Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b414115-761f-3f66-9744-8ac431ee8343.roa
File:                     9b414115-761f-3f66-9744-8ac431ee8343.roa (raw, json)
Hash identifier:          4upRGxN5yvs2yrnBm87NHR/Hb4lj3asloijkVgX4nog=
Subject key identifier:   A4:9D:B2:1F:BD:74:93:47:5B:2B:40:5E:EB:FD:51:F4:65:2B:7A:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE2274D49E709F0BCD5578F60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b414115-761f-3f66-9744-8ac431ee8343.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     396587
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:4d:49:e7:09:f0:bc:d5:57:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=f493f39b-c6dc-4b44-9438-47c46550e993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:a6:92:e6:cf:e9:71:69:ce:bb:3d:bb:fb:
                    d0:f4:32:52:b5:d8:50:44:9b:29:51:cf:96:ac:c2:
                    6a:18:79:df:7c:ef:48:0b:1b:e6:48:a0:d6:ae:9c:
                    e7:4f:77:ab:62:a5:07:05:11:b7:67:e3:31:d5:a1:
                    ff:23:6b:e1:bb:86:bd:0b:5e:42:51:8e:5c:26:ec:
                    26:31:be:0a:f9:63:ad:1c:3a:04:98:6b:d1:a1:b7:
                    2a:f4:65:b6:9e:c8:04:b3:90:bb:35:e6:b8:0c:49:
                    bc:54:9d:4a:c7:fe:12:8e:60:8d:15:b4:44:ad:41:
                    57:7a:e9:09:08:f0:ae:db:a2:df:1d:de:47:ed:ff:
                    b8:34:1b:72:ea:01:55:18:d6:5c:75:6d:d2:27:a7:
                    f8:54:60:0a:5b:b6:09:15:81:03:81:3a:51:1c:56:
                    57:71:77:9b:78:2b:73:56:ed:74:c7:77:5d:f0:4b:
                    05:ac:05:86:7c:8b:b0:bc:6b:ca:5b:9f:01:c2:db:
                    23:e4:5d:d2:08:6c:f5:78:f4:4a:78:68:7f:c4:41:
                    2f:db:3c:3d:e4:ff:9f:9a:38:95:5c:07:0f:df:7a:
                    d8:dc:91:ee:fc:48:81:cd:df:50:1d:5d:3a:4f:6f:
                    ba:20:ec:eb:5d:5c:7a:ce:0b:73:bc:42:a8:51:27:
                    1f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9D:B2:1F:BD:74:93:47:5B:2B:40:5E:EB:FD:51:F4:65:2B:7A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b414115-761f-3f66-9744-8ac431ee8343.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:31:06:82:2d:1b:fe:b1:51:80:6d:84:8a:fb:df:55:3a:
         53:98:73:1e:28:aa:08:1e:5c:d8:e0:d3:b7:9f:36:d7:42:f2:
         f4:8e:37:88:28:59:a4:29:50:3b:2f:d6:a4:51:24:78:29:51:
         d6:32:84:59:bc:5f:6c:f1:f6:8e:47:75:4a:7a:2c:72:5f:25:
         6f:e4:f9:35:a9:ad:5b:1d:16:ea:32:0e:2e:d4:8a:5e:79:b1:
         fc:5c:a0:f8:ed:27:24:e4:a4:a0:fc:b2:4f:bb:60:56:bd:1e:
         d5:2e:11:6e:83:a1:4a:01:48:d6:21:0b:6a:f6:87:ac:c0:e1:
         10:89:6d:43:d7:16:a1:5a:fc:3e:1b:c0:98:cf:08:a5:a6:7b:
         b1:af:38:2f:c2:6e:fc:41:f7:1e:2e:57:fc:fb:d2:bf:1b:46:
         c2:30:c2:ef:09:f7:a2:8f:fc:bb:7a:92:11:2f:b3:f7:a4:99:
         ec:48:00:2f:5e:9d:7c:a4:ba:3f:d9:3b:6c:b5:56:19:46:d5:
         73:fa:dc:9d:77:57:5e:8f:91:89:54:1f:52:b0:af:23:e8:87:
         80:35:c9:ec:7c:c5:28:09:71:1a:b6:85:ef:ae:cb:ce:d5:f3:
         45:64:ec:64:30:d0:40:69:05:fe:c0:3d:3d:03:11:b7:24:63:
         86:ff:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:35:51 2026 by rpki-client