Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fed8ec-db5b-3a8e-b2b6-ef28d87540f1.roa
File:                     18fed8ec-db5b-3a8e-b2b6-ef28d87540f1.roa (raw, json)
Hash identifier:          lsdAXLsimZLFSPAkaGdWEOh9fpD1NTPacNgJL9wBIWA=
Subject key identifier:   31:A4:92:0F:4A:1D:EC:F3:D5:09:5D:96:7D:3E:41:10:3A:C1:A1:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B5F3753B2A8314DA406EF5FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fed8ec-db5b-3a8e-b2b6-ef28d87540f1.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     396564
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:53:b2:a8:31:4d:a4:06:ef:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=20b3a9b8-4fed-4c92-b224-0b3c04dd6ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:28:32:f3:b7:e0:cf:46:d0:a9:ed:5e:97:57:
                    e9:8c:9c:90:05:85:07:36:c6:92:24:59:fd:77:3c:
                    e0:12:94:5b:ed:ee:50:78:55:d6:01:f8:77:39:1d:
                    7f:c9:41:dc:19:13:24:a2:c4:a3:18:0d:e0:cb:c7:
                    5f:8b:d6:e7:99:b6:99:16:3e:ab:97:4f:81:17:f5:
                    cc:7d:4e:db:e9:f6:a9:55:39:7e:b6:34:8d:19:61:
                    b4:7c:fe:a4:5e:58:b0:51:4a:aa:73:60:36:96:db:
                    09:3c:28:65:bc:5d:25:94:bc:17:08:f6:38:62:67:
                    d2:8d:76:af:ef:41:a0:c3:52:54:74:b2:24:be:ee:
                    ff:d9:fc:e8:94:b0:f9:31:87:17:5d:f7:fc:fe:9e:
                    91:24:2f:14:c2:68:ed:ab:6f:34:35:3e:c6:c2:55:
                    37:61:e7:f0:01:4e:9e:26:14:84:25:34:bb:5d:5b:
                    41:a0:62:5e:8b:11:00:1a:26:2e:1d:25:bc:24:26:
                    82:98:8c:3f:8d:1c:44:87:5c:79:e7:20:7d:ac:75:
                    31:cd:34:be:06:91:cd:bb:9f:d5:b0:2f:39:96:32:
                    7c:2f:34:81:70:64:d7:94:5f:01:18:23:8d:f9:4a:
                    fd:fa:c4:39:38:0b:8a:bf:96:a5:43:f5:93:c2:ea:
                    81:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A4:92:0F:4A:1D:EC:F3:D5:09:5D:96:7D:3E:41:10:3A:C1:A1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18fed8ec-db5b-3a8e-b2b6-ef28d87540f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:5d:1e:c0:8d:12:e3:49:a0:37:df:0d:0b:7e:63:57:9e:5a:
         bd:d5:3c:70:5a:df:50:5b:0b:c8:e2:52:12:f3:01:b9:f6:e9:
         2a:be:2f:11:e4:bc:05:7b:5f:80:15:f0:6f:5e:8e:13:dc:32:
         6f:e5:fe:5b:87:22:ee:23:41:de:d8:2f:0f:0e:74:07:b5:75:
         75:c6:ff:02:6a:3a:a4:52:0d:03:f3:34:87:15:d8:81:08:98:
         29:f1:ab:35:a9:b0:03:0b:3b:af:52:ab:b1:1f:5e:e5:2b:8d:
         43:2b:45:41:d3:8a:37:4f:fa:21:fd:39:8e:cf:7b:bd:b2:f0:
         79:e7:50:2f:93:ed:77:96:b9:78:fa:3d:9b:36:05:69:4e:ee:
         a5:59:da:45:d4:d5:58:8e:d3:e7:c7:85:da:ee:6d:34:b6:0f:
         f3:70:d1:bd:49:86:ee:f2:30:3a:3c:37:c4:ed:43:ec:f6:15:
         15:32:7a:e7:01:48:de:c4:19:ee:65:49:45:db:41:4a:3c:95:
         66:90:ab:fc:d5:42:d4:f9:41:0b:ac:80:de:8c:a6:19:02:9e:
         0e:d5:88:30:51:bd:0b:09:4a:98:3d:dc:e1:7b:ae:db:32:ae:
         23:87:17:56:6d:8a:f1:cf:af:ae:49:d2:84:2b:5b:ef:74:23:
         29:f1:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:24:27 2025 by rpki-client