Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f845308-045d-3bbe-8c3a-00a1f5af5615.roa
File:                     0f845308-045d-3bbe-8c3a-00a1f5af5615.roa (raw, json)
Hash identifier:          ryhdUWVqvBqj1SXc3kXtmqpot5tcQtxpo1JL8e1lv+M=
Subject key identifier:   9B:7D:7D:CC:EA:4F:CF:03:41:A3:70:46:61:18:D4:CC:0A:6D:C9:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B7F527614B1F56244EFFB6C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f845308-045d-3bbe-8c3a-00a1f5af5615.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     396576
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:76:14:b1:f5:62:44:ef:fb:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=d7907cd9-4122-4239-988d-bc0556628b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:99:91:b2:92:bb:f8:d3:da:da:09:7f:b1:a7:
                    7c:ee:f3:03:f0:10:72:66:e5:54:14:f5:07:b3:92:
                    23:f5:1e:71:b5:15:5f:40:d4:d0:69:28:a1:fe:7e:
                    e3:73:f5:09:5f:60:62:64:38:30:07:16:2c:17:eb:
                    38:b3:20:9d:4a:9e:8c:cc:b7:17:7d:f0:83:70:72:
                    b4:c5:94:92:04:d2:d1:9f:ee:be:6e:ab:91:8f:78:
                    5b:73:79:2c:3a:ec:01:a3:b5:db:7f:14:4f:c1:d4:
                    e4:87:a0:a0:b3:23:19:46:f7:e3:1d:03:f2:c1:96:
                    88:88:04:e1:99:d8:e5:3b:51:32:c7:d2:b9:84:80:
                    c8:62:6f:55:d9:73:63:36:18:e5:d9:59:b5:27:98:
                    31:c7:23:1b:ba:be:11:46:98:25:ea:a6:b4:ad:71:
                    10:5d:25:dc:d0:a3:20:52:84:c0:42:84:29:ee:b2:
                    93:87:cc:79:60:27:f8:1a:a7:75:cb:dd:4d:96:0b:
                    40:c3:bd:77:e7:81:7b:a7:83:a6:46:b4:df:45:43:
                    fe:c2:2e:0f:8c:f4:de:99:77:4b:4d:eb:0d:3f:00:
                    2b:2c:1a:cc:6c:71:72:75:38:27:5d:4c:a5:9f:da:
                    2b:cc:2a:0e:f3:d7:58:3c:f8:31:84:21:5f:92:1f:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7D:7D:CC:EA:4F:CF:03:41:A3:70:46:61:18:D4:CC:0A:6D:C9:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f845308-045d-3bbe-8c3a-00a1f5af5615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:dc:16:af:4b:13:ac:38:86:c3:ce:a3:86:8d:e7:18:92:7b:
         1e:ba:e3:d2:3d:ca:ef:27:bc:76:ed:51:7c:78:37:ea:b8:7d:
         46:48:55:13:47:b7:b2:41:a8:24:16:fc:21:40:8b:1f:c6:db:
         66:f5:ce:f2:bb:a8:e1:b5:be:c4:b3:f5:44:e8:d4:1c:80:fb:
         a0:f6:3b:4d:ee:71:07:7a:e1:8d:3c:d8:d5:8f:05:1d:6d:65:
         2b:2a:31:fc:0b:3f:ef:d6:e9:b5:47:62:88:e5:c8:53:97:a9:
         1d:ac:8b:7f:68:7b:6f:1e:63:71:9d:d8:54:dd:49:71:29:0b:
         2a:e1:47:1f:a5:48:a2:29:25:dc:f7:b5:ad:df:63:ee:2c:7f:
         e5:d5:8d:cd:f2:8a:60:6a:44:5e:cb:22:ec:60:9c:71:ef:04:
         a8:d0:3c:48:09:9c:8f:9c:32:91:13:a8:7f:7f:11:23:10:af:
         b6:ec:dd:1a:5a:9b:d9:8c:d9:63:ac:b3:6c:b1:92:78:7d:d2:
         04:a2:0e:08:78:7b:37:be:d8:f5:42:ce:c4:56:51:54:18:65:
         f6:e4:2c:07:a0:7f:85:18:1f:7a:08:2f:2a:bc:c4:33:fd:32:
         e0:c3:19:aa:57:fe:d7:50:18:f5:e6:21:6d:e4:11:85:17:2a:
         26:e8:b0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:57 2025 by rpki-client