Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af43786-2bad-3b05-810e-755b373daaf5.roa
File:                     9af43786-2bad-3b05-810e-755b373daaf5.roa (raw, json)
Hash identifier:          QFi1MGgLwOOVSoxE+bKd/5qLTqS74pdafM3Bbbom9Fc=
Subject key identifier:   20:2C:20:F5:4B:06:46:E0:93:E7:31:66:1B:10:1F:A5:F9:F4:8E:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA66D423B1B6CB693CF8F60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af43786-2bad-3b05-810e-755b373daaf5.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     397193
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:6d:42:3b:1b:6c:b6:93:cf:8f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=9bc99e1d-ac08-42e4-9f11-255dfa13124f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:5a:cf:5a:83:5e:e0:7b:7a:bb:08:de:e0:
                    e3:de:b4:9d:d2:62:b4:db:11:e1:47:f2:d1:c9:e0:
                    e2:0a:75:2f:a6:8f:64:45:9d:b8:94:3a:a4:0c:9a:
                    82:b3:66:c1:d7:41:cb:fb:ee:30:3e:8f:ac:b9:f7:
                    dc:fe:1e:f8:a9:36:f0:98:21:4a:51:a5:ee:31:fd:
                    ca:1a:c4:63:a6:fd:90:1d:17:85:7b:a1:b8:46:23:
                    cf:66:3d:97:5b:24:a9:48:b0:53:c8:a8:79:cc:fb:
                    8a:b1:b3:bb:bf:a7:74:1a:f6:3c:c9:d2:1d:b6:bb:
                    31:be:88:99:1b:0c:db:e6:b1:31:61:27:04:2d:53:
                    26:ce:58:a8:92:5e:02:b5:1e:f2:d5:ca:32:28:ac:
                    40:66:5d:c3:1d:bd:44:23:ee:fc:d3:2d:53:cc:5f:
                    c5:1c:e2:ed:db:30:0c:d9:c7:dd:d3:2b:b5:8f:bd:
                    84:e8:58:ea:72:63:f6:54:64:b0:79:7b:ed:0a:a1:
                    70:9d:4c:9f:2a:89:9a:93:7d:b1:dc:23:f9:9f:5f:
                    46:de:50:04:6a:14:78:cd:5f:f4:c6:34:ab:23:6b:
                    16:52:be:a5:44:9d:12:78:e5:7c:84:ea:68:30:67:
                    e4:28:4b:aa:48:97:2a:c8:c2:84:ce:ad:06:fd:04:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2C:20:F5:4B:06:46:E0:93:E7:31:66:1B:10:1F:A5:F9:F4:8E:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af43786-2bad-3b05-810e-755b373daaf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1e:00:ed:ad:15:68:d9:79:67:46:78:f9:aa:63:01:e5:f0:
         9c:02:59:e7:10:5c:1e:ee:bd:8d:75:28:99:c3:75:d9:2b:3d:
         1c:fe:62:32:4a:91:43:10:93:d8:d6:9b:33:6e:b4:0c:fa:60:
         fc:c9:01:63:ed:28:6d:60:ad:98:42:6d:05:d9:a5:6b:05:87:
         6c:11:13:85:cf:b0:65:7f:1a:00:12:eb:8e:27:c3:0e:ff:59:
         1c:69:35:f0:6d:ce:1c:7e:ff:ab:5e:4b:98:cb:83:c6:f2:b8:
         d2:90:40:b5:4b:73:a6:aa:1b:30:97:45:42:fb:b4:6d:f7:4e:
         5f:c5:cc:d4:7c:bc:2f:ca:49:80:fe:20:97:06:35:81:93:80:
         fe:1a:d8:28:6f:27:55:1f:31:8c:07:10:e7:2a:40:7a:6e:d7:
         e5:34:57:54:8f:85:fe:27:84:7a:53:ba:86:86:a2:1e:81:a4:
         1d:c4:b1:00:46:4f:11:96:f9:6b:4b:cb:b7:05:ad:87:aa:6a:
         c8:07:c7:ff:89:28:80:da:00:5f:e6:f6:75:17:48:ea:04:cd:
         52:a6:74:5b:b1:42:35:eb:a3:0c:44:54:9f:eb:f1:ab:59:c2:
         7c:5b:6d:11:07:05:fd:6d:56:45:4b:48:fc:61:e8:c2:04:b4:
         4f:e8:dd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:36 2025 by rpki-client