Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b2a5ecb-5cfc-3248-9372-cc8a9e73c6c4.roa
File:                     9b2a5ecb-5cfc-3248-9372-cc8a9e73c6c4.roa (raw, json)
Hash identifier:          BaiNj8zVUssjlxGooS9yayxWOc6GuZUVGb2HAzohpdY=
Subject key identifier:   2D:24:2E:47:44:2F:8E:73:16:57:CF:D6:99:D4:BE:7A:B9:4C:36:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F66C2B7AA77B05CE81E7D3480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b2a5ecb-5cfc-3248-9372-cc8a9e73c6c4.roa
Signing time:             Mon 05 Oct 2026 13:00:13 +0000
ROA not before:           Mon 05 Oct 2026 13:00:13 +0000
ROA not after:            Sun 03 Jan 2027 14:00:13 +0000
asID:                     396610
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:66:c2:b7:aa:77:b0:5c:e8:1e:7d:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  5 13:00:13 2026 GMT
            Not After : Jan  3 14:00:13 2027 GMT
        Subject: CN=06505325-3e54-4479-ab8c-a0f76c8f2f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:47:86:91:d5:20:2f:56:1e:dd:cb:8e:62:
                    f2:9d:6c:d3:3e:23:c6:8f:92:28:df:cb:d9:08:11:
                    9e:b4:85:fd:44:9e:19:1b:c7:b6:12:ac:c1:e1:f7:
                    63:f2:90:d6:d1:aa:0f:0b:41:1f:68:95:49:7d:c7:
                    23:5f:60:68:da:67:a2:96:ec:54:a9:45:09:78:a4:
                    11:f4:f1:5d:d8:a4:e2:95:0a:b5:cb:02:87:d1:ac:
                    74:ec:23:9e:2e:5b:fb:6b:32:49:93:99:48:f6:c6:
                    35:a2:54:4c:d0:ba:f1:80:cc:a7:94:06:0d:fc:1e:
                    e7:49:50:83:c8:12:3f:e5:0c:61:cb:fb:d9:f3:29:
                    43:dd:9a:4e:27:6b:cd:2d:27:e4:79:cb:be:7a:dc:
                    82:06:19:33:74:a3:b7:2f:92:73:a5:40:b5:19:0f:
                    1a:26:4d:87:8a:95:87:67:de:e5:1a:5e:17:27:37:
                    42:b0:14:01:3b:e1:bf:88:b1:0e:43:23:2e:73:bd:
                    cd:77:76:be:76:4a:c8:fa:db:ad:d6:93:ab:e5:47:
                    4c:e1:b8:33:d8:46:56:f3:15:38:5e:2f:09:20:a4:
                    a1:dd:bb:a3:52:4b:d0:26:c9:4d:c1:5f:f2:0d:b1:
                    62:f8:2e:2d:1d:dc:03:54:d4:de:d8:04:82:b3:8c:
                    3c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:24:2E:47:44:2F:8E:73:16:57:CF:D6:99:D4:BE:7A:B9:4C:36:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b2a5ecb-5cfc-3248-9372-cc8a9e73c6c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:e6:b2:17:a5:6d:be:71:d9:de:a8:7a:ad:0b:e3:99:54:f8:
         c3:3d:e8:a1:76:1d:7c:39:f2:13:d9:f0:f7:0c:e1:af:1e:36:
         71:c3:c2:42:31:ba:92:88:4c:17:3e:98:7b:82:d1:b5:90:ed:
         9c:54:3e:19:ec:1f:fd:49:6f:ff:d1:5f:fd:55:c6:71:53:3b:
         2e:d7:6d:bf:9a:d8:16:2f:a5:6f:db:32:d5:75:04:35:11:bb:
         13:e8:c0:90:47:8d:cd:10:06:42:aa:ab:c3:6e:29:fc:c0:6a:
         eb:e9:13:20:6c:39:f0:5e:2d:91:b5:6a:2e:24:5e:9a:7a:c7:
         a4:10:58:30:18:a0:b9:69:53:1b:32:2d:d2:db:5d:eb:5d:49:
         f0:54:8a:ba:ed:21:e1:8f:51:5a:94:5d:09:34:d6:65:db:b3:
         6e:d8:31:79:22:4a:79:e9:31:10:e5:d1:e3:4e:bb:f3:50:4e:
         9d:3b:70:12:42:da:eb:fb:90:64:21:4f:ed:1c:a1:cf:d5:d3:
         7c:ba:40:1f:13:be:83:de:2c:c1:01:c0:9e:74:28:c6:a5:26:
         3f:fe:b8:b5:9c:2c:2e:21:28:50:84:cd:73:f2:d1:21:ab:6b:
         c4:63:3e:06:9e:f9:32:ed:70:7b:76:82:ca:38:78:65:37:80:
         0d:cd:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 09:35:28 2026 by rpki-client