Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/400dc432-6048-3c9d-9821-62bb00a8b569.roa
File:                     400dc432-6048-3c9d-9821-62bb00a8b569.roa (raw, json)
Hash identifier:          j6E9WC+kUujic67+KlmwkdSmgniIqIdPZMMl+rsvQX4=
Subject key identifier:   E0:E7:ED:C5:DA:AB:3F:7D:25:36:94:4E:85:96:AC:4C:D0:47:FA:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA673C98C7262161554F500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/400dc432-6048-3c9d-9821-62bb00a8b569.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     397197
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:73:c9:8c:72:62:16:15:54:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=8c609ede-56bf-4817-a994-0c8dfb771dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:38:b3:3c:9d:41:4a:4f:f0:1f:cc:1d:3f:a1:
                    b8:a9:40:9a:fd:5a:5b:7d:cf:3e:73:0c:d6:37:1b:
                    5a:c7:a6:6b:92:02:17:b2:06:26:6f:51:f2:43:69:
                    10:fe:6f:a1:00:52:da:c1:ae:29:d2:84:a4:96:61:
                    74:ab:0f:47:6d:86:92:8c:86:4c:15:19:d2:5b:12:
                    2e:dc:c9:50:ca:9a:d3:15:9b:fb:8e:5b:bd:22:5c:
                    63:36:58:bf:98:c0:eb:93:b5:6e:73:17:3a:56:09:
                    8c:83:36:4b:3c:81:3d:1d:d7:1e:49:f4:05:89:cd:
                    df:6c:bd:69:85:63:b0:53:4a:52:a7:28:b7:6f:2b:
                    66:52:d6:23:37:ff:1f:63:11:2f:18:2f:c1:d2:55:
                    52:eb:9f:bb:ad:ac:cf:7c:bb:2c:d7:11:73:12:55:
                    8f:85:21:73:16:0f:51:d3:dd:57:b6:07:8a:6a:0c:
                    7a:cb:11:0e:44:69:72:0f:c6:42:2a:b5:1a:0a:c8:
                    85:59:27:cb:a1:b6:dd:4e:68:21:8d:9f:50:b8:0c:
                    a2:1d:41:51:06:f4:56:39:d5:60:46:b8:d2:f4:5a:
                    41:d5:1d:d0:20:75:0a:ca:84:55:3e:3d:be:35:39:
                    2a:05:69:a6:25:6b:ae:44:69:68:f7:07:4f:06:bd:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E7:ED:C5:DA:AB:3F:7D:25:36:94:4E:85:96:AC:4C:D0:47:FA:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/400dc432-6048-3c9d-9821-62bb00a8b569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:23:af:56:c4:35:b8:4c:a4:1f:25:e2:af:62:c8:01:8b:b9:
         a0:3a:ad:66:f3:0b:a2:1a:9c:33:96:38:29:35:e2:b2:27:55:
         13:98:1f:89:f7:c7:f6:16:42:f3:e5:be:01:f1:44:06:71:8e:
         54:b2:1f:56:06:03:68:0a:65:50:6c:b7:3b:57:e6:3c:5e:7a:
         f7:e2:2e:48:c4:e6:6c:96:84:71:7e:90:df:45:48:27:01:09:
         03:f6:d8:46:93:cc:59:2c:fa:7b:a0:58:75:63:ee:e6:95:da:
         92:72:7e:f3:8c:54:57:4b:f6:95:20:2d:57:54:21:62:5d:12:
         86:56:26:81:2b:93:a6:bf:8c:5f:70:2b:6d:fa:bd:25:69:7b:
         76:3a:cc:9e:20:7e:cb:8a:ac:72:50:c5:04:97:ec:32:a2:82:
         a4:10:75:f9:8b:cd:04:8b:02:30:97:b1:12:ea:19:90:8c:5c:
         73:63:87:0e:d6:8f:7f:a6:53:e1:f2:88:43:de:d0:0c:57:89:
         2e:61:28:1b:ab:8c:26:b2:5a:89:39:a8:02:46:d6:3a:e5:71:
         e3:a0:b9:88:49:e5:03:cd:eb:c8:53:49:69:88:f3:07:35:89:
         20:0a:5c:a8:9b:09:04:88:54:84:26:c0:87:8d:ee:ba:1f:1c:
         e3:85:7d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:27:37 2025 by rpki-client