Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa
File:                     cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa (raw, json)
Hash identifier:          2nlwD9G33IRIU/mCVHyJY5TDT+MPqKn+cUAKkqoRxS0=
Subject key identifier:   CB:CA:EC:1A:45:97:99:26:AB:C9:AC:5B:AB:B5:8C:42:4A:1D:7B:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434C525BAF3B9C55D8A09880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     397210
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:52:5b:af:3b:9c:55:d8:a0:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=25f96c05-57c5-476a-928b-a4cb1a7b9053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:87:ee:5a:76:95:86:d9:08:cd:72:9b:94:
                    08:32:08:6a:86:1c:ec:06:62:e9:04:22:47:75:bf:
                    39:4d:f1:5c:a1:69:9d:3d:48:61:e0:74:62:cb:a4:
                    d4:5d:a3:f2:c9:ad:33:a5:ef:65:45:f1:cb:5f:5e:
                    5f:9d:8c:48:8f:3c:06:c9:9f:79:02:3f:b5:20:ae:
                    21:d9:84:1e:3b:f9:9f:6a:8e:fc:e7:3d:21:45:cf:
                    29:59:4d:a4:c7:dd:eb:26:d1:dc:93:30:db:bf:f3:
                    e8:bd:7e:d6:e8:ae:ea:d6:ce:a5:b8:82:11:4f:96:
                    76:7a:df:75:d4:12:7b:a4:0d:42:87:13:ff:03:c4:
                    ea:d8:06:52:3d:f0:b7:96:db:f2:dc:10:55:cd:a8:
                    e9:77:4e:51:3c:aa:e2:ba:4a:fb:52:e0:25:a5:55:
                    32:ac:09:aa:6c:46:1c:ca:d1:a4:b1:72:61:5c:f7:
                    51:d4:af:66:9a:e1:da:a0:e6:e6:e2:20:63:f1:e2:
                    46:3c:d5:24:dc:f5:68:e7:e6:b8:93:21:2a:87:82:
                    25:5e:33:de:4c:73:18:ef:71:13:63:a0:34:4f:28:
                    dd:b7:ac:06:c7:7c:51:84:01:40:db:f2:5e:c5:da:
                    f0:c4:22:52:72:18:b5:b3:8f:7e:c8:90:c7:20:c7:
                    7b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CA:EC:1A:45:97:99:26:AB:C9:AC:5B:AB:B5:8C:42:4A:1D:7B:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf3d2ba4-529d-3b0b-8173-82ef9378c897.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:44:cc:40:d0:af:a9:9c:25:91:4d:fd:c3:81:b8:94:0a:23:
         75:7c:2f:ce:8e:dd:46:48:a1:da:b5:53:f2:46:bb:d3:12:a6:
         6e:3a:1d:30:26:17:d2:ef:90:0a:2b:64:17:8a:5a:87:c9:c8:
         c6:84:a3:d8:35:0c:8f:c6:8f:a4:1e:f1:cd:a7:35:d5:af:1c:
         6a:b0:8e:1d:b2:d9:8a:51:0f:7d:94:1f:9e:8c:33:a2:2f:8a:
         aa:e3:aa:80:3d:b8:06:7b:76:57:56:cb:f5:98:91:4f:4b:3d:
         a9:60:ce:27:0c:07:da:98:5b:69:64:43:d7:dd:33:16:1b:33:
         39:96:63:0a:27:28:71:b9:f9:ab:4f:a4:45:3d:93:c4:d8:eb:
         5a:97:dd:84:9f:90:c6:fb:7a:b4:95:d6:ce:9f:9a:32:65:95:
         05:de:78:e8:e6:9b:5c:9a:2b:bb:1a:bc:c6:ab:82:c8:00:a1:
         e6:9e:2c:f0:99:a2:2b:60:3b:9c:a5:08:f8:75:f8:a6:8a:ec:
         e6:da:64:3c:63:a1:5c:4f:81:b8:ef:eb:a7:21:a7:4a:bf:35:
         db:ba:b7:b7:60:0c:4b:c0:86:c8:68:4c:71:7f:c8:57:be:49:
         c9:2f:71:30:00:cf:10:50:ad:23:cc:48:86:73:be:6b:6d:f9:
         2f:1b:2f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:26:18 2025 by rpki-client