Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71d96a1f-69eb-3906-93f5-68f54e2949ba.roa
File:                     71d96a1f-69eb-3906-93f5-68f54e2949ba.roa (raw, json)
Hash identifier:          Mv9SE3HML4rtSHGypjmgoUNMrNCsTWBiMgI5EFFUk7o=
Subject key identifier:   A6:B0:A3:14:24:1A:E6:BC:3E:A5:C6:23:F6:EB:D5:73:58:71:9B:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F674240CC79A361A2107C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71d96a1f-69eb-3906-93f5-68f54e2949ba.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     396603
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:74:24:0c:c7:9a:36:1a:21:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=f81b905d-f842-4a40-8fa7-6554e278ced5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8f:7c:0c:68:cf:3d:29:11:1c:aa:6b:20:68:
                    cc:2d:79:a6:dc:d4:3c:69:6a:b1:89:91:2d:1d:59:
                    87:8f:4a:75:45:05:03:67:54:8a:da:ad:37:f5:d8:
                    65:42:d1:90:4d:d0:f5:77:75:a5:46:66:8c:a0:28:
                    91:9b:8d:f6:4c:0e:2e:37:1a:9b:48:3c:f8:95:d3:
                    b3:9c:58:fa:a7:5c:e1:97:ab:b9:b2:60:51:93:d4:
                    50:41:ee:9d:bf:63:c9:72:63:78:67:b1:b5:11:12:
                    83:27:d4:84:35:4b:fe:09:ca:42:e1:8a:5e:46:8a:
                    1e:3a:f1:65:d4:94:63:57:fb:63:c9:fe:14:ff:6e:
                    ac:68:2f:d7:16:06:62:36:01:61:d2:c9:33:2b:ef:
                    cf:72:27:36:c4:b0:0d:75:47:f9:58:77:5e:e5:cc:
                    97:b6:48:44:12:32:63:32:fd:12:31:64:f0:8c:a3:
                    74:76:0c:8f:1f:ce:6e:6d:c8:d3:67:56:1b:90:0a:
                    a1:b6:2a:14:87:1a:d9:cc:c7:cf:af:79:c3:80:fb:
                    b4:63:d4:8b:f1:dc:a5:cc:d5:ff:f8:d3:6a:fd:60:
                    e1:08:a2:ff:b9:86:96:2f:d8:2f:bf:9d:86:61:50:
                    8b:9a:28:fa:2c:57:3b:04:f4:7d:2c:1a:e4:75:32:
                    fb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B0:A3:14:24:1A:E6:BC:3E:A5:C6:23:F6:EB:D5:73:58:71:9B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71d96a1f-69eb-3906-93f5-68f54e2949ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d5:6e:7c:50:3d:3b:49:d6:9e:48:97:6e:d8:28:2d:a9:c6:
         df:d0:2a:44:17:22:22:b1:bf:4f:b2:17:fd:f9:fc:e2:9b:dc:
         df:94:31:67:a7:80:74:0a:c1:4b:a4:3a:17:49:4a:53:62:e5:
         43:76:5b:79:bf:36:7b:9c:d3:fd:62:20:8a:45:5d:83:10:39:
         86:50:da:6b:4d:3f:ce:5e:e6:43:d4:ce:4b:de:9c:b7:f1:a5:
         55:05:ea:2a:40:a2:be:05:8c:e7:bc:cc:84:44:e5:97:42:3e:
         84:6f:c2:ba:39:29:7a:a7:cf:4e:2e:fa:c7:2d:02:2d:10:87:
         7b:c5:c2:7c:a0:0d:5c:bb:f6:12:b3:24:33:23:57:5e:e9:45:
         85:51:ef:f6:f6:d9:dc:7e:16:f4:10:85:02:13:e8:dd:80:b1:
         fa:bb:83:eb:e8:5a:0d:ad:c8:90:4c:eb:8d:24:60:6e:cd:a5:
         e6:e9:bb:be:b1:4b:19:0a:94:db:ce:82:e4:76:57:2d:28:46:
         ee:57:8b:15:35:08:92:c2:4e:3a:b8:75:05:f0:80:2c:ad:84:
         2a:f4:49:54:fe:a9:57:24:ba:12:3c:22:1e:26:8c:a0:32:7c:
         bb:b7:9a:0d:01:93:31:87:eb:d1:e7:57:c0:65:43:90:56:65:
         73:33:4d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:01 2025 by rpki-client