75:22:f9:df:fd:
         aa:d4:d2:0a:7e:58:c5:80:b7:03:9a:4e:49:61:96:21:27:57:
         70:26:16:99:2e:60:9b:31:d6:de:0e:bd:47:fb:e1:c8:6e:e2:
         03:22:d1:f1:de:d4:b3:68:df:df:64:06:4e:dc:71:4d:d6:c0:
         40:08:ce:97:2b:f7:5c:1e:e1:4a:a7:eb:f1:aa:2e:02:82:3c:
         14:2e:35:4c:de:f3:0e:17:19:2a:73:32:ca:84:cd:2f:b5:b9:
         7b:a1:05:44:b3:6a:ad:d1:a9:33:a0:fa:b2:49:b2:31:52:5c:
         aa:37:a3:df:62:95:07:36:4e:9f:9a:30:97:dc:b5:68:34:52:
         51:ab:a5:6d:b4:fe:7f:84:9c:6e:e9:b2:9d:9c:8f:f6:6b:36:
         42:f3:d2:14:82:1e:a2:ea:d4:2e:b1:a1:c8:9c:22:36:ad:79:
         1b:ec:fe:09:c9:68:1e:77:45:90:17:e4:d9:0b:6b:dd:79:c6:
         44:52:cc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:03:40 2026 by rpki-client