Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa
File:                     a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa (raw, json)
Hash identifier:          WFtZ92UWJPt1Zd8AnCbR0nV49bVjTNvMt8apeHKBMn0=
Subject key identifier:   AD:70:27:9C:28:F9:7F:AB:ED:F0:2C:4C:A8:EA:7A:F3:2E:B5:FA:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2CF7145D2D047072C644E500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     397206
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:14:5d:2d:04:70:72:c6:44:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=6825b223-cb8d-45b5-9e75-6fbcecf16adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:a2:59:b9:ce:af:44:ce:d5:e1:c2:28:c1:
                    38:40:b4:d2:a7:d6:bc:30:89:a1:30:3a:c6:92:9f:
                    b8:75:40:d0:39:3a:89:51:d2:99:3e:b4:26:dd:7a:
                    cb:4c:81:74:8d:af:c3:b8:b5:c9:2a:28:fd:6d:43:
                    b9:75:7a:c9:e0:56:4b:16:dc:a5:ca:26:4c:78:1c:
                    f5:e0:37:77:2b:15:1a:ee:a7:9e:6b:56:b9:79:6b:
                    f2:4e:23:4e:da:c6:7c:ec:73:ee:bd:86:61:dc:91:
                    84:3b:56:8f:42:70:fb:ac:19:90:d6:63:ee:d9:31:
                    c4:ea:e5:3e:12:64:cf:75:89:cd:3a:d9:08:fb:4b:
                    d0:c5:d0:bf:66:58:87:78:cb:78:9f:fa:97:e2:03:
                    9f:e6:78:f6:a3:05:50:98:95:29:1f:b7:06:b3:1e:
                    d2:f4:80:9e:09:dd:d7:50:38:3b:10:d8:89:60:7c:
                    ed:b4:e1:cd:e5:40:bd:f4:d1:23:7b:97:a8:53:28:
                    e0:db:6a:b5:55:48:9a:c1:bf:4b:f9:09:61:0c:77:
                    c7:ff:7e:ac:4e:b2:46:6e:b2:01:e9:4d:03:ca:f0:
                    0b:42:ee:59:2f:5a:58:66:94:62:09:0e:0e:c5:72:
                    94:e5:e2:37:c8:6b:30:ae:12:ae:d1:21:bb:a7:73:
                    25:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:70:27:9C:28:F9:7F:AB:ED:F0:2C:4C:A8:EA:7A:F3:2E:B5:FA:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0d61fbe-c2b4-3cd8-881b-c5f056e0117d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:9b:54:ce:a0:69:e2:85:0e:44:7a:e2:ce:1e:0c:a3:ed:f1:
         20:14:4e:cd:3d:55:9e:16:58:3d:77:be:3a:fa:6a:d3:15:c4:
         f9:1a:4a:35:58:36:25:ab:68:ec:a3:a8:f9:aa:af:22:a4:1d:
         3a:80:52:f1:aa:99:8d:13:e2:33:25:09:a0:0d:03:46:20:6f:
         e2:76:16:b7:ed:07:21:2d:b1:7e:72:8e:9b:f3:d0:69:03:f1:
         2a:7f:ca:b3:8b:24:41:2f:cf:0f:bf:e0:ed:85:1b:87:60:cd:
         20:6b:69:f9:ca:9d:fa:6d:bd:ca:d3:15:03:15:43:dd:56:b1:
         26:b5:e7:4c:28:24:87:f9:e4:a6:64:bf:87:69:67:35:76:35:
         21:71:34:42:2e:e5:df:e0:8a:9c:12:93:38:ee:d2:04:5f:8f:
         61:38:5b:2e:c3:5f:ff:3e:1a:63:26:59:ae:15:53:6e:fa:7d:
         e1:74:79:65:e6:70:a5:89:2d:5a:e7:43:47:fa:5c:4b:23:d6:
         30:cb:22:18:68:3d:17:eb:6b:21:9e:a3:dd:3f:f1:9d:dd:87:
         03:70:b4:8b:0b:bf:da:a1:9c:64:20:21:fa:32:32:19:f5:17:
         80:c4:7d:93:cc:4d:be:5c:5b:89:a1:54:f8:e9:b2:77:8d:90:
         72:4b:64:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:23:06 2025 by rpki-client