Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1750efce-fadb-351b-95fc-7f177acbdac4.roa
File:                     1750efce-fadb-351b-95fc-7f177acbdac4.roa (raw, json)
Hash identifier:          PlWDy7mgcuT+fLRcE54zV5xzCZdIVHItNDRZ3hR1fL0=
Subject key identifier:   31:85:C8:BF:E7:72:D2:87:3D:7B:0D:2B:97:6D:94:C0:FF:B0:74:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B7F5271DDE210611ABADB21E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1750efce-fadb-351b-95fc-7f177acbdac4.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     397199
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:71:dd:e2:10:61:1a:ba:db:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=68dda27f-f613-48d3-9502-1b5fb5ba1751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:18:2e:a3:39:94:30:07:75:99:6b:78:bf:70:
                    b1:21:ff:d9:05:c8:cb:4c:c6:89:82:59:ad:e8:e2:
                    56:9b:e9:c2:34:c1:7d:30:8f:64:cc:5e:08:f2:fc:
                    d1:35:a9:5c:9b:1b:35:34:c3:45:46:de:6c:e4:e5:
                    ed:8a:8d:0f:24:62:b7:78:d9:8e:00:7d:25:bc:73:
                    41:60:eb:4a:df:78:8d:25:f8:b2:82:b1:51:b6:83:
                    ac:18:ed:0e:3a:88:31:e2:82:82:45:78:fb:d0:a7:
                    d3:b4:35:ea:ac:66:d0:9d:7d:c0:23:d3:91:29:3a:
                    1f:6d:1b:51:88:9d:a5:1e:b5:32:ee:f7:d0:0e:44:
                    17:d2:42:1d:0a:c6:53:8a:51:54:cd:95:d9:f3:4f:
                    1c:b0:71:19:d6:aa:0a:b9:a5:84:7f:c4:c3:76:59:
                    dd:a5:98:ae:a6:f7:55:4e:c2:64:0d:04:fc:60:04:
                    20:8b:b2:9b:ea:cb:c2:2e:c8:ac:a6:cb:fb:ca:77:
                    c3:34:76:21:1d:ef:fc:19:60:86:d2:a4:41:82:5d:
                    4b:d7:d4:e5:ed:01:d5:c1:bd:df:af:b2:08:46:cf:
                    f4:fa:92:a5:91:70:ff:54:23:97:6f:56:90:eb:05:
                    eb:a5:71:35:62:75:a7:9c:c3:31:f7:fb:69:8e:3a:
                    b2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:85:C8:BF:E7:72:D2:87:3D:7B:0D:2B:97:6D:94:C0:FF:B0:74:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1750efce-fadb-351b-95fc-7f177acbdac4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:4d:19:60:ec:e6:ea:4d:a1:6c:0c:b6:9c:23:7f:3d:04:c5:
         ec:01:d7:6b:13:e9:e8:33:ec:90:47:79:1c:c1:ed:6d:30:5c:
         a5:a4:e0:de:5f:94:e3:6f:57:b8:82:b7:55:d2:4e:08:c8:9e:
         75:47:67:72:71:63:36:db:42:0f:31:87:ba:36:aa:61:9f:79:
         a7:e9:2d:b7:18:05:cd:1a:6a:88:01:d8:89:f7:ea:db:b9:8b:
         e5:93:e2:c9:cc:75:15:3a:a2:99:32:04:6e:ea:38:05:5b:ec:
         5e:56:1d:17:a7:01:5c:a7:18:91:d1:b5:92:0a:88:a9:7b:d7:
         08:95:35:0a:ce:62:ac:d5:fe:6e:cc:d0:76:3d:71:ce:2b:48:
         1f:57:e0:3b:26:10:ab:21:c7:55:d7:68:39:5b:f9:b2:1f:21:
         8f:e4:7a:f6:2e:f1:46:51:77:f0:c3:81:06:5d:6f:b9:e5:80:
         38:04:e1:87:2b:90:d8:e9:57:e8:3b:71:a2:84:b9:85:96:75:
         3a:a2:0d:c7:88:75:71:6c:9e:1e:1d:93:b1:bb:fd:66:89:5c:
         2c:45:71:a6:f4:5e:06:09:63:7a:ca:be:c2:05:54:bc:73:a0:
         e1:a2:ca:b8:5e:54:ba:d3:35:2b:ec:17:44:61:2d:3c:ad:b6:
         b6:1c:79:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:28:17 2025 by rpki-client