Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88cf2a4e-4125-3725-85f4-cba598b5ef93.roa
File:                     88cf2a4e-4125-3725-85f4-cba598b5ef93.roa (raw, json)
Hash identifier:          HDiJMnlzMh0MGKz0d52c6Mg8yWkqEnwGKfY6ZzvQkMM=
Subject key identifier:   80:42:77:BD:64:C7:33:81:16:B4:AA:96:7C:9B:DB:94:5D:D1:01:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67F0F21E100A012173D60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88cf2a4e-4125-3725-85f4-cba598b5ef93.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396583
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:7f:0f:21:e1:00:a0:12:17:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=9df0c881-6f47-4a17-a4fb-1f9748dca92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b2:48:0c:fb:7d:5c:34:2d:76:55:9c:86:08:
                    d8:d2:bf:43:ec:82:91:94:9a:8b:4f:e7:c7:aa:c2:
                    b1:04:48:30:5d:a8:b5:c1:07:b0:07:2e:1c:23:27:
                    dd:af:c3:29:8c:14:24:88:ab:cd:b6:17:b0:f1:88:
                    cc:7a:2a:db:80:39:3a:a9:66:2b:9f:eb:04:24:ad:
                    ad:b0:f5:59:03:cc:98:61:3e:30:28:59:fd:8f:c6:
                    e1:13:50:a8:f7:3d:be:46:43:c7:c0:72:a1:0a:44:
                    f1:c4:8d:9d:bc:19:2e:2b:b1:78:fb:34:84:fe:22:
                    0c:b7:6f:02:d3:5e:df:ad:d6:26:ac:38:c9:64:1b:
                    ed:5e:a3:3b:d3:43:ec:d5:67:a0:cc:8e:17:91:ff:
                    b1:ce:ac:90:0b:07:b1:1a:83:f6:4e:14:86:31:fc:
                    25:31:05:21:02:d2:da:ee:58:e3:32:00:05:17:27:
                    1e:04:c5:0b:5b:3c:4e:e8:a1:74:da:3b:0a:0a:8b:
                    a6:8c:a3:37:95:a7:3d:f1:e3:0d:43:b3:ba:a4:83:
                    e4:9f:6f:a0:30:22:51:ae:1e:63:73:15:a1:8d:2b:
                    41:70:d3:2d:91:ec:a5:f4:29:d3:13:05:1b:f6:d3:
                    51:a3:1f:06:53:79:1c:c2:7a:dd:97:9d:4d:a7:fc:
                    2e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:42:77:BD:64:C7:33:81:16:B4:AA:96:7C:9B:DB:94:5D:D1:01:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/88cf2a4e-4125-3725-85f4-cba598b5ef93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:33:27:fc:9f:df:59:2b:d3:d6:93:fa:70:db:7f:fe:e3:51:
         ac:1a:d8:08:f9:68:81:1f:ea:27:95:98:fe:c5:93:65:07:52:
         16:01:92:18:17:b5:11:d6:0b:0b:20:f8:80:5b:6a:e2:20:6f:
         69:77:46:9c:c4:87:d7:b4:35:31:61:8e:d7:dd:52:fe:c6:28:
         ac:ee:31:07:64:b3:22:97:89:ea:c1:20:2e:c4:7f:77:54:2c:
         0c:41:d3:67:8c:71:49:30:4f:49:de:06:8b:3e:22:94:cc:7a:
         a5:b9:c0:e8:f4:b7:4d:24:e4:04:11:29:fe:7b:1c:d8:3a:e7:
         b5:5e:74:c0:fd:a0:b8:34:b9:a4:1d:fa:fd:08:f0:ca:12:eb:
         2a:75:dc:4c:dd:fc:03:33:43:fe:01:5a:61:15:fc:16:60:bf:
         d8:a6:e9:5f:51:3a:f0:25:8f:70:93:d8:ca:62:b8:ed:81:0f:
         a8:6c:e7:aa:85:ef:d6:f4:8b:36:ab:fd:f9:0d:03:af:33:49:
         1c:5d:dc:fd:4a:f2:45:72:e5:6d:85:ba:8d:74:6e:e5:a0:48:
         3c:a9:41:8a:56:1f:8c:d3:06:8e:2d:f2:b8:4e:fe:ae:86:23:
         45:64:6c:74:61:fa:d5:3f:87:52:52:2b:a4:6b:b1:c4:89:f7:
         72:2c:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:23 2025 by rpki-client