Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8790ea3c-9ab9-308e-9354-f76a73e54f43.roa
File:                     8790ea3c-9ab9-308e-9354-f76a73e54f43.roa (raw, json)
Hash identifier:          h1V68CZQ1KctO19G392JondkEAzfhSf0/UmIld2F8aw=
Subject key identifier:   40:0A:67:8E:38:F6:6D:64:1D:91:BF:BE:29:14:DF:94:B4:23:7E:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AD7D145A7F43DF276D0D82D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8790ea3c-9ab9-308e-9354-f76a73e54f43.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     396544
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:45:a7:f4:3d:f2:76:d0:d8:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=93b34a87-88eb-4aa4-9c2f-7ca9e697c071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4b:c6:de:20:e3:b8:e4:4b:83:2f:f2:cc:4b:
                    bb:0f:26:46:30:d8:5d:2b:ad:cf:93:e8:9c:37:bf:
                    c4:ee:a3:34:c8:8d:b6:6c:1d:b0:43:32:c5:3f:6f:
                    b5:64:1f:a7:97:7c:6f:d2:6c:86:4e:71:22:1a:4f:
                    12:26:f9:30:61:91:2f:6d:e3:ad:01:4d:e9:df:cb:
                    f2:fa:14:44:2c:2b:52:ea:fd:07:6e:66:43:e1:65:
                    8f:e3:00:7b:fc:c7:a4:66:83:6f:c5:3d:76:71:1e:
                    fe:09:d2:00:4d:95:27:35:3a:ab:be:98:5d:40:b6:
                    89:5a:4d:c3:88:97:90:14:22:3d:53:70:70:e3:51:
                    de:64:88:b6:a7:57:ee:c7:d0:7f:d3:62:86:58:0c:
                    b5:5d:c4:1e:a2:64:9d:ec:30:c4:a8:b4:8b:10:6b:
                    b2:fc:ec:25:0e:c8:98:d4:56:63:35:b2:4d:a4:50:
                    0a:e1:5b:4e:31:4b:9d:56:0b:7b:b4:26:5b:cd:c2:
                    30:df:ff:f7:cd:33:81:da:ab:6d:19:b3:0d:52:2a:
                    79:63:54:12:25:8d:b8:d5:d2:e8:70:20:00:d3:78:
                    bf:fb:e1:54:60:2a:90:96:41:8a:8b:04:f1:4b:6b:
                    08:47:6c:22:fd:b0:64:ee:ef:c9:a1:28:b7:f7:dd:
                    03:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0A:67:8E:38:F6:6D:64:1D:91:BF:BE:29:14:DF:94:B4:23:7E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8790ea3c-9ab9-308e-9354-f76a73e54f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:57:32:ed:49:56:97:11:9e:c2:7a:e5:4f:c1:1a:ce:9b:ec:
         33:b5:0c:cf:b6:70:0f:a0:ba:b1:4c:9b:bd:47:c2:24:3c:7e:
         ab:72:e8:16:02:3b:2e:06:a4:b1:3f:b1:12:ed:4c:2f:99:3a:
         93:da:7f:37:09:e1:0f:a8:44:39:3e:6d:24:cc:e7:48:7f:67:
         b1:60:b8:86:7e:8c:6c:8e:09:40:33:d1:b1:a2:31:58:94:ca:
         25:0d:15:91:c4:98:09:02:ce:e7:65:1e:44:30:0a:8f:49:ef:
         68:02:44:11:dc:89:29:ab:23:33:3a:e1:af:dd:b3:ef:79:c5:
         39:99:74:ce:82:0e:62:87:70:8a:9b:de:9b:25:51:0d:33:15:
         1f:97:42:07:7d:20:0a:82:fa:f5:40:96:f1:ac:59:91:70:da:
         2f:69:f8:75:27:c9:67:19:e0:0b:27:fa:68:43:c0:7c:a9:d4:
         55:de:fa:5d:7b:95:af:38:6c:b3:a6:c7:10:92:a8:ef:e9:85:
         14:83:2d:65:9d:a3:7c:fb:3d:27:8b:d6:96:cb:e2:08:4d:2a:
         82:c3:ca:1a:78:e5:d1:24:45:22:b8:45:05:b1:26:e0:6f:e0:
         fc:25:44:b2:35:3c:20:81:fc:99:61:0e:ab:df:69:1c:bb:bd:
         52:2a:51:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:36 2025 by rpki-client