Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3861946-2101-371d-b59b-14cbbf461d44.roa
File:                     a3861946-2101-371d-b59b-14cbbf461d44.roa (raw, json)
Hash identifier:          Cb3ijEZJJmaYWT9/V1/vQevkMBveRqcyLif9qXdbAwE=
Subject key identifier:   5B:8A:45:1A:2F:1F:F5:E8:12:9F:57:76:BF:61:59:0D:AA:59:0D:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B52A78455F5979E3E5369B5C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3861946-2101-371d-b59b-14cbbf461d44.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     32651
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:84:55:f5:97:9e:3e:53:69:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=c130ae52-fdcf-410b-a9dd-1292681133ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:88:78:49:fc:aa:40:67:55:b7:00:d5:60:
                    64:14:ef:9a:7d:9c:3d:a5:b4:05:16:af:5e:56:95:
                    f0:f0:3b:da:ec:06:9f:a0:0c:b7:01:f2:c8:19:08:
                    0f:d7:c9:ed:3e:d6:8e:e4:f6:92:0e:71:c0:d2:c3:
                    b2:3e:dd:49:ab:8f:fd:f5:7c:9c:fa:dd:62:de:60:
                    0a:e9:91:d7:f0:96:d1:82:87:a0:97:f5:97:63:47:
                    9c:b3:d6:79:20:96:c9:5c:a1:4c:7c:e9:bd:a0:a1:
                    79:ad:68:81:4b:46:1d:45:88:a2:64:51:6c:d3:bb:
                    9d:21:1f:24:96:19:99:f4:9d:2e:9a:d0:35:41:a3:
                    42:dc:d4:c1:0c:9f:e0:c5:c6:0b:b4:86:92:1b:0f:
                    7a:5d:d0:46:d0:5a:4c:a4:f6:0c:9e:5c:38:91:b2:
                    56:b6:b5:16:c3:25:fa:15:bb:37:cc:c7:b2:f8:80:
                    45:ba:0f:a1:46:8c:2d:8a:95:4b:a4:43:bf:2d:fe:
                    25:e9:05:78:07:0f:40:a8:8c:8e:84:c0:17:d5:4a:
                    cc:3e:71:22:4b:96:17:dd:cd:23:55:0b:05:04:a9:
                    07:54:c6:1f:06:86:cb:86:f7:83:6b:ed:42:9b:06:
                    f7:ac:46:24:d8:be:48:20:21:a5:79:bf:bf:22:18:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8A:45:1A:2F:1F:F5:E8:12:9F:57:76:BF:61:59:0D:AA:59:0D:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3861946-2101-371d-b59b-14cbbf461d44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:dc:01:51:4c:b9:08:61:82:41:0f:b7:c5:78:33:c1:91:75:
         cb:3b:4b:84:36:80:07:6d:c3:35:c3:d6:1a:d1:c8:14:23:26:
         56:fb:db:79:d8:17:19:bd:c9:cd:db:5e:b7:25:2a:6f:fd:d4:
         bd:b9:12:cf:0f:42:81:ef:48:e2:b4:61:68:7b:7c:3f:01:0e:
         fe:62:59:59:9d:e9:ec:7e:9a:8f:6e:59:b3:2c:e6:24:e0:df:
         29:80:0a:4f:2d:b7:f6:68:3d:ec:91:55:b7:72:bf:ce:93:d0:
         1a:0f:87:2a:ae:06:f2:08:cb:2a:73:3d:32:57:1b:b0:b6:1e:
         a6:39:a2:70:8c:6d:57:e1:90:9f:8e:aa:e4:29:a0:67:42:fd:
         67:7b:b5:40:db:fc:f2:b5:a4:0b:03:c0:50:8a:43:c4:d3:84:
         5e:1e:f5:cb:8e:1d:15:8d:d1:96:64:fd:57:97:94:94:c8:ce:
         a2:8f:1e:ae:ab:5f:30:1a:d3:00:d7:a0:ff:4a:8f:5d:5d:b1:
         50:dc:a6:42:f7:1d:45:53:79:ee:42:92:81:7c:7d:27:15:b8:
         1b:9c:88:c0:8a:db:80:20:13:d0:e7:76:a3:7a:12:49:dd:df:
         1a:dd:59:da:d3:6e:de:23:bb:e1:45:0d:ef:73:e3:c4:68:78:
         b7:b3:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:41:54 2025 by rpki-client