Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2e2f53-cdc8-313e-9f8d-0a93c3eaf11f.roa
File:                     1b2e2f53-cdc8-313e-9f8d-0a93c3eaf11f.roa (raw, json)
Hash identifier:          Z0t1XVSDQLucwtGPCXcHULOwC06IV85JHMYajZ+4/1o=
Subject key identifier:   65:BC:87:72:9E:5A:50:95:7E:4F:B4:00:2F:6B:59:4C:07:E5:B4:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081CE9EC76764E1B6EBB000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2e2f53-cdc8-313e-9f8d-0a93c3eaf11f.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396543
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:ce:9e:c7:67:64:e1:b6:eb:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=5122ec4f-fc8a-4faa-b921-02de880f13f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:71:2d:2a:1f:a1:47:37:6f:94:e7:e6:b2:d2:
                    02:8e:2d:e6:6a:cf:ae:a3:7b:8b:c2:94:b0:34:46:
                    e1:eb:05:93:f8:1f:17:50:51:88:85:74:f4:29:62:
                    6c:0a:ba:2f:a1:46:96:ff:74:38:d2:91:ba:90:9c:
                    b4:2f:10:14:e8:d7:70:9c:2f:0a:dd:6f:00:77:67:
                    36:a4:15:9e:45:4f:86:45:a5:f5:4b:a8:33:15:03:
                    b3:56:d8:d4:6a:61:47:38:f6:a7:00:76:70:0d:f3:
                    d2:d2:56:85:f5:8e:c4:14:43:4f:68:a5:b8:95:25:
                    45:7f:32:55:84:e2:44:ef:fb:f9:70:27:84:13:12:
                    cb:81:7e:8f:ef:ce:70:dc:09:67:23:6e:7d:c4:ab:
                    2a:0a:1e:f3:f6:70:e3:52:90:af:f1:b7:13:9d:29:
                    25:20:f0:54:0a:f7:1f:f7:d4:e0:b2:dc:ea:ca:f0:
                    3b:d2:da:72:db:e6:8e:5b:95:8a:9d:b7:f7:a0:47:
                    d4:83:87:24:a2:96:74:46:a6:7f:03:fc:45:43:5a:
                    05:a4:a4:b1:dc:e4:8a:70:be:aa:76:e9:93:53:35:
                    ba:be:7d:ef:1d:0a:38:2e:cc:8a:60:68:74:24:bb:
                    c6:d0:e7:f7:0b:d9:f5:b7:ce:67:85:ae:66:f9:de:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:BC:87:72:9E:5A:50:95:7E:4F:B4:00:2F:6B:59:4C:07:E5:B4:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b2e2f53-cdc8-313e-9f8d-0a93c3eaf11f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:79:8c:4c:51:26:5e:14:dc:76:b6:d2:0d:9b:25:c2:37:cf:
         dd:5d:2d:b1:52:4d:48:e5:0d:23:6e:ad:63:dc:ac:65:a6:41:
         34:7b:22:f0:2b:79:dc:79:5f:5d:63:e0:f4:f9:b1:2d:ff:ec:
         07:de:62:78:5a:b7:90:ec:39:93:c1:e0:b0:70:bf:e9:5b:18:
         8a:55:93:34:36:e6:83:8d:5b:20:ad:b0:4d:50:c6:28:ca:e4:
         b1:b9:32:f4:3f:29:b9:f4:fc:a6:4b:cf:51:88:98:10:12:0a:
         0a:d1:31:05:4b:4b:71:54:a6:21:c2:39:84:de:dd:fd:13:30:
         9c:55:f3:da:36:a2:71:dd:de:fa:69:3c:32:b5:9e:07:3f:34:
         07:3c:78:52:9f:1d:78:2a:1f:b6:f5:fd:e3:6c:50:4a:37:46:
         b7:55:6a:1e:d4:19:87:41:05:ca:5e:0f:59:20:95:d0:06:2a:
         53:04:f0:5e:14:3d:3b:41:41:97:02:b0:12:a1:fc:a9:fa:e0:
         b7:78:b6:92:7f:55:09:18:f3:17:29:1b:ca:46:60:1d:d4:33:
         f9:51:a6:0c:de:6d:1a:48:60:7a:b3:79:2a:3c:4b:7b:04:18:
         b5:93:3c:a8:52:42:64:c3:e6:0a:1f:d2:91:a2:ef:59:ab:0d:
         58:cc:bc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:37:21 2025 by rpki-client