Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5b61fde-dcf8-3adc-a956-41c6558034b5.roa
File:                     b5b61fde-dcf8-3adc-a956-41c6558034b5.roa (raw, json)
Hash identifier:          QnGqSkIW5BqTJyzpePAQalwsZ22qUr/kyUxw2Y/XfaI=
Subject key identifier:   20:F1:47:6A:14:A1:E2:9B:0A:A5:3D:97:82:3D:DA:9F:53:2A:7D:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF256946FC7F7DCCE3ADEDBC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5b61fde-dcf8-3adc-a956-41c6558034b5.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     396581
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:94:6f:c7:f7:dc:ce:3a:de:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=4ac8e41e-e7d9-44ae-abce-4ae6ce9a75a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:12:db:de:ea:0c:db:30:01:a1:17:14:8d:c2:
                    58:ff:de:0c:03:24:24:22:8d:4a:e8:19:b0:d3:0b:
                    8d:ec:0e:07:b7:9a:96:97:84:82:76:ca:f5:e9:d5:
                    bb:6b:46:26:6e:69:b6:2a:fd:71:77:d1:72:47:1a:
                    34:ed:de:1c:ef:e7:24:30:8e:2a:d4:07:0e:d4:a2:
                    ea:68:aa:bb:b2:d2:08:cd:28:21:d2:06:9e:ea:a8:
                    af:5a:b4:62:15:53:d2:48:ab:12:eb:95:04:4f:53:
                    d7:33:5c:2b:01:9f:a2:b2:fa:35:ab:73:a8:01:9f:
                    b7:68:ed:a6:b5:ab:4c:3e:fb:11:43:c2:89:62:9b:
                    bf:dc:30:af:8c:e8:36:c4:71:30:9d:1e:27:3a:e0:
                    78:d4:af:14:bb:aa:c1:4e:90:95:a3:9b:5e:49:13:
                    df:37:a6:2a:5f:c9:5f:6b:93:12:52:44:2f:3e:76:
                    36:dc:e2:9b:e7:f1:4f:04:f8:24:e9:68:22:a3:8e:
                    0e:ad:c3:14:29:e9:35:24:a6:37:8c:fc:dc:82:2f:
                    ab:8a:e9:a2:30:65:fe:a0:94:cd:5d:5e:fd:ec:50:
                    99:10:e9:ed:e1:e2:30:1b:f6:e4:17:25:d2:da:89:
                    54:89:32:97:f5:00:91:04:ba:6a:90:2c:f4:6b:b1:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F1:47:6A:14:A1:E2:9B:0A:A5:3D:97:82:3D:DA:9F:53:2A:7D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5b61fde-dcf8-3adc-a956-41c6558034b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:b9:cd:50:94:10:f0:4b:54:3c:c9:91:16:fc:24:c0:77:9c:
         3f:05:8a:b5:5b:8f:fc:0e:89:99:2d:5f:01:63:1f:9c:25:8a:
         3a:fe:30:ab:30:69:85:07:62:2d:6d:a9:b6:4d:8f:0a:85:5c:
         5f:64:ad:ac:c5:ba:71:89:1f:fc:a6:0c:e9:91:82:87:86:54:
         73:37:ec:c0:79:68:9c:5a:76:cf:60:8e:78:53:ff:7b:ba:96:
         27:19:dc:8a:66:82:ec:89:44:86:b1:4c:d2:a8:5e:6e:5f:42:
         1e:03:ac:4f:f8:ed:cc:fc:8e:c5:f2:7c:11:2d:30:cd:c5:83:
         11:e6:9b:59:66:2a:45:b5:19:9b:5c:23:07:1a:e3:16:80:f2:
         4a:57:e5:77:5b:b1:7d:3b:1f:3e:3d:6c:81:45:d9:76:02:ac:
         96:a1:f7:2e:87:25:ba:6a:88:a3:5c:bc:81:0b:ea:8d:3b:08:
         03:84:46:f9:f3:c5:59:e7:3a:f2:a4:1f:67:aa:ab:60:24:4d:
         ab:32:bd:e6:d8:f5:47:38:32:4d:90:ff:e9:aa:72:78:98:03:
         69:29:91:c8:e9:7d:d0:89:35:67:ca:6a:21:b7:7d:a1:4a:ee:
         b5:02:b7:51:9d:e4:57:23:77:a2:e2:e9:b8:90:3c:4a:57:92:
         a5:5e:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:46:01 2025 by rpki-client