Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021e854c-3874-31cd-9a06-bda389b878f9.roa
File:                     021e854c-3874-31cd-9a06-bda389b878f9.roa (raw, json)
Hash identifier:          fFRmEVGnT0d9CBooEZv7YFC9K6dPo9bVeflt/Enc4fI=
Subject key identifier:   8B:1F:52:CE:7C:A2:0C:01:B8:0B:1B:92:CC:07:BE:73:A8:CC:5E:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883FB0E53A89909BC8C47A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021e854c-3874-31cd-9a06-bda389b878f9.roa
Signing time:             Tue 19 Aug 2025 12:34:13 +0000
ROA not before:           Tue 19 Aug 2025 12:34:13 +0000
ROA not after:            Mon 17 Nov 2025 13:34:13 +0000
asID:                     396587
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:fb:0e:53:a8:99:09:bc:8c:47:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:13 2025 GMT
            Not After : Nov 17 13:34:13 2025 GMT
        Subject: CN=90956cbe-f8a3-4043-abe0-9b6a970d3bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:19:4f:ab:6c:32:22:6e:43:ca:aa:c1:2e:9d:
                    43:1b:80:09:bc:d9:98:23:9f:41:c1:1f:7b:5f:87:
                    75:e4:e7:fc:bc:0e:06:4a:12:de:36:3b:98:05:ac:
                    79:22:1e:4c:d9:70:1c:83:e9:01:b7:d1:02:3e:73:
                    51:95:98:db:00:af:67:f7:d5:a1:53:04:86:37:7f:
                    dd:53:6c:d6:de:7c:ae:f4:fa:9b:ff:cc:c5:87:b6:
                    2f:40:6a:e0:ae:ac:07:74:2b:06:6a:22:7b:4d:af:
                    10:7f:59:42:3b:7b:f3:e3:9c:8d:f3:b0:46:79:6e:
                    d0:27:01:87:e6:56:a2:a8:0f:e0:59:7b:7b:de:4c:
                    ee:33:f1:94:24:38:60:5f:e8:db:fb:5d:ab:97:99:
                    5f:0f:1f:8d:bb:4a:71:e3:e5:33:48:0f:b9:77:bf:
                    2f:9f:74:7e:b5:79:e1:43:45:d3:66:87:4d:3b:56:
                    65:c2:27:19:bd:6a:87:64:f9:08:c0:77:49:b8:19:
                    71:45:25:23:85:46:56:45:ea:9f:7d:cb:01:82:4f:
                    e1:cb:41:55:fa:74:12:c2:24:01:ee:b6:14:ac:c1:
                    b8:31:3a:31:07:7d:40:58:5f:b7:45:13:24:bc:05:
                    da:30:72:1a:94:12:d2:e6:40:ed:df:9f:60:d5:9e:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1F:52:CE:7C:A2:0C:01:B8:0B:1B:92:CC:07:BE:73:A8:CC:5E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/021e854c-3874-31cd-9a06-bda389b878f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:d5:b9:aa:51:5e:16:19:69:0c:fb:af:62:8f:74:3e:eb:fe:
         3d:cb:65:69:93:82:20:50:25:00:33:f3:ff:aa:fa:32:a9:4c:
         1d:d1:e7:09:fe:db:56:11:73:1d:7e:6d:7a:0e:15:b6:40:83:
         29:45:be:ba:99:e5:29:93:ad:1c:b9:ed:6f:77:4e:99:1d:52:
         36:a5:76:05:ac:e7:1e:09:f8:be:1b:f3:6a:0e:09:9e:70:a8:
         4f:61:c5:af:12:bc:04:b7:da:a0:e1:b0:c9:dc:f6:d0:63:c9:
         54:86:47:4c:af:ac:bd:b7:49:86:ba:ae:d4:c2:ff:60:87:72:
         85:b7:41:4e:63:5c:e5:3a:ca:31:3e:6f:3c:27:14:35:a1:c6:
         89:49:0a:55:6a:58:6f:b5:fa:af:5f:69:eb:bf:b1:c6:e9:92:
         51:21:22:14:46:e4:62:04:f9:0e:65:54:32:76:98:59:38:4e:
         ca:0a:8b:9a:83:0a:ab:2d:4d:20:81:24:58:5b:7c:0e:81:06:
         3b:3c:69:5f:58:71:53:b4:cc:a2:35:81:70:16:8d:61:5f:13:
         8a:78:96:57:4f:92:d5:77:62:ad:bc:bd:5a:ce:ec:0b:32:51:
         37:bd:27:a4:10:9d:9c:75:ce:23:f3:49:ab:01:96:65:73:c2:
         2c:4c:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:14 2025 by rpki-client