Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6439a62-c428-38fe-b48c-6ce9d8db9985.roa
File:                     b6439a62-c428-38fe-b48c-6ce9d8db9985.roa (raw, json)
Hash identifier:          UzHdkR4jFFaX+D7QDC9ebCxWbU7/PmoF49sWaQBrIhY=
Subject key identifier:   51:24:28:C2:0E:71:72:86:35:EC:AB:98:82:81:C2:FE:36:E7:8C:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2CF71172205625B2D4710A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6439a62-c428-38fe-b48c-6ce9d8db9985.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     396596
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:11:72:20:56:25:b2:d4:71:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=372586a3-c171-4604-8f31-c937a0da1c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:97:9c:f0:33:42:12:b2:f1:fa:d3:22:f7:df:
                    79:0f:e1:75:d2:fc:85:63:f0:39:85:b8:5d:f5:f0:
                    1d:79:60:4e:04:2d:a2:f7:f8:42:8d:fc:1f:70:0a:
                    41:f4:07:14:a0:02:31:ff:34:e6:3a:85:df:4a:8d:
                    c6:77:d3:60:ed:46:f5:4e:f7:f1:0f:02:69:8b:ef:
                    e4:45:4b:75:25:e3:12:56:04:3d:31:18:7a:c3:51:
                    d8:e4:91:3d:03:2e:2b:ea:a0:31:57:45:54:ae:b7:
                    94:8a:6a:b9:63:26:69:09:91:b0:fb:c1:f5:d6:1a:
                    51:7c:df:6c:09:65:fd:bf:9a:f3:ff:9b:d5:f8:ae:
                    1b:42:fe:df:e7:bb:d9:92:aa:c9:f4:89:78:cd:8a:
                    f2:b2:92:99:94:6a:33:87:ed:bb:73:cd:fa:40:68:
                    b8:e6:67:84:6c:f4:b0:8e:2c:a2:e6:1c:27:6c:4f:
                    30:5a:e9:28:3f:9b:9c:6e:7d:93:42:dc:c0:94:05:
                    37:40:5c:0f:1c:8d:b5:18:b3:19:45:a1:8c:d9:02:
                    09:ff:cf:5b:69:4d:cc:5a:78:71:04:c0:c8:cf:03:
                    b7:7f:43:c9:2d:5b:75:2c:07:e0:13:72:3d:31:21:
                    be:58:40:70:d8:91:83:7a:13:7d:1c:4c:e9:ad:be:
                    34:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:24:28:C2:0E:71:72:86:35:EC:AB:98:82:81:C2:FE:36:E7:8C:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6439a62-c428-38fe-b48c-6ce9d8db9985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:50:bb:9b:73:53:a0:77:4b:8d:62:56:8a:bb:bc:3d:cc:61:
         9e:91:69:5f:d3:61:37:7b:f0:41:ce:62:6b:be:44:eb:3b:5b:
         ea:2a:3c:2e:f2:a6:73:f5:5c:e0:37:c8:1f:dd:80:ce:9e:e8:
         31:40:30:7c:2b:f8:d1:d0:2e:3b:ea:ab:96:88:cd:48:73:49:
         3b:fd:b1:8b:27:62:64:c6:a0:0f:c2:e3:d6:c1:e9:41:72:40:
         f0:22:cb:59:5e:64:19:22:3f:95:33:ad:0d:ab:61:ea:d8:ab:
         8e:42:a6:60:bb:3f:d2:c9:a5:99:2f:b4:4b:89:0a:86:47:3b:
         ce:d5:ad:ff:31:a9:74:b3:a2:93:76:c0:34:4e:29:d5:ac:c4:
         44:17:c3:75:dd:cb:b7:b8:aa:32:e3:89:fd:34:33:e6:dc:50:
         96:22:e9:cf:d5:97:75:c6:50:ce:c8:63:75:c4:54:21:1a:a9:
         5f:18:ca:5f:59:6f:e5:fb:a9:50:b8:73:f8:d8:dc:f3:4d:36:
         85:cc:e9:57:82:6b:c8:72:bc:e3:d8:47:f0:7a:66:51:0c:a7:
         52:e1:0a:06:42:0e:e4:33:fc:bb:47:d5:c6:c4:b5:ee:40:48:
         59:31:1d:3e:d6:f0:b0:ad:0d:e0:62:91:32:8c:fc:21:2e:4f:
         f4:2a:4d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:10 2025 by rpki-client