Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d07ca60b-52e4-3d02-9448-13addba817e5.roa
File:                     d07ca60b-52e4-3d02-9448-13addba817e5.roa (raw, json)
Hash identifier:          Ss57r93tMil3JDDtsoycTbRZ05XpZ4CwdgB1UCe8IOA=
Subject key identifier:   34:88:6B:CB:02:AE:5D:EE:C3:15:70:92:3E:0B:4F:40:EE:EE:74:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F082A95680F9F8652866C60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d07ca60b-52e4-3d02-9448-13addba817e5.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     396543
IP address blocks:        2001:503:231d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:2a:95:68:0f:9f:86:52:86:6c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=5c40a939-a2c9-4f38-a72e-88e56c99eb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:42:66:cc:a9:78:69:99:2b:37:01:3e:ed:f4:
                    65:40:28:00:41:aa:74:69:2b:99:3d:44:50:5e:0a:
                    a5:69:88:36:69:fb:24:d3:c3:b8:0f:27:af:d5:57:
                    f7:ba:5e:de:bc:a7:f7:bb:1d:34:80:ee:92:3f:77:
                    ed:f7:a7:50:93:0d:8f:87:11:8a:b2:ee:98:dd:ed:
                    74:d6:05:a7:de:b0:1e:3d:7d:05:82:fe:53:7f:83:
                    e4:d8:d7:6b:d8:8d:4b:d6:92:d5:b6:43:e6:3d:72:
                    0c:ae:4a:fd:bc:a7:fb:4d:b6:59:48:b2:d7:e8:6d:
                    a6:f2:27:82:f6:4f:7c:a0:3b:5e:90:29:a8:0a:31:
                    be:be:54:cf:63:5b:dd:45:d7:88:56:a0:6e:d0:25:
                    8e:3b:63:66:60:f3:04:9c:9c:2b:c4:11:ee:3c:45:
                    42:c8:de:be:47:90:22:fb:9a:28:15:da:78:98:56:
                    c9:e3:3c:38:39:49:d3:43:42:3d:3e:36:50:c0:2d:
                    09:70:65:f7:db:5e:6e:21:b9:47:42:7f:fd:5d:32:
                    1c:3d:b0:fd:dd:fe:86:08:ff:23:bd:2e:59:39:0e:
                    2e:37:2b:8a:84:8b:4e:ad:f3:ee:e6:e5:49:cb:b7:
                    22:91:8d:b5:4f:28:c7:30:38:40:1e:f8:4d:5e:80:
                    eb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:88:6B:CB:02:AE:5D:EE:C3:15:70:92:3E:0B:4F:40:EE:EE:74:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d07ca60b-52e4-3d02-9448-13addba817e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:231d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:19:30:a5:77:68:93:ec:a1:6d:5a:e8:f3:3e:46:b4:48:5f:
         32:7d:d9:c5:53:85:aa:d8:c0:93:a8:a0:df:34:dc:f9:9b:39:
         49:77:41:c5:bc:07:67:ca:ff:5c:57:45:a1:10:0f:94:2f:f0:
         a5:09:a1:f4:e9:51:16:78:17:14:56:ad:37:46:fe:d7:ee:7d:
         72:23:74:8f:0a:18:dd:b5:48:73:4b:aa:aa:1d:8a:62:1d:73:
         ea:82:16:44:3b:5a:c8:6f:53:be:46:3a:3d:8b:87:fe:6f:8a:
         31:87:81:d3:75:52:dc:f9:c0:e1:be:2e:26:d8:2c:47:24:f6:
         38:27:df:df:9a:fe:80:dc:dc:fe:7d:93:ea:e2:2d:b2:89:0d:
         30:aa:a7:b9:4c:fb:09:85:eb:20:fa:ec:ae:41:98:df:08:7d:
         5e:42:41:1b:ab:a0:16:9d:5c:c5:94:a3:06:06:8a:3f:10:8c:
         de:e4:d1:f4:d6:ac:27:85:26:ae:5e:b9:ca:0b:65:c7:73:40:
         13:e1:80:4c:25:c6:d2:ae:68:95:ad:46:f5:3d:bd:2f:0f:a9:
         d5:6b:eb:82:cb:b9:24:43:12:84:89:a5:c8:e3:34:5f:da:22:
         89:78:2f:11:10:65:a4:8a:49:97:db:6d:9f:7c:1d:31:47:57:
         68:3a:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 08:06:51 2026 by rpki-client