Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b9a493a-8e3b-36d5-b9cf-5b5ca154eba1.roa
File:                     9b9a493a-8e3b-36d5-b9cf-5b5ca154eba1.roa (raw, json)
Hash identifier:          EIy1vIEnCp6YPNJvUQJCaD/N+pA/LVFAT4aDRPg+y5A=
Subject key identifier:   47:60:BA:B5:F6:5A:0A:FE:93:7B:91:9C:16:5C:8A:DA:3D:2C:25:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C9D18059443BCB9E05A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b9a493a-8e3b-36d5-b9cf-5b5ca154eba1.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     36627
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:9d:18:05:94:43:bc:b9:e0:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=bf056945-f939-4c13-80ae-4beb21afdc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:e9:8d:ac:b9:2e:13:93:51:86:04:9b:00:
                    43:b3:53:a8:b1:89:e3:58:d0:d1:29:00:b9:46:a1:
                    d8:0f:33:91:c7:e5:9f:4d:8c:d3:58:9e:bd:de:89:
                    4e:ce:e3:8e:4e:4c:07:2e:53:7c:9e:6d:05:9d:ae:
                    ea:4c:72:89:fe:d1:39:34:4c:49:79:ae:19:4d:37:
                    ff:9c:b5:00:3c:06:f4:d7:c8:66:41:40:b4:4b:25:
                    53:99:f6:7c:13:c1:d6:60:a8:a9:21:7b:73:50:86:
                    0d:f0:24:99:c9:0a:64:06:03:b6:58:20:30:37:e2:
                    98:81:50:9d:02:6f:e3:8a:7a:4e:17:0c:e5:4f:c9:
                    12:e2:04:6d:93:99:1c:78:a5:5e:01:a9:75:60:d9:
                    32:9c:31:91:55:d5:88:e1:9c:a0:26:ea:55:fa:3a:
                    50:38:f7:db:06:f9:5b:d5:c1:89:74:a9:a1:18:66:
                    57:d3:eb:26:89:bc:b4:35:35:76:49:cf:d3:43:41:
                    d9:c1:f9:0a:cc:81:52:39:72:03:89:c9:18:db:04:
                    b3:87:32:1e:9d:22:06:69:5c:08:0d:f5:db:9c:8d:
                    b6:d7:ef:08:c8:99:58:b6:59:eb:2f:df:40:43:7b:
                    72:89:7f:5f:59:42:97:75:94:fa:7f:f8:44:ca:fe:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:60:BA:B5:F6:5A:0A:FE:93:7B:91:9C:16:5C:8A:DA:3D:2C:25:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b9a493a-8e3b-36d5-b9cf-5b5ca154eba1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f1:20:4e:af:d1:0b:04:89:18:91:57:aa:48:84:c9:57:c4:
         f2:d5:89:10:95:77:26:70:ba:d1:2d:59:77:a3:7d:c8:42:a7:
         52:6b:d0:8b:05:db:5d:85:c7:3a:40:a5:17:55:06:6f:9c:0f:
         7f:d1:3e:18:ab:36:9c:72:e6:b8:ca:6a:d9:81:3a:7c:0a:31:
         9b:91:c5:c7:d2:4c:b8:e2:96:69:35:c2:76:a7:70:a6:56:f1:
         24:e8:08:37:86:79:f2:38:1b:e0:de:ce:53:80:ae:26:54:9a:
         07:bd:a5:47:49:5c:c7:7f:a3:66:fa:c3:f9:5c:d0:8c:6e:fe:
         54:bc:59:1b:3e:ec:79:5c:37:6e:07:d7:43:8b:db:1b:6e:36:
         d6:a7:20:57:10:6e:f2:7a:e3:c8:86:10:39:36:80:ee:e5:e7:
         d9:2d:4d:8a:2e:d7:9d:3f:9b:87:be:5a:51:d4:86:b2:89:cd:
         1b:ce:fa:a1:57:fb:ad:8b:19:41:62:9a:20:57:f3:a2:fa:9c:
         57:19:39:fa:9b:7a:4d:e3:b3:68:f1:0f:08:bf:88:89:10:10:
         ca:aa:e6:d2:e6:6c:51:ce:2d:34:42:03:66:6b:b6:24:53:19:
         e0:ee:07:ae:d6:d4:e8:94:20:52:a6:d8:0e:4a:05:84:a1:af:
         94:3b:9a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:02:29 2025 by rpki-client