Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d35682c-6bd6-3365-8f22-7d24f837b533.roa
File:                     6d35682c-6bd6-3365-8f22-7d24f837b533.roa (raw, json)
Hash identifier:          sVSja2p2lnPSm4kRZlYnNENqmnVGb+L5zvvt+CB4qM4=
Subject key identifier:   B6:2B:28:2F:1C:26:A2:D4:81:EC:CD:D6:CD:2B:F4:A4:9A:9A:C3:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3AEC4F1D8847D36CC9DEA98A
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d35682c-6bd6-3365-8f22-7d24f837b533.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     397201
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:4f:1d:88:47:d3:6c:c9:de:a9:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=325902f7-8ee4-49c7-a8ac-abbea083b073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a7:2f:c8:58:85:9b:30:2d:95:b1:af:bc:ec:
                    e9:12:bb:50:c8:c3:c7:4c:4b:77:a5:98:21:26:4a:
                    8d:c0:a8:ce:69:5c:0e:50:67:5c:2a:f3:b5:d5:e8:
                    52:aa:6b:0d:13:ff:00:68:25:25:02:a6:e9:d5:22:
                    44:64:29:8e:e4:9a:6a:62:2a:b0:79:7b:cf:46:22:
                    2e:67:49:cf:f6:b9:14:f6:bd:77:2c:21:8f:8c:41:
                    51:64:6e:5f:9d:e7:16:d1:31:28:52:1c:72:8f:56:
                    92:03:39:3d:43:69:c1:85:f4:7c:32:b4:8f:e5:be:
                    7e:04:2d:b5:5e:16:52:12:4c:2a:ba:a2:ff:cc:f4:
                    e6:52:f0:dd:da:5e:28:7a:74:bb:01:ee:21:32:06:
                    bc:e3:c5:37:65:62:e5:76:31:69:51:cf:55:6e:bf:
                    f0:f7:ac:35:a1:27:69:98:d9:1f:14:3c:04:77:54:
                    26:74:bc:26:4e:44:72:a1:83:3e:00:82:47:80:64:
                    7d:7b:f8:99:3d:05:18:f8:86:f4:29:0d:11:32:b3:
                    a4:3d:20:a6:8b:69:bf:2f:3d:ea:0c:2d:30:1f:d9:
                    a6:c8:15:10:3d:ae:16:c5:ec:42:fa:99:5a:f3:d5:
                    1e:7c:1e:13:b8:9a:50:a5:39:e7:58:39:54:3c:eb:
                    e1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2B:28:2F:1C:26:A2:D4:81:EC:CD:D6:CD:2B:F4:A4:9A:9A:C3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d35682c-6bd6-3365-8f22-7d24f837b533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:37:31:7b:cc:78:d6:92:ab:e8:b4:89:aa:ae:e9:a9:5b:8f:
         3b:15:ad:49:4d:9f:3b:2f:1a:9d:2d:58:20:e0:9e:ea:24:59:
         21:fe:a9:90:8e:e9:2d:22:89:dc:1d:df:c1:c2:37:6d:a3:ab:
         dd:65:f0:d3:1a:8a:13:ea:e6:0c:d8:e8:2f:f6:70:b5:41:c1:
         9f:df:2e:30:cb:1d:f3:13:89:4e:fe:03:8e:58:11:fc:52:2f:
         ac:1c:b7:45:70:a3:0f:e8:0b:10:22:c4:58:0a:2c:25:d3:d7:
         c6:25:2f:3c:3c:4b:8c:c8:14:e7:ba:f3:72:45:1d:6c:aa:0a:
         c3:3b:32:73:6a:e0:21:75:7a:cb:4e:56:82:ab:02:17:68:c4:
         ea:d6:99:42:d5:fe:2c:c6:c5:e2:b3:2e:e1:08:d9:97:f4:18:
         93:41:28:4c:7e:1c:72:75:58:cb:5c:77:97:54:87:9a:3f:b4:
         d5:c6:24:5e:f4:5b:e5:f7:d5:ca:7d:8f:6c:cd:e8:d2:a2:4a:
         6e:a9:51:b1:07:06:13:74:ba:2b:c8:60:29:08:fa:31:a9:07:
         cb:89:b5:71:d4:d4:21:15:06:1c:98:9e:e3:93:8b:3c:e5:71:
         10:b3:89:14:1a:5b:e3:26:fb:c9:49:69:dd:d0:67:01:47:e2:
         58:d6:c5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:10:47 2025 by rpki-client