Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c383d79-0bba-3042-a2c6-1f2051c49407.roa
File:                     3c383d79-0bba-3042-a2c6-1f2051c49407.roa (raw, json)
Hash identifier:          Dorbk3Hlz1QDhBQJVbwaTS50zxioQbRH+lHqy80D7q8=
Subject key identifier:   75:7D:41:99:E9:31:49:F9:9E:6A:C4:ED:C3:85:FF:0E:04:35:5A:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196F14BADED3A276E9D3068
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c383d79-0bba-3042-a2c6-1f2051c49407.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396560
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:f1:4b:ad:ed:3a:27:6e:9d:30:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=8db93358-59c6-45b0-b0df-502e44d1d237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ed:63:15:2e:3c:58:c7:e9:79:d1:a2:18:8c:
                    81:f5:c0:45:d1:c0:84:4c:52:11:1b:00:d6:56:18:
                    e1:92:13:7d:05:5b:79:c9:1f:43:5f:9a:ff:d7:9c:
                    15:a8:3e:92:4f:49:ba:e1:5b:74:73:d6:c5:8d:bc:
                    cb:6b:94:4d:72:53:31:77:bb:4e:90:0f:27:f1:a7:
                    e7:fd:09:89:2b:f5:b5:1a:5f:0e:f1:71:28:96:36:
                    c5:6b:c1:8b:00:fc:88:0a:32:dc:0f:56:a6:da:c9:
                    44:2e:8b:d0:6d:a9:ed:ac:4d:31:a0:fc:5e:74:33:
                    b4:4d:ca:f2:af:62:31:23:92:a3:b6:c9:f2:40:23:
                    43:e7:2f:1e:61:42:9c:cc:d4:09:e9:30:ba:92:0c:
                    40:c5:ee:32:16:67:71:cb:f7:78:70:a9:fd:0c:e6:
                    a9:5e:5b:1c:0a:5a:68:fb:21:a7:3a:9f:43:51:37:
                    58:9d:19:17:e4:6c:10:32:2b:19:65:b1:76:58:f8:
                    cb:e0:02:8a:bf:fa:50:f4:1c:2f:91:00:1b:f7:ca:
                    14:18:8c:5d:09:5d:82:f1:02:20:5a:7c:43:bf:d1:
                    fc:9a:e2:9f:a9:13:77:fe:44:34:7b:b5:55:aa:e8:
                    27:06:83:1b:21:f4:f7:90:f2:3d:62:2d:fe:aa:ad:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7D:41:99:E9:31:49:F9:9E:6A:C4:ED:C3:85:FF:0E:04:35:5A:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c383d79-0bba-3042-a2c6-1f2051c49407.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:e5:3f:95:7f:1b:8f:f3:35:63:3b:c4:96:36:99:49:8d:21:
         b8:bf:ae:c4:4e:11:52:39:df:dc:a6:5b:65:97:30:32:82:4a:
         65:a0:46:48:50:f4:76:e8:04:aa:90:fc:72:8c:a0:6d:1d:d2:
         6c:8f:df:46:f7:3d:7e:1a:37:53:7b:1b:8c:8c:e1:bf:8c:31:
         fa:64:c5:ea:a7:4b:56:14:65:f2:f7:3e:5c:b0:98:b0:cd:7a:
         89:b7:55:b7:d8:56:37:ba:45:8d:86:b3:8c:8d:61:99:6d:a4:
         2a:65:1a:7c:e0:20:cd:2c:ce:11:75:54:1a:07:78:00:9a:89:
         2a:01:5d:ca:92:01:a6:a7:8e:f8:a2:81:01:88:48:c3:34:83:
         01:3b:e3:2f:a8:05:89:68:04:e3:f5:06:a3:f4:74:65:2a:f1:
         16:0a:e2:89:c1:f2:9d:be:b5:30:2e:06:a9:e9:7d:96:30:94:
         de:20:26:9a:58:ab:91:64:83:fa:81:6d:5e:7d:82:0d:6d:e6:
         33:d0:23:c5:0d:ec:83:33:40:27:60:d1:94:e7:4e:bf:af:86:
         f2:1b:ec:2f:53:f1:99:07:93:68:14:be:eb:b9:1f:a2:9e:73:
         15:75:fe:5f:10:06:b0:be:bc:cf:3e:ce:e0:fa:bf:68:1e:90:
         d7:15:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:19:22 2025 by rpki-client