Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9367b15e-b3de-31c1-a7e0-24d813b616fc.roa
File:                     9367b15e-b3de-31c1-a7e0-24d813b616fc.roa (raw, json)
Hash identifier:          xUwcwjARv/R/zNVcd/OFUQZu/TRtBwrkSmismGM4gZ8=
Subject key identifier:   03:79:E3:80:08:6E:3A:DC:BF:3B:53:3E:0A:15:E3:43:89:23:9E:BC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA667F4D43EF65FA6C95200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9367b15e-b3de-31c1-a7e0-24d813b616fc.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396582
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:67:f4:d4:3e:f6:5f:a6:c9:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=ea54b7e1-420f-41c3-9808-4d3c578d6b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:1d:31:7a:22:f4:cd:01:e2:81:67:0a:33:
                    e2:fb:dd:7e:3c:87:e2:dd:31:d6:6f:e9:ef:5e:53:
                    50:24:27:4b:df:46:81:19:91:75:f6:93:20:37:26:
                    a1:76:b6:2c:41:8a:a2:94:f6:83:b5:7c:17:60:6c:
                    93:9b:17:a1:84:12:07:76:61:c7:a2:74:c9:06:d3:
                    c4:3f:c2:90:3d:31:40:2d:b9:c2:a6:75:70:a1:5c:
                    b1:e2:ea:34:2a:d7:bf:e7:f2:0d:a4:cd:6f:f4:21:
                    be:60:55:0a:83:b0:26:38:e5:f4:ca:e9:1c:43:23:
                    05:72:63:08:45:9c:07:97:a8:96:32:0a:cc:a3:63:
                    1f:da:3a:ea:d6:a2:27:6b:6a:c5:26:6d:b5:a8:42:
                    3d:96:0d:82:d7:c3:93:c9:a3:7c:8e:4e:10:4a:f8:
                    36:54:4f:c5:d9:f1:77:df:81:50:33:43:5d:03:1b:
                    b9:27:87:07:f1:8e:bf:37:c4:e8:94:da:80:29:50:
                    5e:81:95:b2:f1:96:c1:a4:f2:0e:50:61:1b:d7:88:
                    2f:0d:08:4f:0d:be:87:24:1f:af:7a:03:d7:77:2c:
                    bb:6e:9e:81:eb:8f:8e:0a:d9:f4:97:ec:f6:52:e2:
                    cd:a5:26:11:3d:3d:02:6f:d0:03:88:0c:2f:7e:df:
                    58:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:79:E3:80:08:6E:3A:DC:BF:3B:53:3E:0A:15:E3:43:89:23:9E:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9367b15e-b3de-31c1-a7e0-24d813b616fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:8c:79:4e:b0:e4:68:51:71:4f:0b:b9:47:bd:4c:66:a8:00:
         60:47:1e:58:2a:09:c7:30:5d:03:10:61:f6:ee:64:31:8c:a5:
         bb:52:e9:7b:6a:a6:9e:0f:76:1f:fa:7d:0f:8c:6e:46:6a:80:
         a0:92:fe:b8:42:59:f4:9f:ef:43:0a:80:de:e5:6f:82:1a:1e:
         39:4c:67:f2:7c:cd:7d:ec:86:02:b7:9a:a6:8e:7e:56:be:3d:
         4b:06:c7:39:ed:62:5f:48:06:d5:e4:a8:56:8b:eb:7a:6d:ac:
         1c:54:85:94:86:c5:10:ba:1b:cc:00:f7:6b:38:1b:f7:61:b9:
         d8:50:a8:fe:fb:38:f9:d6:5e:8b:2b:ef:17:a3:35:aa:b8:e8:
         af:69:41:f9:76:d4:5b:52:bf:d9:ce:69:17:41:c9:f6:00:a2:
         c0:e3:c5:d6:f0:7c:38:5d:67:58:73:fc:fc:d6:3e:6a:29:27:
         fa:2a:e9:76:4c:d6:da:4b:9f:ad:82:a7:a7:f6:d6:a8:82:19:
         84:62:fb:86:8d:35:97:5b:54:9b:27:69:78:25:1e:7c:31:eb:
         51:a1:38:f6:83:e2:02:7a:96:43:0e:e9:1f:ea:d6:95:f6:a2:
         7d:43:f1:5b:99:ef:05:fd:fe:c9:f2:f2:39:10:d5:72:b3:7f:
         f5:d3:dc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:03:20 2025 by rpki-client