Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b900d88-eb66-3d14-a50a-cd69359abe74.roa
File:                     3b900d88-eb66-3d14-a50a-cd69359abe74.roa (raw, json)
Hash identifier:          EQeFfVnDHFGn+PZ2zwg5ca1iXoN968WUebhU2DpOsT4=
Subject key identifier:   7A:F7:BF:AA:0B:5C:46:C5:14:4D:59:7C:EC:52:CF:7C:EC:78:FA:3D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C61D2164937F3AA9A8A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b900d88-eb66-3d14-a50a-cd69359abe74.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     27544
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:61:d2:16:49:37:f3:aa:9a:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=557351e3-32c2-420b-89a1-13623c391648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:79:09:39:3f:b8:33:52:32:cd:46:72:a2:
                    04:54:0e:7e:2b:ec:c7:16:dc:c8:40:a6:b1:eb:5a:
                    87:73:df:c7:dc:1e:bf:99:61:b0:32:19:16:94:8d:
                    97:26:d4:5f:4b:21:56:da:d6:89:59:3f:f3:30:36:
                    49:df:55:72:17:1e:76:21:98:f1:e0:37:24:1a:eb:
                    ad:92:0c:2f:2a:26:6f:df:2a:dc:20:a0:b6:c3:bb:
                    34:e1:9f:52:84:94:6b:dc:17:4b:f1:9f:3c:3b:30:
                    9f:73:24:21:3d:95:12:9d:3b:28:5c:05:c8:1d:01:
                    18:ac:d4:94:19:a6:bd:12:fd:28:bc:e1:6f:eb:41:
                    2d:38:7f:d5:9b:fc:28:52:65:0c:e8:a6:cd:f8:0a:
                    f8:75:d2:9a:6d:af:57:d3:46:37:db:2d:24:a0:ff:
                    bd:1f:31:87:1b:48:af:63:d9:39:0b:05:ef:f4:1d:
                    ba:9d:71:ed:e8:56:d7:86:ab:62:18:a8:f4:20:b3:
                    17:8c:20:b4:61:ac:6c:ff:ef:52:37:f0:ed:5b:c9:
                    0b:0a:5f:19:f1:9c:84:63:02:7a:9a:3b:00:bc:d3:
                    5a:d1:92:6c:b5:68:cf:29:9d:75:ad:1a:4b:e2:1a:
                    ae:51:c3:85:7b:a2:39:74:07:23:07:5a:f2:12:24:
                    ae:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F7:BF:AA:0B:5C:46:C5:14:4D:59:7C:EC:52:CF:7C:EC:78:FA:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b900d88-eb66-3d14-a50a-cd69359abe74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1b:5c:5a:2a:18:6d:08:2b:5b:74:d6:75:1a:21:55:a1:a1:
         4a:85:00:e1:bc:24:66:f3:ba:78:3e:87:8f:30:2e:30:47:72:
         dd:b8:83:1b:e3:c9:e0:db:0d:d2:1d:7f:21:3a:9b:07:48:4f:
         0c:e5:8b:18:e0:3c:74:c0:3f:38:95:88:90:42:2e:33:cd:1e:
         b7:83:ce:19:49:20:af:10:bd:f6:aa:ad:bb:32:d6:72:6d:20:
         fc:02:26:59:05:95:30:66:bb:db:89:44:a2:06:4a:c4:2b:94:
         2f:3c:27:8e:1a:69:61:dc:4f:d9:98:0b:a9:f0:61:83:37:2d:
         9f:a4:f0:35:a6:5f:64:bd:cc:95:e1:c2:8f:5f:16:b0:7c:49:
         b8:92:51:d4:5d:2d:92:50:d0:8a:ba:34:e7:ca:bd:aa:e8:60:
         65:ca:59:61:a8:f4:7b:6c:4e:6f:cc:41:4a:15:24:4a:4d:11:
         ce:b5:9b:31:db:5d:f7:d3:9b:a1:bf:fc:63:e6:da:60:e8:48:
         e5:50:c5:36:58:94:29:b1:22:de:db:26:b9:b7:7f:22:7f:d5:
         75:5a:29:b1:c0:e5:18:d7:50:bd:d3:b3:45:68:7c:8e:aa:2a:
         d2:0f:c5:24:2b:86:fd:52:2d:b1:8c:9e:b0:83:f6:c4:b4:93:
         48:26:71:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:02:37 2025 by rpki-client