Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cea642be-66dc-3e04-af1e-2bc2f7635524.roa
File:                     cea642be-66dc-3e04-af1e-2bc2f7635524.roa (raw, json)
Hash identifier:          GXn05yNOJdR+h7qUtd+uFpTtU7GwYONY46HaLwAQ/8Y=
Subject key identifier:   8A:B7:3B:72:C8:F7:65:FE:68:9D:99:F0:EF:87:9A:A0:5C:07:1B:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A3B6F9FA64E3F914E4CA0FA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cea642be-66dc-3e04-af1e-2bc2f7635524.roa
Signing time:             Wed 18 Jun 2025 12:38:22 +0000
ROA not before:           Wed 18 Jun 2025 12:38:22 +0000
ROA not after:            Tue 16 Sep 2025 12:38:22 +0000
asID:                     22547
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:6f:9f:a6:4e:3f:91:4e:4c:a0:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 18 12:38:22 2025 GMT
            Not After : Sep 16 12:38:22 2025 GMT
        Subject: CN=d550cbaa-b6b7-4baa-8427-1ddb927d2e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e6:3e:d2:01:6a:71:c5:02:cb:2b:d5:15:32:
                    ab:92:d1:9e:32:61:53:72:90:30:26:e1:60:5a:2f:
                    d1:db:0d:4e:4f:b1:d3:c9:c7:23:01:1c:c3:fc:0c:
                    88:61:3b:f3:c6:61:fd:a8:cf:de:6f:b0:88:c1:30:
                    71:78:0b:c0:09:41:36:70:fd:a2:04:fd:f5:8a:9a:
                    45:18:09:1f:41:b7:e1:94:da:53:57:c2:44:fa:05:
                    88:8c:6d:65:fc:ed:e6:75:a8:05:d2:2d:c4:69:f4:
                    8b:ee:e7:58:9a:b5:43:a6:2e:92:e2:c4:e0:ec:9c:
                    fa:e0:34:8c:84:e5:74:fc:95:f2:99:ad:8f:fa:f0:
                    a3:82:29:6f:0a:87:53:c0:ca:54:18:75:9e:e3:9d:
                    f4:43:d8:e5:a3:10:f3:e5:70:d4:86:3e:7a:15:09:
                    76:51:21:be:db:eb:a2:a7:c6:47:f1:02:44:23:da:
                    69:0a:b5:1c:00:f7:01:5e:1c:73:f7:c5:c9:9a:e6:
                    e0:63:2a:82:15:04:65:ef:32:34:3e:71:1a:05:a1:
                    af:aa:6e:61:7c:0c:f4:31:c0:23:c7:8a:3d:a2:03:
                    68:3f:f3:6a:3c:fd:aa:f2:13:8f:22:5c:f8:fe:b5:
                    41:79:05:9c:4c:2a:79:bd:c9:d5:d8:0a:df:e0:c2:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B7:3B:72:C8:F7:65:FE:68:9D:99:F0:EF:87:9A:A0:5C:07:1B:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cea642be-66dc-3e04-af1e-2bc2f7635524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:e3:4a:00:bd:4e:15:a6:0b:fa:c9:81:20:c9:85:e7:c5:6a:
         c3:c9:98:f9:3a:59:03:3f:48:14:56:f1:4f:e8:4c:09:50:a0:
         ae:82:65:c9:b6:dd:bc:fa:16:33:47:c8:82:f0:e5:b9:b2:81:
         56:6f:d2:54:d0:e6:16:c0:4f:36:2b:97:f5:68:19:f7:0c:4a:
         ec:90:cd:5b:d1:5e:3d:41:53:a8:6d:9b:ec:74:bd:27:4e:42:
         82:ac:93:6e:ba:17:70:78:92:11:eb:7e:49:53:83:db:bb:85:
         e5:e2:8d:84:c1:34:d8:70:c2:cd:ed:83:4e:1a:d8:75:a7:4b:
         7c:d8:59:bb:ac:a3:79:4e:78:5c:3c:a8:a6:fd:7d:02:d6:32:
         ad:64:cb:76:ac:89:68:da:3f:5d:fc:5c:f0:c4:ca:9e:c3:eb:
         3c:8c:c8:09:b0:50:c2:e3:bf:58:0c:c7:65:4d:9b:fa:f6:52:
         fb:a9:61:3f:35:bc:d3:be:55:d2:cd:46:0a:c4:d9:03:64:eb:
         65:8e:1d:68:66:8d:7e:db:3a:21:41:de:57:f1:31:ef:6a:7c:
         a0:0b:7b:f6:1c:11:56:3b:ef:85:ad:87:ee:aa:2d:0a:46:b5:
         3f:05:21:fd:6b:93:77:6f:59:09:e1:76:e9:1c:6d:e9:7b:93:
         d4:f1:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:40:07 2025 by rpki-client