Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14e45b69-de92-32dd-90bd-f9e5cc1e7088.roa
File:                     14e45b69-de92-32dd-90bd-f9e5cc1e7088.roa (raw, json)
Hash identifier:          zgVsr17d22H1soC9iHhn+qM6SSF/5Qhzl0igBWtL+Tk=
Subject key identifier:   C6:2F:0F:C2:56:D3:FB:49:FC:73:DF:57:C0:31:CC:BB:F9:31:8E:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC1B48B90EE267476926BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14e45b69-de92-32dd-90bd-f9e5cc1e7088.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     36631
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b4:8b:90:ee:26:74:76:92:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=09384b1b-f5d2-4d12-b0ff-0054719dd5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:28:65:b0:1b:67:7c:51:27:49:f5:53:9c:40:
                    73:6c:bc:05:5d:2f:ae:e8:8d:5a:05:11:bd:63:e3:
                    80:ee:d6:be:1a:73:44:af:f2:01:83:b4:21:44:d1:
                    82:8f:45:bb:ac:c8:91:99:0b:6e:3d:d9:31:69:3f:
                    65:89:9a:bd:fe:c0:8d:a2:60:5e:79:54:ee:8b:e4:
                    47:c3:d8:86:1f:c9:ee:0f:de:88:37:ef:de:fe:27:
                    6c:2f:1e:af:e8:fb:a3:55:ae:39:7e:b9:36:4f:a2:
                    f9:96:96:60:a4:f3:3b:8e:d6:1e:90:4c:f3:86:88:
                    b9:c9:f3:dd:f3:1c:70:84:21:f0:b5:00:2e:86:4d:
                    aa:7f:c3:07:3f:10:d7:b5:3c:16:bd:2f:89:36:76:
                    a6:40:e1:9e:42:c2:1e:15:b8:b2:96:e9:d4:90:73:
                    ab:e9:2b:51:19:d4:bc:a2:6b:c3:d3:01:5b:f5:e8:
                    b2:9f:e3:5b:d9:ba:d9:9b:9e:d5:89:a0:af:93:9a:
                    6e:16:7c:8b:c4:d6:07:4a:61:67:4c:56:78:3c:09:
                    95:6b:72:af:21:c2:93:17:38:5b:1c:f9:eb:f5:10:
                    10:93:2f:a3:d1:50:53:23:ca:14:75:e3:4f:f0:6c:
                    1a:ac:d3:99:97:6f:c8:cc:68:f6:3f:f1:47:94:4b:
                    a9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2F:0F:C2:56:D3:FB:49:FC:73:DF:57:C0:31:CC:BB:F9:31:8E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14e45b69-de92-32dd-90bd-f9e5cc1e7088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3e:92:23:ac:54:72:d9:99:e9:01:e2:b4:d0:35:5d:7e:a2:
         e4:50:aa:f8:24:81:67:77:ed:61:7a:4e:cd:e5:cb:61:09:2b:
         fc:49:7c:6f:49:78:1f:b7:c9:ea:17:49:34:71:a1:ae:76:f9:
         bc:b9:b3:da:ba:f4:21:78:63:9d:e0:6e:69:85:38:e1:ed:8b:
         6e:03:b1:67:22:a6:d0:8f:52:3d:8d:ff:6d:59:42:e2:25:f0:
         c9:0e:1b:ae:e1:c6:ed:1a:b7:3e:b8:6e:54:04:00:59:c3:b9:
         8f:d2:a1:a0:ff:8e:14:56:4c:ea:43:6f:6d:7e:89:c7:2a:f1:
         0a:07:ca:f4:f3:f3:e6:0f:eb:c0:b7:3a:b6:ba:ed:ed:94:a9:
         d1:6b:7c:6b:ea:9d:b9:41:0b:3d:c8:95:8b:c5:5f:8a:d4:3a:
         88:8c:7a:ed:ab:05:87:8b:a9:50:fa:8f:22:80:d3:6b:6f:fb:
         ee:42:6a:be:df:ee:fa:78:df:31:f4:22:d7:0e:e4:a6:b3:64:
         20:81:65:57:dc:fb:6d:e5:2f:c2:08:b0:f2:11:c5:8f:f8:41:
         d5:6d:67:5e:f7:82:fb:96:04:6e:20:d0:99:7a:b6:6a:d8:c5:
         c3:4a:6e:09:1d:14:d1:78:b1:65:a8:a9:e1:53:da:ab:18:f4:
         ec:88:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:20 2025 by rpki-client