Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e2815c0-6704-36dc-a81f-aa7326a435e1.roa
File:                     6e2815c0-6704-36dc-a81f-aa7326a435e1.roa (raw, json)
Hash identifier:          IXGhVu6RMrc+UIDkgoAEECQ8SdGORO/BLw7uipZaRHU=
Subject key identifier:   07:6C:6B:05:E1:F5:15:57:02:FB:2C:B1:46:30:DC:55:1E:6B:9B:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3DB6EF68B9134C8B8528B000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e2815c0-6704-36dc-a81f-aa7326a435e1.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     32651
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:ef:68:b9:13:4c:8b:85:28:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=9435682c-9256-4ec3-adee-18638f98af84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:18:1a:9c:47:b1:cc:c4:a2:b1:40:85:56:
                    33:50:6a:ee:7e:b9:94:2d:c1:6c:be:0c:61:18:1d:
                    79:95:87:55:94:d8:a0:f4:17:d4:3d:6f:c3:19:28:
                    72:1d:14:fc:be:ef:9e:54:16:cf:54:5f:71:d3:6c:
                    da:69:a5:de:af:23:22:09:88:e4:50:ed:99:43:c4:
                    f4:38:f7:53:7b:c8:03:a8:de:79:ca:8e:d8:d1:e0:
                    c5:3f:a1:23:25:fb:ce:45:4c:b3:88:46:8f:97:d6:
                    21:7d:1e:8e:56:43:62:83:d4:42:2d:ff:64:70:0c:
                    16:33:c3:7b:3a:91:24:68:ba:94:ad:0b:7e:ed:8e:
                    81:b1:80:b4:9f:bd:4e:de:53:8a:ba:ec:2e:00:6b:
                    a1:69:5b:4d:d4:01:71:ac:e8:74:48:50:fe:19:af:
                    0f:7e:2e:79:0c:0b:01:af:9e:6d:51:ef:cd:7a:50:
                    02:54:33:65:80:19:55:38:8d:48:db:aa:01:15:86:
                    f1:bd:03:b4:b0:db:b8:02:3b:72:2f:4d:60:ec:fb:
                    91:10:dd:5c:c8:88:43:d0:92:9d:1a:95:d4:07:ba:
                    bc:90:7b:52:df:43:d0:2b:91:32:3c:0e:18:4a:a5:
                    98:88:36:68:43:30:f5:2b:51:a9:1d:d0:9c:e2:c7:
                    e7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6C:6B:05:E1:F5:15:57:02:FB:2C:B1:46:30:DC:55:1E:6B:9B:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6e2815c0-6704-36dc-a81f-aa7326a435e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d7:b8:14:28:9d:0a:d0:7c:a4:6a:e2:2d:cc:b5:f9:a9:af:
         a6:55:e8:41:8a:d6:b0:3a:ba:2b:c6:d0:7f:80:56:cf:f4:dd:
         5a:3c:2f:0d:90:2f:eb:42:f8:3e:2f:dc:27:ca:a8:c8:18:f9:
         3a:27:cb:be:41:f9:ec:5d:d5:e1:af:5c:e8:17:9d:e5:cb:5e:
         7d:39:47:01:7a:db:ce:4b:ef:67:18:38:68:4c:9b:00:ab:6b:
         5e:1a:51:8f:72:9a:ff:1f:c2:73:cd:81:72:11:53:ba:20:b5:
         bd:fd:5b:ef:2c:32:59:90:b9:69:7e:e6:c7:78:c3:56:96:f0:
         79:30:fc:9c:bf:52:c0:d6:52:56:99:f3:94:18:0d:af:7d:5d:
         a9:42:4e:9c:69:9c:99:ac:dd:c7:db:09:72:11:31:8c:8a:15:
         dd:1b:8c:30:8d:02:dc:cd:7b:99:72:31:d2:94:e4:a9:58:99:
         7c:19:f8:3f:c5:6a:2f:53:9a:cc:9b:06:c2:a1:c1:0b:ef:a3:
         f4:be:c4:19:a5:8c:b6:ce:a8:2b:cf:c9:95:6b:1a:ad:d8:bf:
         d5:52:db:77:f4:d1:2b:25:aa:4f:21:d2:fe:22:05:12:da:9d:
         bf:a7:71:45:93:bd:02:3e:6e:1b:03:8e:98:7c:c5:53:c3:88:
         7e:8b:29:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:16:16 2025 by rpki-client