Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fed5127-47a7-30a4-a504-3a4edf3eb34f.roa
File:                     6fed5127-47a7-30a4-a504-3a4edf3eb34f.roa (raw, json)
Hash identifier:          AQwinNd6VE3e+coO8VgDH1LwiIXiyhRNea4Y5xilGIc=
Subject key identifier:   63:10:F0:30:83:2F:A1:68:18:68:A9:46:67:63:FA:76:38:A3:B9:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D7D1858FB7CCAEB679D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fed5127-47a7-30a4-a504-3a4edf3eb34f.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     32651
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d7:d1:85:8f:b7:cc:ae:b6:79:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=9d2f88c3-f4db-4e89-a74a-547f8f433451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e0:26:fb:02:92:81:9a:21:47:da:e3:8b:7a:
                    b9:bc:42:47:cc:e1:19:d3:46:7e:fa:1e:76:8e:04:
                    f9:48:4f:ed:88:07:02:ba:50:13:95:3b:02:75:2d:
                    16:a6:18:4e:2a:57:0c:d2:8c:c1:e1:fd:c2:a7:29:
                    bf:38:61:27:ea:33:ec:86:ea:00:48:df:d3:ab:fc:
                    56:38:8b:34:c0:40:e9:99:39:3d:c2:dd:0a:bb:ab:
                    d8:30:9f:43:95:c8:1e:df:39:f9:f3:1f:f5:9e:ec:
                    b2:5e:7d:a2:50:cf:81:33:09:26:d6:35:8d:5d:8e:
                    3a:d3:09:8f:f2:9a:64:a3:06:d2:21:73:f1:2d:4e:
                    39:62:5c:70:ac:bd:b5:71:37:d4:44:f7:b9:31:3c:
                    36:d0:2e:f6:d7:9c:c8:f5:92:32:8d:31:18:b5:9c:
                    e4:e9:eb:ad:f4:1b:ee:cf:7b:bc:ff:14:b9:e3:49:
                    d2:77:17:7d:78:b4:84:c8:eb:a8:6e:48:5a:c0:c7:
                    da:3f:7f:0c:2f:8a:90:64:11:24:8d:3f:56:2a:40:
                    80:99:ad:1a:55:1d:34:e2:09:cf:9e:fb:f5:9d:13:
                    d0:86:bf:c0:74:06:cb:b8:ed:d1:28:c4:e3:cf:ce:
                    c1:60:07:82:13:6f:56:ac:cb:81:2a:87:eb:9b:de:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:10:F0:30:83:2F:A1:68:18:68:A9:46:67:63:FA:76:38:A3:B9:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fed5127-47a7-30a4-a504-3a4edf3eb34f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:77:5a:c0:b6:3e:55:5c:89:89:9f:e8:9f:91:2c:22:fc:75:
         e3:bd:8e:e4:e6:87:a6:bb:7b:c0:e0:ad:17:be:53:50:b9:18:
         4e:98:06:ce:f4:8d:cc:0d:bc:8d:3f:70:e5:6a:db:60:6f:ac:
         70:22:d7:25:d7:9c:22:42:a5:1e:5b:6b:de:db:a6:18:0b:14:
         6f:9f:3d:96:cd:69:f2:dd:1b:4e:8d:7c:82:7b:a8:72:77:75:
         77:f2:3f:ad:14:61:d7:f7:dc:ef:b7:3d:bf:b4:32:f1:8f:33:
         e0:ae:0b:2f:b0:1c:b0:05:06:64:da:5c:d2:c8:90:ce:15:71:
         9e:28:c4:9e:57:cc:d1:3c:86:e8:07:85:1e:c0:b7:f1:f6:41:
         2a:b1:93:aa:42:c2:67:dc:00:da:d5:bf:59:14:79:99:a9:20:
         2d:7a:be:95:23:84:81:de:a0:8d:09:5b:cc:92:ff:e8:65:08:
         81:48:be:a6:f4:01:44:e5:4a:20:a1:da:6d:50:2b:47:bd:b3:
         97:14:c1:85:65:19:d4:a7:c9:6e:06:c0:17:24:2f:ba:74:e5:
         9f:c8:c8:87:25:8b:2c:52:56:8f:6d:82:38:f7:5c:31:dc:eb:
         0a:3b:c9:2b:c7:ac:46:9d:15:a9:31:1f:e6:f7:a0:de:8f:09:
         b7:8a:6e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:19:52 2025 by rpki-client