Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/814fea68-7297-3bb4-810f-f52c14593ce4.roa
File:                     814fea68-7297-3bb4-810f-f52c14593ce4.roa (raw, json)
Hash identifier:          J/8Nrl/DMbdCHC2ArYH+0aIOaJ4KoxuTtZbOBZ8mtrI=
Subject key identifier:   E9:9D:76:82:4E:5D:D1:D5:FC:50:10:0E:2A:0B:2F:14:EC:AF:9C:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B8382129D2B03DA8A4DFA6940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/814fea68-7297-3bb4-810f-f52c14593ce4.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     32651
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:12:9d:2b:03:da:8a:4d:fa:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=1779aac4-6178-4c59-ac4c-81f9bddbcda9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:94:35:f5:fc:a2:be:80:58:27:bb:64:db:
                    d9:c7:d3:7f:1b:4e:f8:2c:86:c1:ba:8b:14:a6:16:
                    fa:16:43:b5:17:07:d2:92:d6:40:3f:85:c9:fb:c8:
                    5a:0f:4c:2f:1c:6b:ad:af:f2:70:48:6a:fa:a4:cf:
                    f4:8a:09:ed:e1:7c:0b:8a:82:c1:b1:f7:38:75:e6:
                    45:8d:f6:44:60:ef:66:a9:5a:27:5e:e4:34:b3:89:
                    3c:1f:a0:46:7a:70:52:e9:03:d4:af:30:3f:fc:bd:
                    d5:2d:eb:54:d4:f5:41:26:77:00:73:39:c3:ee:69:
                    de:a1:fa:83:e7:f1:b9:f4:d8:8d:ce:e7:10:0e:2b:
                    90:73:6c:9e:34:68:b6:8e:ad:d0:23:a7:36:35:16:
                    f2:50:2c:b0:64:c4:0c:c5:ce:5e:5f:ab:89:0b:cc:
                    3a:69:d7:d8:8d:01:a1:bb:00:ff:6b:2d:57:82:66:
                    9a:f3:af:96:dc:90:21:78:db:08:da:ce:e3:85:9b:
                    5f:ce:17:61:cd:a2:48:a4:f3:1d:9b:b2:77:02:d9:
                    54:eb:bc:d5:93:f3:c5:12:81:bb:68:ab:40:eb:04:
                    58:c9:db:90:a5:98:08:d6:37:90:a2:09:0e:40:52:
                    10:da:0c:82:a2:26:14:da:9f:a5:e0:5d:12:e8:09:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9D:76:82:4E:5D:D1:D5:FC:50:10:0E:2A:0B:2F:14:EC:AF:9C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/814fea68-7297-3bb4-810f-f52c14593ce4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:ab:4e:3f:78:63:7b:eb:f0:da:05:9b:75:a2:16:bc:6b:b0:
         e1:81:23:43:29:ef:39:54:6c:78:43:cb:ff:63:79:34:88:64:
         2b:cd:77:83:ac:4d:29:5f:d3:34:7b:fe:2e:ca:dd:e3:5e:a2:
         5a:11:0d:8a:d9:79:85:81:bb:48:a9:f6:0e:04:cc:95:60:a4:
         64:04:de:4e:f8:1f:35:bb:62:bb:fa:a9:b1:9b:69:9a:32:74:
         8f:ae:7a:39:55:23:a2:e3:84:27:4f:ec:02:e6:b7:6a:c7:3e:
         cb:f1:7f:e9:79:13:0f:cd:8f:63:45:1e:17:85:09:c2:55:4b:
         8b:99:19:05:16:74:0d:61:ef:6d:99:d6:b2:8f:b2:38:35:06:
         cf:88:34:8f:f7:ce:7a:2a:ca:ad:f2:23:c1:69:ab:44:76:b8:
         5b:80:6d:62:de:7e:ec:0f:84:cc:80:4c:6e:d2:4b:7b:0c:b1:
         ad:1b:3d:35:70:e2:8b:19:57:6a:82:dc:31:89:45:b1:71:2b:
         f4:d5:22:80:2f:f0:b9:2e:a7:61:77:14:44:4f:40:23:e3:0f:
         67:a3:cb:65:5f:87:cb:c2:3b:c5:d3:04:98:06:f6:0f:ef:a1:
         c3:1d:dc:3e:46:32:66:92:4c:8b:15:e1:8d:54:1e:91:88:17:
         f6:9a:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:05:57 2025 by rpki-client