Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce7aaa0d-8c0c-3a31-a80d-d30f614f5953.roa
File:                     ce7aaa0d-8c0c-3a31-a80d-d30f614f5953.roa (raw, json)
Hash identifier:          hDBtNjcmjijiClwgWXA3rcvSs5lqcD3qJX8EBEy4zfQ=
Subject key identifier:   9F:66:E9:CE:E5:51:ED:CC:0A:34:EF:1C:E5:0A:4A:89:CE:04:03:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EE227545351D5E91DBF7FB740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce7aaa0d-8c0c-3a31-a80d-d30f614f5953.roa
Signing time:             Wed 19 Aug 2026 01:00:12 +0000
ROA not before:           Wed 19 Aug 2026 01:00:12 +0000
ROA not after:            Tue 17 Nov 2026 02:00:12 +0000
asID:                     396582
IP address blocks:        2001:503:231d::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:27:54:53:51:d5:e9:1d:bf:7f:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 01:00:12 2026 GMT
            Not After : Nov 17 02:00:12 2026 GMT
        Subject: CN=a7b303fe-2621-4493-9df1-a25a01891fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b8:86:0c:c9:46:ca:a5:45:55:39:a3:ed:60:
                    92:64:ea:cd:c1:a0:97:cf:40:02:78:b7:fb:af:b5:
                    72:ce:44:05:77:5f:f4:37:73:9b:1f:54:d3:98:71:
                    6b:bb:69:c4:79:4b:ac:9e:e7:db:49:2d:2c:18:52:
                    60:57:2c:c6:7b:a9:7c:a8:4d:d7:88:3b:8e:45:dc:
                    f4:45:8a:fd:19:37:d6:5f:bd:00:53:1e:59:9a:2e:
                    56:37:7a:83:c1:b9:69:b6:b9:79:88:1c:b7:27:5f:
                    8d:6f:aa:08:9b:c0:33:d1:38:54:83:0c:71:77:c2:
                    d0:c3:8b:1a:62:01:d7:18:fd:cb:a5:24:e8:30:ac:
                    62:17:db:d6:23:e9:34:b5:82:79:4a:25:bb:0d:34:
                    20:42:b1:90:6e:cc:e7:18:04:2f:7e:87:dc:72:38:
                    e6:ed:81:03:46:ef:77:fd:0b:c0:23:4c:29:93:01:
                    63:95:e1:b1:b0:26:0c:ca:21:da:03:2a:15:0d:c1:
                    7b:f9:13:cb:2e:44:62:c2:89:e3:97:74:45:f9:da:
                    3a:85:20:ee:31:52:ed:89:e4:1b:48:b5:fa:92:b9:
                    65:ce:69:04:b0:1c:f8:3e:56:f3:09:96:f4:c7:25:
                    7e:17:e0:7e:ac:ad:e3:77:06:f4:47:f7:fb:5e:98:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:66:E9:CE:E5:51:ED:CC:0A:34:EF:1C:E5:0A:4A:89:CE:04:03:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce7aaa0d-8c0c-3a31-a80d-d30f614f5953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ef:08:6c:e5:df:7d:d5:de:96:75:8b:e3:33:d0:26:ef:22:
         98:fb:a8:c0:5b:cc:88:4c:65:e0:c3:cf:e8:8e:c5:48:d7:69:
         04:15:cd:52:f1:b2:c5:a6:f3:f8:c2:62:35:24:ed:fa:d3:06:
         eb:cd:7f:d2:04:01:78:92:2f:95:d0:2b:47:0f:eb:7a:24:31:
         e3:ae:db:79:7c:19:49:01:ed:15:d2:7e:1c:37:88:32:21:45:
         16:5c:aa:7c:51:0d:7d:13:7c:85:b2:6a:45:80:7a:83:57:68:
         76:0d:df:48:cd:a5:41:d1:09:3d:68:cd:8d:95:a3:ce:4c:bc:
         96:d6:39:b8:54:00:c9:ed:19:a9:ab:62:24:fd:70:dc:c4:cd:
         59:58:55:c3:f9:9c:26:d7:29:8b:fe:cb:61:4a:fe:3e:7d:28:
         43:a2:2f:1e:0d:fa:39:6b:03:9a:1f:fc:83:54:16:99:3e:ef:
         50:c5:7f:bb:fa:19:ee:94:a7:25:3d:8b:a9:44:2c:94:f5:53:
         13:21:ae:ab:53:dc:39:73:7b:31:57:1f:44:d8:b0:fa:ea:cd:
         9b:97:d2:e0:9a:ab:7c:20:ad:56:5c:db:21:b2:5f:c3:a1:81:
         0e:a4:7f:83:a6:31:33:5a:ff:5e:c9:11:a8:18:b5:d9:4b:98:
         87:2a:6d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:14:30 2026 by rpki-client