Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/799546f7-8f17-3ea0-b370-24e7f5f54e5d.roa
File:                     799546f7-8f17-3ea0-b370-24e7f5f54e5d.roa (raw, json)
Hash identifier:          2YsFhhigpAVeoj/DFYIOsdctTd7LRb7Pmo6oott2vYU=
Subject key identifier:   65:CB:77:E5:34:B5:D3:0A:86:23:65:8E:53:48:A3:F1:A2:7C:DD:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B66320ED3F1476F044EDF5A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/799546f7-8f17-3ea0-b370-24e7f5f54e5d.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     396582
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:0e:d3:f1:47:6f:04:4e:df:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=cba4fca2-e48a-4b69-981e-319dda2b319c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d9:b4:22:c9:8a:4a:f0:55:48:70:0a:10:f0:
                    9b:5e:bf:2b:b5:36:64:73:f6:60:ac:2c:8a:59:62:
                    1b:09:34:01:dc:29:a9:57:43:17:1b:be:96:78:46:
                    52:c2:89:25:4e:64:5f:3b:96:82:e6:e6:7b:b0:22:
                    d4:52:16:30:ac:59:d2:4b:6f:67:fd:5a:0b:7a:a7:
                    71:12:b4:45:02:a6:2d:f0:66:fd:5c:02:40:3b:24:
                    5c:0c:f2:4d:1d:ba:eb:ad:50:0d:48:46:e0:e3:99:
                    d1:09:db:1f:30:8d:c8:22:12:49:af:66:f5:6a:ef:
                    79:86:61:1c:34:13:8c:01:8a:bf:cb:19:0c:9c:5f:
                    41:62:e2:45:eb:7f:3a:06:6b:f4:7d:9c:d0:b8:88:
                    33:62:b6:a0:02:32:3a:51:68:01:1b:0f:ad:69:a3:
                    cd:45:d0:de:2d:ab:2b:a6:6c:58:fe:1a:e0:f3:a9:
                    39:24:11:e7:b4:8a:7e:cf:99:30:fd:b5:ce:67:4a:
                    e4:89:95:8a:ab:56:51:46:6b:1b:81:a1:f6:a7:31:
                    6d:ff:9b:47:c2:76:04:e0:10:4c:cd:93:08:4d:59:
                    a1:8e:68:70:28:63:04:36:1d:da:51:08:9e:2b:f9:
                    75:3b:73:5b:93:2c:bb:0e:a7:18:3b:63:ea:87:a9:
                    d4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CB:77:E5:34:B5:D3:0A:86:23:65:8E:53:48:A3:F1:A2:7C:DD:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/799546f7-8f17-3ea0-b370-24e7f5f54e5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:92:93:e8:c0:91:c6:b3:b6:30:22:b7:de:0e:c8:1f:43:04:
         99:13:c3:12:40:e5:d4:6b:a8:73:58:4c:11:35:3d:01:14:f7:
         2b:01:d8:5b:f6:ff:78:98:45:c0:fb:3b:d8:71:3d:82:ea:1c:
         4b:7d:89:4b:6e:66:b0:bc:49:f0:d3:9e:d2:5c:bf:21:13:00:
         04:56:44:2c:32:bd:f9:59:50:68:84:95:08:a9:70:1d:0f:ef:
         e3:5d:7f:13:3c:91:56:77:7a:c2:7a:fe:75:d6:a0:f3:6b:e8:
         b1:50:58:28:84:83:c6:a3:6b:8a:92:93:66:3b:90:14:a7:73:
         cb:a9:ac:46:f4:d7:d6:38:5a:81:e4:76:51:73:5b:bc:d3:6e:
         32:a8:15:e5:ac:6e:5a:74:f2:41:2e:1e:94:94:61:91:c8:b9:
         93:fd:34:93:69:82:b6:8d:1f:55:2a:6e:03:d5:82:46:ff:93:
         18:16:e4:2b:68:16:36:2a:d1:52:68:97:38:25:8b:1a:88:17:
         07:9a:49:8d:1d:a5:e6:7c:12:66:d0:34:c7:bb:67:21:be:80:
         e7:e0:54:c9:f3:e4:22:b8:85:ac:9f:49:eb:ac:19:6b:eb:9a:
         3f:8c:dd:33:ae:4c:eb:4b:3d:de:e9:f3:5e:ab:5f:80:81:25:
         9f:da:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:25:50 2025 by rpki-client