Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de5aaea1-2b09-396b-91eb-8690d34af2b9.roa
File:                     de5aaea1-2b09-396b-91eb-8690d34af2b9.roa (raw, json)
Hash identifier:          hmiZtInno12no1pWm1R1Fti0kXLdWmUYOTDz/13umNQ=
Subject key identifier:   81:61:B6:5F:7B:1B:1D:92:E0:98:53:3E:1A:F8:B0:55:00:7C:6E:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF2568EC041077FDB2C797600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de5aaea1-2b09-396b-91eb-8690d34af2b9.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     396608
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:8e:c0:41:07:7f:db:2c:79:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=3339ace2-6e89-48da-b1b0-f06f00daa12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:f0:e7:42:f3:6e:00:2d:4a:e1:fb:b1:0d:
                    d2:17:67:d6:8a:94:68:7b:30:4f:c9:9a:0d:aa:e9:
                    8b:27:29:e1:50:88:8f:18:f9:c1:5f:35:0f:67:b0:
                    b2:a0:53:a9:ee:b6:fd:74:29:a4:d4:4e:ae:86:23:
                    78:95:22:bd:85:8b:14:47:e7:f6:21:17:f6:d1:f9:
                    ef:91:68:1d:82:9a:5e:a6:6b:d6:bd:61:e0:02:e0:
                    e4:67:35:90:5a:db:0a:15:71:30:c6:e4:41:72:89:
                    f6:84:e1:44:c5:de:7d:5c:3a:bc:07:95:d4:5c:82:
                    00:75:20:fc:20:f6:42:47:28:37:e8:df:1e:4b:41:
                    a7:b1:01:50:dd:4e:cb:86:7d:52:e5:5f:b7:b0:af:
                    cc:c6:93:0f:fc:38:ca:24:a6:74:91:0f:c5:e6:46:
                    34:96:40:d0:f6:41:d6:73:14:f4:c4:35:03:d7:5b:
                    1e:79:9c:89:88:70:9b:30:bd:1d:51:0d:db:80:37:
                    48:88:ef:9d:52:30:f2:55:b4:ac:0f:85:78:14:0a:
                    c7:60:58:44:33:b3:7b:ee:bd:07:87:28:5c:1b:12:
                    58:3a:2f:9b:e1:1e:66:21:5a:e2:0b:9f:ce:4a:33:
                    b3:35:e7:f2:67:9c:b3:5d:a7:2b:76:77:44:40:45:
                    f1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:61:B6:5F:7B:1B:1D:92:E0:98:53:3E:1A:F8:B0:55:00:7C:6E:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de5aaea1-2b09-396b-91eb-8690d34af2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f5:67:78:eb:b5:70:30:86:e5:39:41:83:8b:8f:41:05:91:
         19:80:7e:50:9f:4e:f6:85:8b:2d:7e:41:d9:5c:21:74:bf:38:
         1f:22:3f:12:f0:f2:bc:51:4e:ef:45:d6:dd:c7:50:bf:04:33:
         68:43:da:79:00:00:f2:d5:91:a9:77:1a:c4:73:42:fe:ac:44:
         de:43:5a:3a:0a:33:79:f6:50:3c:22:32:c0:33:b6:36:66:06:
         bc:69:0f:d0:65:65:89:06:44:2c:9c:66:11:f1:e0:87:a3:d6:
         19:ff:aa:4d:f5:0d:3b:1f:7b:cf:16:11:0a:15:45:40:93:6d:
         d4:49:c3:3b:09:7a:06:ad:0a:f6:63:e0:00:d9:19:ec:47:9f:
         fd:dc:c0:17:98:38:08:22:ea:44:3c:66:8b:5c:c5:fc:d7:34:
         bc:e6:10:19:a6:ae:22:a6:88:bd:6e:37:b4:38:2d:b7:eb:95:
         53:93:47:50:13:54:01:9b:98:6b:09:71:b4:c2:d3:51:65:19:
         61:84:ff:9a:2b:b4:2e:f5:f4:b6:3e:7a:ef:d3:de:d0:3b:3c:
         f7:87:5d:0d:c5:43:03:65:bf:7a:74:d5:e9:72:05:50:43:06:
         d1:fe:8f:70:c2:b7:47:b3:7f:f4:10:e5:4f:93:bf:fa:85:83:
         70:9b:af:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:47 2025 by rpki-client