Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44c45649-0735-3dd5-a518-69be17daf3b0.roa
File:                     44c45649-0735-3dd5-a518-69be17daf3b0.roa (raw, json)
Hash identifier:          xGgKjj8Kwokw9j1opWHXyuO1NY5ghkIm+LLjr44qpu0=
Subject key identifier:   58:46:E9:9C:0B:84:06:33:09:DD:1B:32:CC:F1:6B:F0:B7:4E:4D:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196EA15D76E90D0FD4C88C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44c45649-0735-3dd5-a518-69be17daf3b0.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396617
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ea:15:d7:6e:90:d0:fd:4c:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=e9cd53d6-9250-412a-932c-e7aece9bf248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:fc:83:ce:4d:d4:ad:c1:64:f8:76:1e:02:
                    5e:13:ed:d8:8b:0c:f1:db:ab:49:70:7d:e4:2c:81:
                    52:8e:40:fa:0e:b6:d0:16:32:02:3d:2f:92:20:54:
                    bf:50:b0:fd:ca:a7:be:1a:3f:c0:7c:df:73:97:c9:
                    8d:e9:e0:f4:1b:79:f0:50:db:3e:98:d4:0a:ae:c6:
                    49:0f:02:bb:5f:79:24:10:c1:69:9f:ca:4c:98:0d:
                    db:f8:fb:7f:26:68:94:a9:00:74:53:89:3d:5f:3f:
                    60:b9:23:46:65:65:29:2b:35:a6:7d:a7:38:fe:37:
                    94:c7:6a:7c:6d:ca:ef:a8:15:e6:dc:b7:16:fc:b1:
                    d7:24:69:31:d0:03:22:bf:89:27:30:05:2f:81:10:
                    cc:d3:35:22:16:93:6a:78:26:96:fd:73:52:b1:84:
                    48:52:9b:06:13:07:2b:41:bd:1d:b6:e3:0f:85:8e:
                    d0:0a:03:05:d3:2b:da:a0:c4:dd:d3:76:fa:08:02:
                    29:ad:b7:d0:28:2c:78:ca:db:11:f5:91:85:b5:42:
                    b4:96:8b:fd:0c:82:26:78:e5:ee:81:e5:34:fb:c3:
                    f0:e2:ae:a6:85:55:7e:7c:2d:0c:43:ed:70:d7:2d:
                    1e:58:e8:1b:fd:06:22:75:de:8d:cf:44:aa:47:7a:
                    e1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:46:E9:9C:0B:84:06:33:09:DD:1B:32:CC:F1:6B:F0:B7:4E:4D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/44c45649-0735-3dd5-a518-69be17daf3b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f8:6c:ec:04:a2:96:93:34:08:2e:be:c4:14:a6:91:85:57:
         60:b3:99:2f:3a:01:3b:86:e5:d8:d7:07:7c:47:c6:4d:5e:ee:
         a9:24:62:20:27:f8:71:6d:98:77:f4:74:79:bc:e5:f9:a7:14:
         31:00:60:a4:a8:29:99:33:ce:a3:bd:c0:2f:ea:0a:d7:93:69:
         5e:d9:c2:4b:61:1d:a8:c6:ac:60:9c:3a:a5:85:ae:9a:cf:31:
         b3:d2:33:6b:e1:a9:c4:48:97:cb:91:ed:dc:f5:14:a7:bf:84:
         b7:f3:09:65:04:ae:ec:98:bd:4f:ef:38:14:85:75:18:0a:3f:
         8e:bf:14:19:63:21:c0:da:da:c3:75:a4:d1:b1:2a:02:c7:7e:
         d7:46:da:42:eb:37:af:fb:68:bd:2a:83:5a:73:24:a6:75:75:
         2e:85:83:2f:8d:90:5d:f6:91:58:77:66:cf:70:46:97:87:e4:
         40:e1:ba:70:aa:2e:74:62:97:e2:62:60:af:6d:ed:f6:9c:35:
         02:cf:c4:1d:ef:68:3b:e9:5a:b7:f0:cc:77:5e:4a:5c:87:09:
         22:ba:4f:c6:52:30:01:ba:ad:45:aa:96:37:11:79:29:16:d7:
         b8:bf:cc:74:33:ff:e5:99:e3:b0:9f:04:98:71:9c:5b:99:cf:
         3d:c7:75:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:47 2025 by rpki-client