Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840e20ae-3432-32f1-88f2-6eb42b79b8b1.roa
File:                     840e20ae-3432-32f1-88f2-6eb42b79b8b1.roa (raw, json)
Hash identifier:          6AEJ2wisb6RHAWqseCVw8XIkfqktZHDVLQ6iqZqdE1Y=
Subject key identifier:   32:BF:9B:3F:95:25:24:E0:8A:0E:EF:08:87:23:B9:CE:07:3D:F6:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3DB6FBB1696982D29AE21BA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840e20ae-3432-32f1-88f2-6eb42b79b8b1.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     27544
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:fb:b1:69:69:82:d2:9a:e2:1b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=6c7b3237-d3f2-4dcc-9fae-6ace49c59882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3d:29:23:f6:45:2c:a4:80:97:9b:5b:50:8c:
                    65:12:5b:7c:f4:d4:29:98:fe:d0:b9:33:97:47:fd:
                    14:b3:db:e6:3e:de:4d:59:c1:08:ca:88:b8:c3:92:
                    82:aa:2e:01:07:49:ba:23:14:cd:9e:44:08:d0:3d:
                    4a:e8:81:94:29:89:3a:a3:5f:fb:dd:17:66:6a:96:
                    af:2d:6b:e2:a8:00:43:0b:ed:b6:e5:fa:fc:e6:90:
                    91:f9:fc:de:52:5e:1a:f2:fa:d0:45:fd:d4:78:95:
                    18:4f:11:64:bf:2e:45:c6:6a:16:56:61:d6:96:70:
                    b8:ea:d0:d3:f3:41:bb:b5:2c:29:4c:68:ae:53:d6:
                    d7:40:37:57:61:58:de:6f:7b:33:52:0f:f2:25:10:
                    b0:7a:ee:cc:5f:6e:54:2b:ec:d3:3c:63:2a:fb:13:
                    e9:5d:e8:cf:20:b8:dc:73:51:63:ba:75:03:4f:66:
                    4d:eb:15:4d:39:bd:46:17:1a:23:16:f9:45:55:0b:
                    32:e6:dc:fc:b7:6f:2c:5c:ad:f2:9f:06:c4:bd:f5:
                    07:91:91:97:9d:d4:4a:94:de:87:22:13:40:e3:b4:
                    a9:77:99:49:9c:67:27:94:34:d9:71:2c:f4:e4:4a:
                    84:a1:22:60:76:22:71:e6:a9:56:0d:33:29:a3:62:
                    53:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:BF:9B:3F:95:25:24:E0:8A:0E:EF:08:87:23:B9:CE:07:3D:F6:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/840e20ae-3432-32f1-88f2-6eb42b79b8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:c7:c1:02:fd:54:35:13:19:7d:92:8f:07:e3:c0:04:65:
         35:06:bf:27:fa:dc:4d:95:0b:df:f6:16:46:2c:c4:cc:83:f9:
         f3:7b:82:9c:c1:c8:b1:6f:c2:51:26:92:64:41:a2:b4:f8:24:
         03:c1:89:64:3a:fe:b2:56:14:fc:fe:03:ce:ee:bd:7d:4d:78:
         58:db:7e:af:cf:75:18:b1:5e:33:7d:36:1c:1c:c3:72:20:fc:
         e4:81:00:4b:63:be:e9:37:e9:b5:8b:ce:a1:4b:24:c9:e2:09:
         76:8e:0b:56:f3:df:bb:cb:94:46:45:19:ca:31:e0:9b:2b:84:
         3f:ab:f0:73:42:fa:7e:e3:17:cb:f7:44:d8:23:d6:2f:ef:85:
         98:60:5f:2f:e6:92:c5:72:c7:2a:7b:28:88:c9:38:a5:98:49:
         f7:7b:92:ef:c0:5b:67:3f:77:31:ba:51:cf:c1:0b:01:70:5b:
         d9:68:f6:89:07:8d:28:dd:8b:e8:a1:93:90:60:08:54:87:55:
         ca:c7:c1:e8:7e:22:11:66:91:74:73:52:49:2b:c7:a2:ab:8b:
         75:c9:be:30:21:38:a7:fb:64:1a:ae:0a:70:eb:0a:97:f0:01:
         ab:85:2b:9b:a8:ba:80:b3:97:35:23:99:73:8f:81:bb:cd:a3:
         74:e7:d8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:13:23 2025 by rpki-client