Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d1eca81-9880-3d71-8e0a-babd756fc449.roa
File:                     9d1eca81-9880-3d71-8e0a-babd756fc449.roa (raw, json)
Hash identifier:          rSob878YTf5wEW6oZ5/QqK/6x0KT9MSHywaJLsXNrEs=
Subject key identifier:   E1:31:0E:62:1E:53:33:A6:6F:5F:6C:85:8E:5A:40:23:EE:F8:7E:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883FE37B3B21856A35C6440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d1eca81-9880-3d71-8e0a-babd756fc449.roa
Signing time:             Tue 19 Aug 2025 12:34:15 +0000
ROA not before:           Tue 19 Aug 2025 12:34:15 +0000
ROA not after:            Mon 17 Nov 2025 13:34:15 +0000
asID:                     396578
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:fe:37:b3:b2:18:56:a3:5c:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:15 2025 GMT
            Not After : Nov 17 13:34:15 2025 GMT
        Subject: CN=ec491c09-2f36-4c8f-a020-2bf7ffaf5394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:90:98:b8:e9:f4:e4:6f:7e:b2:09:4c:5a:25:
                    f9:0d:a5:0f:c1:b4:02:cd:a7:23:06:86:4a:79:b3:
                    9f:8b:29:d5:13:53:9e:35:3b:f4:16:f3:2c:d1:2d:
                    1a:45:2a:7d:c0:5d:da:ff:38:c6:a6:d5:1a:6c:49:
                    1d:b4:d5:c2:14:fd:f0:63:3c:54:22:7e:54:c5:5a:
                    a8:25:31:8c:28:c5:61:5e:15:ef:93:57:16:4e:49:
                    52:bd:c1:ac:12:ac:95:9c:6a:f3:64:be:90:c5:52:
                    81:45:62:4f:be:ad:d3:f0:71:b8:34:32:2c:a4:1a:
                    b9:ab:b8:e7:97:4c:30:91:dd:cb:2b:19:d9:31:28:
                    6e:f2:75:d9:e4:f1:ff:b9:6e:00:ac:65:9c:04:cb:
                    01:fe:29:e2:72:bb:6b:3b:71:ab:66:c5:38:a4:df:
                    48:08:0b:31:a8:d9:16:de:f0:ac:98:4c:66:72:17:
                    a4:b2:cd:40:d9:74:cc:e0:61:74:05:c5:3c:62:b2:
                    de:17:3b:a6:32:ca:fa:59:dd:fc:a6:53:41:f3:19:
                    e6:64:d6:b9:c3:ae:b7:5a:2f:22:65:99:b7:2f:d3:
                    ad:ed:b2:16:93:1f:40:90:e6:43:fc:c2:83:e4:30:
                    b3:2a:16:4b:65:61:5f:7f:84:0a:27:83:75:61:c6:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:31:0E:62:1E:53:33:A6:6F:5F:6C:85:8E:5A:40:23:EE:F8:7E:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d1eca81-9880-3d71-8e0a-babd756fc449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:b0:37:7c:a2:ca:b5:70:8b:ae:98:93:61:e5:e5:90:a6:df:
         fc:8b:5d:5f:9b:f0:99:5a:d8:d3:61:6c:53:fd:cf:c8:85:4f:
         54:f7:5a:d6:d8:2c:6f:12:d7:b1:5c:a5:e7:ef:c4:64:fb:8f:
         c6:2b:79:e0:20:e3:95:21:6f:bf:85:58:25:0a:09:8d:91:68:
         b7:cd:bb:e4:e0:72:0b:98:f7:b3:aa:08:35:3a:a8:df:32:71:
         6a:48:a4:20:02:b7:86:dd:46:b4:04:11:07:69:e5:00:e8:85:
         f3:ae:b8:46:75:22:a1:62:8f:23:4f:9b:1d:0f:76:43:54:61:
         88:d9:88:a2:58:2c:0e:c1:e3:f8:e8:f3:2b:b0:ae:83:98:ea:
         08:75:20:2c:fc:c5:28:c9:8f:b4:f5:f3:b3:7b:16:16:ab:58:
         a2:a9:79:ec:16:af:0f:43:13:5c:49:33:5c:19:c5:44:e2:36:
         03:f3:5c:17:10:fb:56:de:44:dc:47:a0:ee:4a:bb:41:37:b5:
         54:1f:94:20:11:c3:ea:56:49:04:29:f5:f5:6c:a7:ef:cd:99:
         5d:69:9e:8f:41:20:48:af:67:a0:c0:b6:fa:89:fd:f7:6d:58:
         e8:81:b1:9c:f0:a7:6d:f2:95:b8:c3:d6:68:18:70:3c:aa:97:
         77:d5:8d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:27:20 2025 by rpki-client