Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ebd941e-da92-3016-a10e-fccb24dc3317.roa
File:                     7ebd941e-da92-3016-a10e-fccb24dc3317.roa (raw, json)
Hash identifier:          xy83eVGhRv9kPxmKVR8t75lTd0o0mbkdqib2Q0SG4Qc=
Subject key identifier:   B3:68:40:39:43:01:A8:67:8D:4E:4D:0E:26:D9:39:59:D3:FC:4D:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F67A4936182C118DD31E20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ebd941e-da92-3016-a10e-fccb24dc3317.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     397196
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:7a:49:36:18:2c:11:8d:d3:1e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=8f0c31e7-4250-4592-9f7c-8a282e9adc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:08:0e:28:80:c1:5c:72:10:b7:21:44:02:08:
                    9d:08:dd:5e:80:e4:fb:df:1e:aa:ba:d7:34:6d:97:
                    ef:34:b2:db:b3:65:4d:29:8e:33:bc:90:81:2c:b2:
                    68:c2:69:b1:36:ae:11:94:f3:b3:c2:b6:a1:e5:d5:
                    05:3e:bd:b6:67:41:38:09:f9:d2:f7:de:ec:35:45:
                    a4:af:39:b1:c6:86:09:f2:bc:2b:26:3b:b7:8e:5a:
                    d7:9f:18:ea:d9:6f:ef:48:1f:75:4f:17:c0:ca:ca:
                    96:06:61:a6:fe:91:57:6a:5e:b9:fa:28:90:fe:48:
                    ed:6a:eb:65:c6:8c:e0:14:24:3d:f2:bf:61:f8:97:
                    b6:39:0a:18:31:d6:f5:ad:bc:e7:04:03:3c:11:fd:
                    7e:68:1a:a2:32:2a:8d:a5:b4:4b:e9:96:34:da:b6:
                    44:39:e9:76:22:7f:93:b6:a1:e0:36:0b:8a:4e:7a:
                    ec:ed:c0:22:0c:60:e2:92:7d:33:44:d5:05:65:18:
                    1e:79:a2:c4:ba:98:be:6a:99:e7:95:b9:de:c7:a8:
                    de:3b:d2:ce:66:e9:0c:1b:dc:de:5f:76:25:ea:43:
                    dd:69:36:5c:4d:30:9f:4f:c9:38:3a:f7:d7:bf:dc:
                    37:1c:6a:a5:96:c8:9b:bf:d4:aa:15:8f:78:00:bb:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:68:40:39:43:01:A8:67:8D:4E:4D:0E:26:D9:39:59:D3:FC:4D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7ebd941e-da92-3016-a10e-fccb24dc3317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:e4:1f:1b:c0:9a:f3:ab:cf:b2:5b:c8:21:f3:10:b3:d0:91:
         01:9e:c9:9c:22:b0:d6:3b:c4:3f:fa:a7:42:0f:ed:c6:db:f4:
         c1:bb:ad:5e:ae:7c:6b:a4:28:74:a2:62:dd:1d:3d:d6:3f:a3:
         1e:5d:51:4a:23:5f:a6:9a:27:ca:49:3b:5d:ab:b5:33:1f:93:
         4b:59:fa:96:51:d4:43:d2:0e:da:5b:f1:74:ca:e6:ca:1d:be:
         77:11:6e:ef:16:96:37:aa:c4:2d:59:d2:11:54:12:89:22:9d:
         66:5a:da:67:97:4f:d5:e2:56:a7:e8:52:a7:33:5a:9c:62:b4:
         92:98:62:fd:5e:bf:a5:f9:14:c2:d1:ac:6a:9f:35:ab:ab:70:
         2f:56:df:d7:b8:a1:cc:82:fb:63:9c:13:8c:68:7c:74:5e:1b:
         a9:72:9a:50:bc:72:69:61:d3:5e:f7:87:d4:dc:70:c7:6c:66:
         b9:7a:00:40:4a:92:04:5f:ed:0c:8f:f9:48:92:7c:c0:53:ce:
         df:44:d8:a3:20:44:7b:7c:ab:fa:d8:d1:67:d0:63:ac:0b:ee:
         eb:6e:a3:73:12:31:c6:8e:89:8b:f5:58:50:13:df:0e:4e:9d:
         fa:c9:df:aa:6a:92:86:78:fe:12:8d:e2:e4:e9:53:0c:68:a1:
         2b:5f:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:51 2025 by rpki-client