Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa
File:                     9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa (raw, json)
Hash identifier:          jBpGeXbDdLVH0Ef1J+LvjCvBxdWPH4B1pkI+ZFTIn9I=
Subject key identifier:   EE:71:87:37:00:D8:49:4E:5B:60:E7:33:BB:46:EC:F8:99:3F:24:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD62E6BE8CEB9389CB1C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396604
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d6:2e:6b:e8:ce:b9:38:9c:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=db457ba5-3e08-4690-9738-69fffd94ba4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:83:35:0d:99:e4:77:0b:c5:57:3c:63:af:21:
                    27:a9:7f:2f:95:9f:44:03:c1:d1:0a:19:15:76:ce:
                    b9:5f:9d:13:1c:df:b2:0b:74:27:82:43:dc:ed:1c:
                    d1:c3:6d:7d:ed:2b:00:3d:ba:a4:95:4e:9b:a2:ca:
                    04:5e:4e:99:56:ec:11:ad:41:5a:1e:86:29:91:92:
                    13:e8:3a:df:e1:b7:e2:26:da:5d:87:e1:33:29:31:
                    40:91:68:10:86:28:98:bb:09:04:07:c4:4b:39:43:
                    2a:16:bf:6e:91:da:03:73:df:06:2c:3c:56:df:fa:
                    7f:54:03:9f:06:2c:2e:3c:3c:ae:5b:18:0a:79:b0:
                    1a:3f:e1:c9:0b:28:ce:fa:ec:9c:a3:a4:b3:72:5d:
                    6b:49:ea:66:6c:43:c9:3d:3f:1b:1b:9e:a4:bf:53:
                    de:ec:77:e3:ed:5a:7a:63:cf:6e:e8:70:0c:ea:e4:
                    bd:f2:a1:c0:a9:5d:b6:81:14:66:e1:56:02:2f:f7:
                    1f:5e:08:3f:76:02:77:d2:7b:91:1f:09:2d:38:1d:
                    b3:d7:cf:1b:fd:2b:a0:c5:89:91:d7:20:7a:36:da:
                    da:75:f8:f4:77:bf:37:9c:f0:c8:8e:25:54:e7:47:
                    6b:ea:aa:c7:83:49:0b:58:45:cf:f6:be:4b:49:a6:
                    d6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:71:87:37:00:D8:49:4E:5B:60:E7:33:BB:46:EC:F8:99:3F:24:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9174cb94-80d2-32aa-901c-0e7e1c126b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:25:fd:e0:d5:98:11:b7:7f:f5:17:bb:8a:e0:e2:7d:39:2e:
         cd:0d:36:7e:ff:81:9e:d0:1e:9e:7c:c9:92:ac:4d:ec:ad:3d:
         25:a2:c9:11:fa:ce:71:54:fa:de:10:61:02:88:a7:b7:c2:3c:
         d4:ea:01:07:8d:7b:77:ea:c4:1b:69:8f:90:43:d2:b4:f0:4f:
         f6:6a:e6:30:95:b7:8b:75:45:57:88:1d:43:25:30:a0:ea:4a:
         37:29:93:f6:de:92:c5:64:f8:79:e5:c3:f5:99:4b:6c:6c:ec:
         b5:d7:7d:ad:a9:07:8f:6f:ec:7f:e2:a7:3a:02:d2:b3:8f:fb:
         da:aa:f1:0b:72:86:b8:f2:4a:56:27:14:51:f9:19:e6:ff:75:
         7c:83:f8:b6:ce:28:08:b4:0f:cb:02:61:4d:e9:5b:e5:72:e9:
         61:79:ef:3f:11:31:67:c4:c8:98:f9:de:62:8c:03:a5:48:72:
         4e:74:bf:b5:6c:59:9a:1a:83:b3:c2:d6:df:0e:c4:bd:04:36:
         49:7d:02:2a:08:ed:93:c7:55:5a:f7:87:4d:47:ba:d3:fd:f6:
         aa:e4:5e:8b:bd:be:9b:0b:d8:20:b8:68:73:13:fe:1c:1f:11:
         bc:f5:35:b6:38:d8:bf:a8:ef:b9:5c:4b:fd:58:ae:ad:a0:88:
         05:12:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:56 2025 by rpki-client