Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b82831a-6efe-3037-9489-3fd0d88792ce.roa
File:                     5b82831a-6efe-3037-9489-3fd0d88792ce.roa (raw, json)
Hash identifier:          koAKbJkI576+4HFryS9J2Y57f/Zg5AAV7b1vCiHvhtM=
Subject key identifier:   42:33:E3:02:B4:3B:1C:3C:B0:04:C6:DF:4C:B3:57:CE:AB:F4:7F:50
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEE17C2089E5E4268C9997C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b82831a-6efe-3037-9489-3fd0d88792ce.roa
Signing time:             Thu 21 Aug 2025 12:31:01 +0000
ROA not before:           Thu 21 Aug 2025 12:31:01 +0000
ROA not after:            Wed 19 Nov 2025 13:31:01 +0000
asID:                     397199
IP address blocks:        2001:502:8cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:17:c2:08:9e:5e:42:68:c9:99:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 12:31:01 2025 GMT
            Not After : Nov 19 13:31:01 2025 GMT
        Subject: CN=697c8de1-bb82-42f8-972b-2aa0eb240b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:51:bf:20:9b:85:b7:3b:b6:5b:a2:26:09:6e:
                    ea:f2:38:90:bb:ba:90:ce:0b:61:f5:ab:ee:4d:01:
                    cd:ca:16:c0:8a:c2:ff:44:f8:72:75:26:de:ce:89:
                    63:bb:c3:41:f4:dd:2f:c5:6a:3f:78:bc:cc:eb:b7:
                    8a:68:c4:b2:25:e9:44:3a:0f:76:d8:9f:f3:59:7c:
                    b1:f7:22:a3:40:2c:07:e5:73:47:e6:36:ee:f6:5c:
                    f9:22:25:75:b9:ba:0d:eb:44:30:d3:72:cf:48:07:
                    c9:86:be:ba:95:5c:b4:d5:ad:cd:83:1f:d8:e7:48:
                    a7:f9:46:9e:03:3c:2f:ee:67:47:5d:13:a2:8c:9b:
                    c7:29:e6:29:40:8a:cc:b3:38:c4:fb:81:45:45:b2:
                    ed:b9:79:af:d2:12:33:bd:cb:71:a6:b6:82:4a:93:
                    03:a3:c5:45:a1:0e:f4:03:cc:7c:ec:45:8f:39:bf:
                    6c:99:5a:f4:ef:9c:70:74:7d:f2:39:1d:ae:cc:9e:
                    d2:11:8f:6f:64:2d:c4:89:83:bf:a6:8d:d7:ce:dd:
                    0e:a3:b1:d7:17:63:a3:63:29:2f:6b:1f:a8:e2:4d:
                    0c:4a:23:cf:f8:56:10:9f:65:5b:46:69:eb:41:27:
                    d1:0c:cd:80:d2:b3:80:78:4e:3a:e3:56:dd:63:3f:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:33:E3:02:B4:3B:1C:3C:B0:04:C6:DF:4C:B3:57:CE:AB:F4:7F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5b82831a-6efe-3037-9489-3fd0d88792ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:11:f0:5f:b9:b4:9c:de:96:7e:85:cb:ea:26:a3:b7:dd:bc:
         1e:59:ae:08:d9:b6:eb:1d:15:34:57:e6:b9:3c:e6:de:04:d1:
         6c:4d:76:03:c5:21:45:bf:ab:18:ef:3c:eb:5b:65:aa:27:a8:
         20:c5:e6:92:a5:8c:b2:f6:bc:c0:50:b7:eb:84:dc:52:34:a0:
         3f:5c:e7:06:86:be:20:d2:31:4c:7e:0f:93:4d:05:58:00:af:
         3f:d6:20:b3:ef:43:3d:43:a5:71:7b:e3:eb:67:9f:4e:e3:85:
         ea:42:74:75:74:03:79:d6:71:5d:1e:35:5e:66:35:f2:ed:b4:
         0d:d8:cc:ea:41:98:61:6b:f4:df:9a:0c:32:87:76:4e:11:ed:
         30:c5:9d:e5:48:2b:27:a3:6e:b0:84:3d:a6:b1:49:4c:3a:f3:
         fb:8c:8d:ee:21:24:91:60:f1:b9:ca:c4:34:1a:4c:ed:c4:d2:
         20:49:88:0b:2c:61:29:cd:c1:34:c8:0a:17:09:a6:ab:e1:8a:
         3b:92:b2:a7:0c:84:12:35:63:7d:91:21:4c:e7:43:7b:aa:c4:
         a0:32:c7:e7:18:52:98:15:05:a0:a1:39:20:e8:31:8c:8c:f0:
         48:df:cc:1a:7a:45:78:a9:cf:ad:43:7d:36:35:1e:0c:1d:a0:
         c8:06:b8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:46 2025 by rpki-client