Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9cab4-584f-3aa4-a3ac-c4be4c4e1a09.roa
File:                     b9f9cab4-584f-3aa4-a3ac-c4be4c4e1a09.roa (raw, json)
Hash identifier:          47kzvH0GRgIPiB9YHxKJiuuR7skL1K/CLHlk4weyzJQ=
Subject key identifier:   1C:C6:E5:BB:BF:E0:FC:96:17:1D:A4:50:EA:40:9C:AF:6B:7E:CA:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196D7D836EB3B439B781A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9cab4-584f-3aa4-a3ac-c4be4c4e1a09.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397193
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:d7:d8:36:eb:3b:43:9b:78:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=8bad0a25-478c-42e8-9421-e38f8bcf6415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6a:0a:8e:a4:ae:3e:30:4f:a4:2f:96:0b:84:
                    1d:4f:0e:c3:26:de:33:89:df:64:01:d0:06:35:bc:
                    28:f8:37:03:9f:4f:49:f5:f8:a0:f0:6a:de:21:8d:
                    ca:09:55:a1:40:4d:2d:20:e7:5b:b8:b0:f5:ee:f6:
                    47:91:3c:32:db:37:43:b0:c2:44:c8:dd:a1:04:13:
                    14:53:d3:38:2a:87:11:39:38:5e:99:66:5c:31:1a:
                    e8:b0:57:fd:38:77:2d:c2:e6:b4:32:ca:e6:09:e9:
                    c7:da:7f:5c:a4:82:07:00:83:d4:ee:5d:cf:13:57:
                    d3:61:b1:2b:16:8b:2a:79:6e:14:7c:aa:82:de:a9:
                    81:a1:17:62:23:ea:65:46:05:ab:9f:ec:3f:07:4b:
                    05:1a:82:58:e4:90:07:56:4a:a9:a3:37:d5:be:e9:
                    b0:91:b2:5d:82:e2:5d:0d:38:d3:29:80:2d:ec:e2:
                    f4:57:00:8f:a7:52:53:78:b5:e9:07:7b:a3:a6:97:
                    a2:02:43:80:77:93:1d:bb:b6:fa:ac:81:39:29:74:
                    80:02:ef:5e:d9:71:25:ff:cc:35:82:3c:db:5e:12:
                    5d:9b:eb:4d:45:ba:17:fc:14:8b:bf:8b:d2:50:2b:
                    98:4f:83:b6:73:ce:18:ba:de:fe:b2:7f:41:13:5a:
                    4a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C6:E5:BB:BF:E0:FC:96:17:1D:A4:50:EA:40:9C:AF:6B:7E:CA:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f9cab4-584f-3aa4-a3ac-c4be4c4e1a09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ae:8a:35:0a:1a:60:db:31:4d:27:19:69:31:66:a3:ac:8e:
         61:ac:52:e1:81:38:03:1b:ea:20:b6:63:27:6a:9a:38:74:dd:
         84:87:27:d0:56:0b:3e:ee:2f:23:fa:68:37:80:b3:92:ef:91:
         f7:9b:f2:e6:6f:e5:71:99:0a:14:7f:2e:a0:e6:c4:7d:db:07:
         f8:2f:a8:c1:5f:aa:91:81:8a:93:b6:48:6d:c1:f2:64:ad:6c:
         65:0b:76:2e:64:6d:50:cd:01:52:c4:cf:7c:36:b1:c3:cc:a6:
         6a:7c:dd:bf:ab:a8:d2:95:aa:f1:70:31:26:2d:3b:e2:7b:67:
         4f:19:90:10:21:53:e8:ef:ab:e5:9d:08:eb:ab:4a:9f:5b:6e:
         74:ef:d3:30:45:2f:54:d9:36:0d:8d:75:a2:ad:79:75:46:ac:
         fa:25:0e:66:42:57:dd:13:ba:51:61:94:4d:fe:03:f6:c7:62:
         a6:c7:e1:e3:93:c8:0b:3f:d1:28:43:5a:89:11:39:d4:a8:f7:
         b2:6d:c7:28:91:4e:7f:67:70:a1:d4:69:c5:e1:fa:47:e1:30:
         b4:95:bc:4c:c5:32:8e:ee:84:1a:9f:4d:d7:14:a2:70:80:25:
         5d:7a:85:a3:42:44:a4:b9:f3:d8:c3:03:55:51:dc:69:28:9a:
         52:7a:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:00:03 2025 by rpki-client