Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62e1f9f4-25f7-3356-bf18-6973e9cea6f0.roa
File:                     62e1f9f4-25f7-3356-bf18-6973e9cea6f0.roa (raw, json)
Hash identifier:          5wVfg+4gltHPIrZTbP3SLutvDUf3rhZZKf8OJhQc8/g=
Subject key identifier:   7E:96:83:B1:D1:44:80:9B:2A:08:CA:C8:69:02:ED:CB:57:55:4E:4E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C631BB06D459B62889400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62e1f9f4-25f7-3356-bf18-6973e9cea6f0.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     397209
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:63:1b:b0:6d:45:9b:62:88:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=c8fa3c34-acbd-42ff-ad45-64b19f8df77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:58:69:8c:84:4f:ad:92:83:90:60:df:7b:a8:
                    fa:fe:69:13:d0:ed:fb:08:b8:89:0c:32:ad:76:72:
                    cb:6f:f7:d6:c0:a8:ac:1c:bd:38:4b:f1:00:e3:2b:
                    06:67:13:d0:ea:28:78:8f:2a:7e:37:69:01:3d:d8:
                    fd:40:27:6e:f1:dc:02:6a:45:16:0f:82:01:1e:8c:
                    a1:b7:f3:10:27:e2:63:af:59:30:db:4a:b1:72:ec:
                    dd:1a:e1:7c:ce:da:1a:6c:58:41:cd:49:06:df:ce:
                    c0:e4:0c:26:52:f8:a5:f5:2e:e0:3c:97:58:99:37:
                    3d:a5:51:6c:37:ea:81:46:9d:20:a1:37:34:7b:d1:
                    dd:4d:21:69:d8:fd:30:b3:d7:87:f4:18:75:5a:05:
                    29:34:1c:00:8f:e8:6f:a8:2b:af:1c:1b:87:94:85:
                    84:ab:9c:25:95:c9:a0:d3:b2:39:fb:75:4a:00:ba:
                    9f:42:e9:f6:e1:48:1b:2b:ef:fc:ce:ec:df:3d:76:
                    41:7b:9f:03:53:00:11:38:73:c0:9b:1f:8f:7c:13:
                    28:b8:6e:39:aa:b6:1e:70:e1:d4:24:19:a2:ea:cb:
                    44:f3:26:b9:51:f0:56:ee:7a:79:25:43:8a:80:9b:
                    8f:a5:70:93:21:7c:30:90:58:74:16:38:3b:0d:bc:
                    1f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:96:83:B1:D1:44:80:9B:2A:08:CA:C8:69:02:ED:CB:57:55:4E:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62e1f9f4-25f7-3356-bf18-6973e9cea6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:78:42:d2:24:9b:28:d5:1b:6f:99:00:35:30:6e:b8:ff:12:
         f4:86:ff:7b:c0:a7:8e:32:c8:68:1c:0b:9e:db:27:10:0b:bb:
         99:66:d0:10:93:0d:34:04:8f:1d:80:76:63:9a:eb:09:b1:6b:
         2e:b1:7d:8a:db:6a:3c:2d:13:ac:93:12:63:62:11:45:e8:17:
         66:8a:fb:ee:10:62:09:fb:b3:59:25:e4:65:87:34:4d:e7:6c:
         ab:25:17:b9:e1:c6:4e:7a:34:1f:ce:94:c3:c0:1e:d5:83:bb:
         e3:c9:c8:07:7c:48:d5:2b:66:a6:eb:19:ae:a1:1d:5b:a7:83:
         b2:0d:ec:34:19:36:3c:13:e0:ee:db:ed:f8:ff:30:2d:11:24:
         e3:14:54:22:88:74:f5:39:37:d6:e3:6e:75:bb:49:a6:a4:76:
         c9:df:ab:41:da:2d:91:3f:f7:85:91:37:91:16:7c:8c:49:a4:
         01:5b:9e:ba:fb:44:6d:99:40:86:5e:df:ed:1f:5a:db:43:c7:
         5c:66:2d:02:04:09:06:ff:f5:af:90:84:71:af:c7:e2:80:c2:
         0c:60:31:bf:c4:ec:8f:95:d2:46:e7:2f:a9:1a:19:2c:80:fc:
         7c:5a:de:0d:8d:66:03:d2:46:17:b6:c6:4a:b2:86:b1:75:f1:
         8b:a3:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:47:12 2025 by rpki-client