Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3df3fe-d7fe-3572-8a75-513c470099cf.roa
File:                     cc3df3fe-d7fe-3572-8a75-513c470099cf.roa (raw, json)
Hash identifier:          bP2JtMR3qKR4QTY0cYi/kk2SIueTD7RcUVRt7lMJVUY=
Subject key identifier:   95:03:03:C9:BF:BB:73:DB:14:F8:5B:D7:F2:BD:B6:71:A9:33:54:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292C6A4A48F29F8C37C5530
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3df3fe-d7fe-3572-8a75-513c470099cf.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396582
IP address blocks:        2001:500:d937::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c6:a4:a4:8f:29:f8:c3:7c:55:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=6193fb68-17f8-41c0-832d-ca98f2f4be53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:34:60:b9:84:77:70:1d:c7:ae:e4:d1:3b:
                    41:c6:7a:ec:13:c2:ed:ca:85:5e:da:d7:ea:16:6b:
                    dc:df:e7:2a:08:26:ab:48:d3:ac:57:50:d9:35:32:
                    b5:6a:b3:b6:75:b8:fd:97:6f:2e:ff:4f:55:1b:0e:
                    75:99:a8:2b:e4:f1:dd:5c:1f:5f:57:4f:46:94:87:
                    fb:ed:98:6e:0e:2f:72:be:e1:41:91:e4:c5:d0:de:
                    6f:a0:76:a9:6a:44:d4:bc:ff:da:65:a0:8c:f0:44:
                    dc:ae:5f:0d:d8:38:58:68:55:84:1e:7a:f1:4c:86:
                    48:5b:7d:2d:87:a8:72:a3:47:84:6b:fd:e5:7c:af:
                    09:ee:03:c3:5f:7d:ad:e0:7b:cb:35:c3:3a:15:4c:
                    03:95:44:1a:74:58:e3:a3:9c:5b:1d:2e:25:f9:db:
                    05:02:69:b1:63:dc:df:0d:8d:65:e1:fa:55:4d:4a:
                    76:58:1e:f8:47:71:18:75:c1:bf:0a:01:76:16:a9:
                    80:0c:29:ac:be:a1:cd:20:3e:ab:9f:ae:29:b5:20:
                    a5:7c:58:cb:a0:c6:24:16:f6:ee:7f:b8:2b:7c:4f:
                    f9:00:f3:8f:11:1e:c5:e7:75:e9:c5:5a:33:e9:39:
                    ad:c9:69:d1:32:c6:f6:d0:20:b7:31:bb:0e:46:d9:
                    0f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:03:03:C9:BF:BB:73:DB:14:F8:5B:D7:F2:BD:B6:71:A9:33:54:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc3df3fe-d7fe-3572-8a75-513c470099cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:d937::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:cf:59:e8:6d:85:d2:b2:ee:c9:3e:a6:14:cb:d2:56:0c:5d:
         2d:f3:8b:fa:88:97:1c:28:10:f4:08:e0:5b:3e:55:23:16:ee:
         f2:ff:29:6e:7e:b9:5a:9c:35:ec:2d:8a:cd:ae:77:56:9e:db:
         1d:de:41:eb:bc:81:fc:b9:66:1e:98:c8:d3:80:17:06:23:4b:
         8a:83:0d:f3:b5:e9:c5:77:e5:f0:65:9d:da:16:2f:6b:d4:29:
         f5:aa:98:2e:f5:08:41:05:a3:3d:03:d5:06:a9:35:31:c5:25:
         98:be:ba:d6:5d:4a:3a:7f:8a:52:14:6d:77:0b:a2:e3:a3:4f:
         a4:68:e4:0c:03:99:22:1e:25:5a:d0:c2:6d:10:a7:15:1a:72:
         43:cb:5b:06:fc:62:21:98:41:bd:0c:56:5c:5b:6a:12:cd:0d:
         3a:84:c4:90:0f:d1:94:58:29:e1:ac:bc:82:78:bb:12:4b:df:
         92:54:bc:2a:01:09:bb:1e:69:c2:5c:9a:64:05:ab:d7:08:a9:
         9f:83:94:55:2b:e5:3f:9e:61:9f:e3:38:a1:d4:af:8c:cc:c5:
         ef:48:70:98:9e:b0:2a:65:b8:c4:9a:67:59:2e:f4:4e:29:bb:
         8b:87:ec:3b:28:2e:c1:dd:3f:dd:23:93:b2:a2:65:6a:27:af:
         7b:ea:a3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:04:48 2026 by rpki-client