Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c7002d-2986-3c8f-af76-6b2a7a777de8.roa
File:                     c1c7002d-2986-3c8f-af76-6b2a7a777de8.roa (raw, json)
Hash identifier:          XWtW/XomCk5LJLf67955eelOdh5ID6sIP5HHQNoCjoQ=
Subject key identifier:   3F:7A:D4:AB:F8:AA:2F:AA:B6:74:3E:89:A2:82:04:C1:DC:BD:49:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC1B32DE993008797ED75C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c7002d-2986-3c8f-af76-6b2a7a777de8.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     396571
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b3:2d:e9:93:00:87:97:ed:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=5308bd91-7c97-4224-8e1e-22522da818f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:2d:cc:b5:54:ec:32:87:e5:ca:4f:27:e3:
                    68:d8:f7:8c:5d:c9:2d:4e:f8:ce:8f:f7:7e:6f:43:
                    92:24:c0:2b:3e:78:b6:c2:49:56:bc:30:89:74:24:
                    be:ae:55:30:8d:75:98:95:63:bf:66:ff:a4:7f:c1:
                    ce:3f:ec:27:ef:79:13:a0:3a:0a:9d:a8:70:17:0f:
                    9e:5f:ea:5c:75:c6:43:43:b1:da:98:67:38:e7:a6:
                    e9:a5:f3:81:fe:bc:3d:06:73:96:34:06:13:f8:99:
                    8c:d1:98:bf:d2:b1:81:93:c9:79:7d:4d:5c:75:f4:
                    0a:a1:9b:6b:1e:77:d3:d4:74:50:94:14:06:4d:73:
                    25:2a:6e:42:f4:4f:28:2e:9a:0f:8d:ba:21:99:d8:
                    dd:c6:66:f1:55:ab:42:f8:30:92:5c:f1:99:32:32:
                    ca:24:d9:a5:94:fd:df:ca:7c:9b:d1:7b:a4:5f:05:
                    ff:eb:0f:05:3b:08:5a:9c:66:28:2b:6c:df:04:6e:
                    7b:43:6e:00:aa:12:44:81:c3:b2:f0:48:c6:03:0e:
                    bf:01:5c:a8:ef:48:7f:3c:f2:f4:2b:ea:e3:ed:17:
                    d6:96:2b:10:06:40:c5:0d:8a:69:13:80:9a:99:b4:
                    c6:1b:d5:bf:69:51:f4:52:b9:15:6b:21:a2:63:73:
                    9a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7A:D4:AB:F8:AA:2F:AA:B6:74:3E:89:A2:82:04:C1:DC:BD:49:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c7002d-2986-3c8f-af76-6b2a7a777de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:1a:d0:cf:03:42:00:aa:10:25:7b:d6:c2:6c:77:73:2d:18:
         1e:07:f8:4f:cc:5a:7e:3c:5e:47:01:b6:4e:52:8c:ff:d3:1f:
         16:37:37:f4:d4:49:28:13:63:44:0f:ff:c0:52:ac:e5:c1:a5:
         75:32:6e:55:ab:f6:d1:98:ee:8c:5c:a9:d4:03:b4:f4:89:cf:
         96:8e:14:69:1c:16:64:86:e0:e1:85:43:08:74:ff:28:fe:71:
         62:0d:fb:c6:76:a5:5c:06:4c:8c:96:ff:74:42:25:96:f3:b3:
         43:90:b6:c5:4d:e4:cc:86:52:70:8b:84:1b:34:7b:eb:28:9e:
         ce:97:35:f4:1c:34:79:39:04:08:c8:b0:65:b9:99:2c:bb:42:
         0e:2b:a3:d5:60:58:0f:05:bc:f3:ca:cf:53:d8:56:76:78:27:
         fe:b1:2b:38:82:f2:7f:a7:bd:37:51:c3:82:89:b8:f9:54:db:
         8f:94:ba:5b:06:d4:ee:83:f2:cc:03:e1:25:bd:39:c1:11:a7:
         05:b3:27:6c:88:9e:56:d5:42:f2:76:31:37:a1:b5:40:c8:de:
         db:a9:07:e0:0e:cb:c5:62:06:f7:32:a2:94:cd:02:50:05:52:
         39:be:66:36:63:35:ad:47:7c:bb:9c:36:4b:3c:98:eb:3e:ee:
         16:b1:c2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:01 2025 by rpki-client