Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad6c6e77-daab-3074-aed9-a5f3f7862ed1.roa
File:                     ad6c6e77-daab-3074-aed9-a5f3f7862ed1.roa (raw, json)
Hash identifier:          KNNEozU+TdBGiHhxndbt5Xjh8RZbOmxoxmOqO+x46wI=
Subject key identifier:   19:DE:C0:81:04:15:21:A1:73:3A:B6:A6:DE:62:B5:22:15:02:EE:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD338092FFE8509345C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad6c6e77-daab-3074-aed9-a5f3f7862ed1.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     36618
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d3:38:09:2f:fe:85:09:34:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=538308fc-ab8b-4f3e-bef0-736d46b88d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:be:61:46:b7:ad:cc:ff:fd:a9:cc:75:85:
                    a0:d5:79:b9:cc:12:63:a0:e8:14:79:62:e4:d1:43:
                    b0:70:a8:08:86:ad:9e:c3:72:74:e0:96:18:7a:9d:
                    de:40:f4:0b:36:96:80:ac:9f:2f:59:2f:a9:c6:1b:
                    79:a1:04:54:5a:90:1d:13:bb:ce:f5:dc:e7:06:3c:
                    e2:03:d8:fa:06:35:ad:e7:e4:2f:30:25:ad:e8:80:
                    ca:d9:39:47:10:58:e8:5f:d9:d6:ee:1f:db:71:ff:
                    56:29:da:87:f8:70:23:17:50:0c:6f:ee:03:11:3a:
                    d3:1f:54:9c:24:8d:1e:9f:62:2f:eb:4d:f8:b3:97:
                    d6:3b:0d:65:33:1c:42:aa:39:1d:0f:c1:1e:6f:a5:
                    16:d4:50:21:d5:27:24:b9:39:96:f2:8c:94:a0:0e:
                    b4:b7:3d:ac:16:50:1e:36:df:5f:72:65:e8:58:6f:
                    8a:3e:11:43:e0:3f:52:dc:06:cf:b8:4e:d8:dc:19:
                    05:87:b0:e0:6e:1f:ff:e8:65:60:ea:f9:97:af:49:
                    58:5a:90:30:b6:aa:2e:56:b3:2d:91:1b:0b:a1:27:
                    67:d5:20:9e:d6:23:1c:95:7c:6a:20:b4:54:70:4e:
                    ba:6a:2e:bd:55:94:1a:c7:c0:2b:db:e4:d9:a2:0d:
                    c7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DE:C0:81:04:15:21:A1:73:3A:B6:A6:DE:62:B5:22:15:02:EE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad6c6e77-daab-3074-aed9-a5f3f7862ed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:b9:17:50:97:3c:85:50:25:10:41:c7:36:c0:6e:bd:fe:
         a9:c9:69:0f:a9:d9:f4:7a:a8:11:77:3e:00:eb:fb:ad:99:8d:
         53:11:b8:1b:4a:68:96:70:1d:84:88:54:46:4b:9e:78:04:02:
         d6:e6:94:39:d4:82:43:64:98:42:75:32:bb:fe:4f:7e:e3:9a:
         3e:f5:96:73:70:d0:c3:09:a5:51:7c:05:ff:df:13:86:f3:da:
         c5:12:46:46:d3:75:8c:1c:d2:fd:d0:a0:b2:de:a1:2b:f1:0d:
         d3:44:5b:5a:00:ac:82:02:a3:5d:14:1c:0c:18:2c:8e:a1:4b:
         0e:66:39:7a:c0:ac:80:d9:2a:21:08:5c:ee:49:e4:42:f5:7a:
         87:c1:0a:f1:85:47:d0:9e:9a:97:45:62:59:12:80:88:86:25:
         63:74:84:6a:47:7e:57:c4:55:ad:ef:3b:4a:56:d7:5a:63:2f:
         b4:37:63:03:36:09:bd:67:ca:80:75:06:82:ef:90:c5:a0:2b:
         ac:bd:61:0b:9c:f6:aa:f6:6f:c6:2d:06:70:2f:f8:47:40:37:
         15:12:dc:15:cc:25:e4:ae:d4:37:d5:5a:e8:6f:0a:66:e8:d0:
         14:bb:94:ca:a5:63:90:c2:94:6b:24:8f:85:e0:ba:57:61:22:
         13:3d:c7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:26 2025 by rpki-client