Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a94190d-fec4-357a-9f39-7856fdcabc2e.roa
File:                     6a94190d-fec4-357a-9f39-7856fdcabc2e.roa (raw, json)
Hash identifier:          PsQ2K/VyjbmLfZwlKROF5FQ8QxYe/rLqhpHqH6tzf/M=
Subject key identifier:   E3:B6:A1:9E:D7:44:4D:F6:2E:6E:A4:FE:3A:92:AE:1A:EA:C2:61:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B66320FD4DCFA9E7DE7904A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a94190d-fec4-357a-9f39-7856fdcabc2e.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     396579
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:0f:d4:dc:fa:9e:7d:e7:90:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=18ca84f5-bf42-4397-811d-2c66dd896e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:29:36:08:cc:c1:38:91:f8:e5:73:1d:6f:00:
                    06:cd:69:09:77:52:8c:a5:ab:31:60:e2:0c:1f:fc:
                    3a:2d:98:9e:e8:45:81:17:e5:72:27:fc:75:e8:ec:
                    a8:c9:7e:6e:48:a2:f8:cb:fd:89:d9:a6:56:05:ec:
                    25:35:28:e6:a3:20:69:15:59:29:6f:d2:5d:f4:7a:
                    61:36:f5:94:60:72:a8:5c:80:21:d0:92:a8:0b:02:
                    b9:7e:9b:51:04:1b:97:d1:34:be:bf:73:dd:de:06:
                    3f:b9:4d:f4:68:7e:24:c4:51:a4:b6:e1:dd:8b:19:
                    bf:8d:48:74:3e:39:60:3b:04:b3:02:96:bd:5a:6b:
                    57:a8:08:93:f2:88:b9:12:a4:07:5d:fc:7d:42:8f:
                    cf:a7:e0:68:ef:1f:f3:4c:b1:13:ef:8a:a6:f0:83:
                    d2:43:5f:9e:88:41:7d:4e:00:16:61:3f:84:0b:04:
                    03:b2:bb:8c:da:d8:64:53:45:c9:9e:23:06:d5:1d:
                    93:c2:bd:09:13:d4:06:44:c1:28:28:13:76:01:4b:
                    de:d4:99:74:87:a8:22:b9:7a:7a:4a:ce:ba:78:61:
                    af:21:97:9b:74:49:ee:a8:dd:42:f5:0d:6f:4c:d5:
                    04:a3:4e:68:c2:11:c5:25:c8:a5:fc:15:91:8b:0f:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B6:A1:9E:D7:44:4D:F6:2E:6E:A4:FE:3A:92:AE:1A:EA:C2:61:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a94190d-fec4-357a-9f39-7856fdcabc2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:7c:e0:53:2a:94:12:f9:4e:6e:5b:c5:71:1d:e8:7b:b9:c3:
         4e:31:60:d1:a9:98:ab:11:34:35:03:e6:1c:fb:52:e0:59:ae:
         94:db:49:38:ec:15:93:d1:3f:62:f8:66:e9:3e:89:a7:96:7c:
         24:5d:40:af:45:dd:d5:59:21:5f:fa:0a:08:66:55:04:36:0f:
         df:bf:39:1e:33:77:0f:53:05:0f:c7:3e:b8:aa:bc:b7:d8:74:
         52:9a:e9:da:37:2a:11:f0:a0:bb:3a:cc:6a:2a:b0:5d:50:4d:
         ff:57:96:b9:16:5e:14:fb:87:1a:20:8d:99:18:2f:af:5c:7d:
         63:aa:dd:ce:d1:3d:a5:41:da:05:9f:e6:72:1c:27:86:6a:db:
         a6:3d:db:bd:df:51:b7:bb:d7:ff:01:d8:2c:05:b0:fa:93:a1:
         ec:6b:d4:b7:aa:19:f2:52:57:8d:60:e7:cb:e7:80:65:10:d6:
         bd:a5:39:fb:12:55:f9:e9:b2:d9:50:19:9a:c0:dd:92:63:ad:
         b0:a1:3c:38:b8:73:ec:9b:b9:78:aa:9d:cb:e9:8e:4e:a8:a8:
         f1:c0:d7:b5:b9:20:5e:cd:d8:c4:97:52:68:6f:b4:aa:63:7b:
         72:34:41:b8:d0:c1:ad:ff:72:60:d1:45:4f:32:d5:d5:d4:1d:
         01:f8:59:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:01:04 2025 by rpki-client