Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470ad475-5a28-3870-aa89-b69ee397c19a.roa
File:                     470ad475-5a28-3870-aa89-b69ee397c19a.roa (raw, json)
Hash identifier:          DL88Kdxq7KkD8G0o1GcADZNUGxHZUhxV4Sys2IAzC7Y=
Subject key identifier:   D9:C8:84:0E:41:8A:49:16:7E:A7:02:37:58:F9:9D:58:43:EF:C6:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67DF202733D4874AC9D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470ad475-5a28-3870-aa89-b69ee397c19a.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396600
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:7d:f2:02:73:3d:48:74:ac:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=3313b6c9-c9cf-45ed-bd01-4d393c27efe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3a:13:18:de:a3:ee:c7:0f:23:87:6a:30:48:
                    2d:b9:90:d5:64:f3:d8:9a:9d:dd:6c:33:9d:7e:e3:
                    e5:14:30:90:87:67:46:7d:f0:d9:77:b3:24:c6:fb:
                    12:af:37:df:50:7a:1a:f3:80:87:1e:47:c1:4d:fd:
                    3b:12:6f:fc:7c:49:01:d3:43:65:ec:cc:f3:31:81:
                    5f:7f:2f:6d:20:2a:06:8b:99:b6:e1:b4:44:86:75:
                    13:54:45:27:03:d0:89:91:78:36:cb:ef:f9:aa:b8:
                    2a:da:53:3e:d9:17:3f:0f:1d:73:3b:21:06:4a:70:
                    54:c8:96:12:32:e9:01:32:f3:54:d1:b7:99:34:b6:
                    09:38:b0:23:d7:ae:b9:82:78:84:7e:3a:56:c7:d4:
                    88:0d:a4:5e:fe:35:66:4c:f9:f2:14:1b:f5:f2:73:
                    a0:f7:2e:e3:64:dd:85:67:99:a9:39:a0:7b:50:9b:
                    81:36:e2:37:16:d1:49:b3:9d:08:37:d8:0f:72:17:
                    40:90:51:ea:17:79:69:43:00:d2:ee:50:ab:69:67:
                    d2:78:aa:8c:91:b3:a0:97:b7:f6:62:71:03:bf:14:
                    7c:24:2a:6d:68:ac:a9:f5:bf:12:6b:08:28:3d:8d:
                    72:36:73:90:2f:05:6a:e8:3e:af:b4:f5:64:17:84:
                    4e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C8:84:0E:41:8A:49:16:7E:A7:02:37:58:F9:9D:58:43:EF:C6:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/470ad475-5a28-3870-aa89-b69ee397c19a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f3:ac:96:0f:b9:89:ab:88:41:3a:6c:6b:5e:04:3a:6c:93:
         e3:90:97:25:fa:b5:91:18:a5:27:de:d5:ed:92:ee:c4:fa:94:
         f4:d3:ff:28:ee:ba:4d:c0:a2:8a:83:19:77:eb:4a:e9:16:c3:
         b1:0b:52:56:2d:37:44:7b:d9:21:bd:ba:75:4b:0c:e5:1e:06:
         f4:4b:c1:dd:00:07:9a:7e:d7:1a:8e:dd:a1:6b:c8:f4:0e:42:
         04:b4:21:41:6f:73:03:7d:71:35:df:b9:cb:e5:d9:d3:1b:7c:
         c8:7e:d0:03:92:ca:ad:14:32:e4:22:ac:48:d6:ee:02:17:f9:
         04:0f:0f:1a:93:63:8c:71:4d:e7:37:a8:eb:0b:a4:b6:df:2d:
         ec:e2:2e:fa:9a:cf:65:04:37:88:89:80:3e:c4:0e:22:cf:7b:
         07:20:23:17:72:b1:1f:fe:c8:01:25:da:be:97:cd:d7:27:8a:
         fb:bf:f6:62:86:e2:71:3b:aa:1a:69:4d:d1:b4:87:57:27:4d:
         e7:65:34:84:a4:bc:5a:df:48:1f:f1:c7:36:04:c5:3e:60:67:
         86:e4:a6:28:65:4d:74:8a:06:ee:72:87:15:27:7a:48:fc:f6:
         9c:b9:4b:cf:8e:a1:0f:1d:2c:bd:49:6e:97:1e:12:f8:a5:dc:
         de:5f:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:41:31 2025 by rpki-client