Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa
File:                     a07bc41a-66df-3190-be8f-7d32ceb83809.roa (raw, json)
Hash identifier:          K3nN7yeKnfvaRDo54TwGckfkNB8vUbgE+RRDpqdKfjc=
Subject key identifier:   2D:90:F4:07:FF:76:68:72:E5:10:87:6A:C6:AB:E7:C0:EB:B8:1E:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B8382092233BE3D0D6C8C8180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa
Signing time:             Tue 14 Oct 2025 01:00:30 +0000
ROA not before:           Tue 14 Oct 2025 01:00:30 +0000
ROA not after:            Mon 12 Jan 2026 02:00:30 +0000
asID:                     36626
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:83:82:09:22:33:be:3d:0d:6c:8c:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 14 01:00:30 2025 GMT
            Not After : Jan 12 02:00:30 2026 GMT
        Subject: CN=f9b20a98-8924-4fb0-ae5c-9e9d3eee86d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e4:8f:2a:68:af:89:98:99:34:1c:d8:bb:32:
                    c7:46:55:87:9c:04:6d:71:6a:40:c8:cf:99:7a:06:
                    e7:aa:fc:a6:ce:76:bc:48:f0:00:02:42:89:f4:97:
                    f1:da:b3:77:31:08:25:ff:c3:3a:5e:bd:66:a2:4b:
                    c9:2b:95:50:ad:b8:fd:9a:91:76:15:a3:92:a7:f7:
                    ee:e8:92:07:f9:28:60:f9:ea:38:3a:8a:e2:53:6c:
                    72:74:2c:c6:95:62:25:c6:7d:4f:79:29:8d:e7:50:
                    98:9c:e2:55:4a:a5:02:22:2b:4a:84:f6:1a:99:6a:
                    b1:cb:5e:af:ad:77:4c:b4:07:5f:fc:47:34:95:b7:
                    71:56:99:25:94:12:f3:9e:3f:b8:15:75:bf:68:ee:
                    1d:9c:e0:ef:3f:81:20:8d:7a:0d:d2:17:d0:35:ca:
                    0f:37:e8:37:56:30:eb:f7:84:ba:37:aa:4e:85:d1:
                    ad:d8:8a:0c:40:42:1c:a6:53:6a:cb:88:da:f3:83:
                    49:ec:73:41:02:81:5f:6d:f4:5f:e9:90:13:8b:bf:
                    99:82:37:48:d4:7c:a3:85:58:5d:45:17:39:47:ff:
                    2e:cf:33:28:4a:13:35:85:a8:bb:90:64:38:cb:95:
                    92:2c:87:1d:91:16:87:1b:40:d1:a3:c5:51:56:0a:
                    87:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:90:F4:07:FF:76:68:72:E5:10:87:6A:C6:AB:E7:C0:EB:B8:1E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b3:83:81:1b:94:5b:bb:93:40:ab:fa:cf:ac:61:71:8b:48:
         ee:43:37:80:bf:3c:6e:16:ec:8d:80:89:75:c4:54:f4:74:79:
         15:27:47:01:e3:14:9d:83:bc:7d:bb:64:ff:d4:37:cc:51:ed:
         bc:8d:20:3c:c4:e7:23:68:83:c6:7a:77:4d:af:c8:67:9d:0b:
         17:e6:d7:96:0a:9a:08:0c:12:c5:78:14:0e:20:9f:35:da:0c:
         e0:33:8d:b8:d3:28:95:7a:78:e3:38:04:97:1c:dc:47:a8:5c:
         dc:14:7e:c5:21:99:ff:1f:aa:94:75:11:c7:de:35:18:09:54:
         79:7b:cf:88:84:e3:42:09:fd:ac:af:79:7d:01:bc:46:5d:5e:
         cf:49:c3:0d:97:62:59:8b:8e:63:03:6a:b4:d1:55:0a:c7:b3:
         1b:f2:82:b3:a3:6b:ad:6f:28:c4:e1:01:6e:32:07:ff:0a:f3:
         1a:92:fc:04:8e:7a:1c:ca:87:ba:6d:6e:17:80:17:57:38:75:
         68:10:16:41:17:b1:32:0c:b2:5c:c3:ba:fc:93:ca:51:a4:1e:
         e9:5b:5c:52:4c:0b:45:f5:3b:79:81:f7:30:cc:5b:a5:d3:f5:
         d9:7a:58:3e:cc:6e:1d:28:50:12:7c:8e:ea:fd:f6:b3:79:04:
         c4:25:21:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:30:59 2025 by rpki-client