Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba81de9f-3e4d-344a-97de-4b557947a999.roa
File:                     ba81de9f-3e4d-344a-97de-4b557947a999.roa (raw, json)
Hash identifier:          huavWEx10RalZEDmoIRDalk4h+cqsAJ5jD9kpx8Yz7g=
Subject key identifier:   FA:01:0A:70:08:14:ED:7E:F1:B6:6C:57:0F:97:C7:74:4C:C1:F7:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E769BBD3A535C12CA480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba81de9f-3e4d-344a-97de-4b557947a999.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36622
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e7:69:bb:d3:a5:35:c1:2c:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=84e2f177-eda7-47af-8e03-ce769d512fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a0:6f:4c:8f:c4:21:da:1b:51:8d:9d:cf:1e:
                    5b:8a:4a:eb:eb:9b:65:43:58:fa:a2:93:43:e6:76:
                    ec:a2:7c:f9:0d:b8:94:21:8a:57:60:f3:0b:e1:0b:
                    1c:53:7b:b8:c0:fa:b4:54:bc:fa:f2:c1:31:26:d0:
                    54:d9:e2:8c:be:09:9b:0b:6f:7f:83:17:02:db:96:
                    35:c8:05:e9:50:11:49:e0:13:24:8f:3e:bf:c2:d4:
                    3e:2c:7e:96:4a:b9:17:50:77:7b:de:10:bf:f0:6d:
                    0f:2d:d2:f5:ad:e6:f7:d0:0f:ed:12:a3:fc:f0:a0:
                    06:54:f7:d0:c4:2b:c0:3a:f1:e3:29:1d:34:fd:5e:
                    86:68:bf:67:3c:03:d2:3b:32:16:df:b2:d5:05:72:
                    ee:0b:a9:60:71:d3:d9:a2:e0:d1:81:ad:0c:2a:3b:
                    8b:52:95:b2:f3:96:4c:c7:73:96:53:e3:cd:69:80:
                    1f:9c:cf:d1:31:0a:1f:dd:f5:0a:c5:01:46:fb:58:
                    f5:f1:06:bd:ad:be:9d:be:43:dc:e9:03:f2:7a:ae:
                    15:19:74:64:f7:a3:4e:6a:20:07:12:f9:60:1b:40:
                    a3:fa:86:63:19:30:52:9a:80:b6:18:ad:a8:82:e0:
                    f7:68:b2:87:24:4e:e8:ae:0c:a7:a3:ff:03:3d:04:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:01:0A:70:08:14:ED:7E:F1:B6:6C:57:0F:97:C7:74:4C:C1:F7:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba81de9f-3e4d-344a-97de-4b557947a999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:e0:57:8a:57:6c:13:93:28:dc:ec:62:23:df:96:85:f5:37:
         94:3b:67:5e:26:41:3c:ac:04:06:0a:02:cd:a2:30:a0:76:d3:
         75:89:db:b4:d1:88:35:37:d1:81:95:ef:39:d6:57:76:af:55:
         e7:48:2d:30:fe:c8:be:6f:3e:f5:12:83:34:ef:e6:3b:26:c3:
         ac:73:a9:9b:c6:b7:ea:cf:9a:88:52:58:46:de:0c:ee:7e:e7:
         32:65:85:c6:2a:0c:8f:4b:ca:63:5c:7f:48:3c:f7:3b:28:b3:
         0e:5d:4c:c0:94:4d:58:d1:51:38:2e:0e:82:e8:5d:c2:66:78:
         7c:d0:97:53:ff:00:39:7c:b3:a8:0a:25:c3:52:d9:d4:5a:8a:
         1e:53:20:78:d5:fa:12:e2:75:2f:fa:f7:5e:55:63:af:e7:83:
         68:2c:2c:7d:8e:9f:7d:14:6b:0f:da:03:63:cb:43:c4:37:0b:
         fc:63:ad:c1:b8:04:07:f6:b3:c2:16:be:6d:f7:46:81:85:26:
         85:d3:77:d0:1e:c3:27:51:b7:37:8e:1e:a6:51:7c:62:c2:9e:
         98:01:4a:f0:cb:1b:aa:47:97:a9:76:7b:b0:09:3b:32:d2:2b:
         54:5d:2a:05:b0:3f:7d:23:35:4f:a9:a9:cb:69:01:7b:b2:70:
         e6:bc:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:18 2025 by rpki-client