Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34c6709f-a9f9-3177-bce5-f2bf0fb5a197.roa
File:                     34c6709f-a9f9-3177-bce5-f2bf0fb5a197.roa (raw, json)
Hash identifier:          uwRUWH4gFowSpqr4g1F3coViMtvIJ13AxLdkpnWEC44=
Subject key identifier:   6C:96:45:E4:D3:2C:6B:1C:B4:A2:B5:91:2A:02:0B:AF:B3:07:E5:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67350A4BA8180F34A8F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34c6709f-a9f9-3177-bce5-f2bf0fb5a197.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     36617
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:73:50:a4:ba:81:80:f3:4a:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=15781845-bd6a-4890-a32d-6e16f7b0b248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:27:46:13:6c:a4:ab:32:51:d5:a1:2d:c8:
                    9b:2d:7b:d8:b9:c9:5d:e8:93:1f:89:35:84:a6:a3:
                    ab:36:3f:de:d4:4c:fd:67:6f:35:c8:98:10:91:41:
                    f4:2b:2e:74:03:08:87:0e:ce:1e:e8:30:45:79:34:
                    20:b1:2a:e7:cf:ed:93:7b:f4:d7:8b:45:33:ee:78:
                    55:6a:4b:10:8c:d2:11:95:fb:59:40:52:20:cd:6e:
                    64:20:a3:50:28:1a:73:c7:dd:3f:3e:01:8f:97:b2:
                    99:04:d4:67:38:e3:60:68:0d:09:f2:f1:b2:a4:0a:
                    a0:7d:0e:81:f1:55:80:e4:02:de:fd:ab:5b:c0:eb:
                    ce:3c:a7:da:e5:21:9c:1f:a8:60:f5:6c:49:78:0d:
                    9b:ca:27:d9:60:f4:03:a5:76:fc:ca:e4:59:af:79:
                    9f:78:d3:2a:d0:d0:18:e3:ce:ff:ca:cf:c1:00:1b:
                    18:50:24:cb:f7:cf:fd:6a:13:53:74:21:06:59:d7:
                    6e:61:e0:32:19:68:6c:d2:23:56:db:f7:70:49:30:
                    e7:c7:06:51:a8:8b:3f:37:cd:db:32:07:92:8d:2d:
                    1c:32:8b:6e:40:01:b2:d3:83:59:fb:60:a2:e7:64:
                    40:94:a2:dc:49:70:42:60:d2:8e:d2:c5:b5:2f:b3:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:96:45:E4:D3:2C:6B:1C:B4:A2:B5:91:2A:02:0B:AF:B3:07:E5:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34c6709f-a9f9-3177-bce5-f2bf0fb5a197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5c:7f:f1:77:e7:1d:49:8d:49:e8:46:df:06:d7:cc:18:bd:
         30:9c:8f:ef:0e:3e:76:e5:50:d5:57:72:fc:00:9d:a1:38:74:
         40:86:f8:03:9b:73:f0:ed:dd:54:ec:a3:ca:42:45:cd:2c:a6:
         e2:d5:18:69:20:de:8d:e4:c1:77:8f:b0:af:d3:32:e8:c5:43:
         b6:2c:9f:79:bc:91:68:bb:fe:b1:e8:41:bd:b2:9f:be:cc:ca:
         b6:1c:a1:5c:69:8d:78:33:d4:fc:6b:8d:33:b1:1f:3c:76:e1:
         42:5a:25:31:3d:bd:26:d9:cd:d7:aa:b4:5c:fa:4c:b7:8e:ff:
         98:fd:63:70:fb:31:cc:59:3d:f2:0a:19:7d:49:70:49:21:21:
         ed:94:97:23:35:ca:68:b0:40:0f:19:8f:a8:6f:24:80:30:6e:
         53:ea:9d:20:6a:70:77:a5:37:63:8b:38:bd:73:ff:3e:87:0b:
         c7:4f:d6:64:a8:85:27:ff:a4:01:06:41:8a:06:8b:25:d9:3a:
         45:00:3b:cf:a4:c3:57:9c:f9:ba:36:26:86:0d:de:7f:00:73:
         d6:5b:7b:e1:77:59:c4:f6:5f:e6:89:26:60:c5:34:40:63:e0:
         29:02:cd:92:88:4f:2d:ee:5e:fc:ea:fb:d6:12:76:eb:4d:51:
         44:eb:15:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:58 2025 by rpki-client