Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5214b6d-7c5e-3592-8050-80ebf23f20a4.roa
File:                     e5214b6d-7c5e-3592-8050-80ebf23f20a4.roa (raw, json)
Hash identifier:          jZu/jl9n+zbYhi6o4xm4l3RiY7C6+SLgJTI5CWW2wTM=
Subject key identifier:   4C:AF:36:38:63:91:52:D8:AF:BC:3E:56:F6:3E:ED:5E:F3:77:B4:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC6B026A7FF16B3B9961C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5214b6d-7c5e-3592-8050-80ebf23f20a4.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     396563
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:6b:02:6a:7f:f1:6b:3b:99:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=53221b97-beeb-47cd-8ddf-d84384f51498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:67:c9:60:82:da:a5:d5:b7:d7:54:d0:5a:13:
                    81:2c:bb:78:5d:8b:3e:56:c5:f6:7b:52:e5:68:a8:
                    38:3f:09:98:5f:23:50:c8:c3:51:63:57:32:1f:5e:
                    49:e4:8d:be:eb:25:1d:00:98:40:c5:ff:83:27:ee:
                    50:76:93:f4:51:66:8e:60:9c:88:ca:2f:5e:ec:33:
                    ef:d8:be:65:36:3f:71:5d:4f:79:dd:91:6a:24:81:
                    65:b4:c7:fe:2b:a9:f6:85:4e:82:c0:e8:65:14:c1:
                    89:6b:5f:44:c2:68:0d:97:ab:bf:c8:4d:33:69:dc:
                    dc:18:25:df:ce:00:99:e5:23:05:88:e4:f2:c0:af:
                    84:96:8f:aa:3a:e7:d0:f0:ba:57:93:45:2c:16:bd:
                    bb:95:4a:4b:34:7d:32:5a:12:6f:71:9c:8f:0e:f6:
                    fa:ff:7e:31:44:ef:0c:8c:99:de:e1:94:58:95:57:
                    87:35:da:5b:b4:9e:26:88:31:75:d0:50:04:32:dc:
                    fa:d6:e2:c0:ea:50:46:3b:d4:06:5e:09:22:7d:d0:
                    20:d1:4b:7e:7c:89:4a:31:68:a5:a7:8b:4a:ac:85:
                    62:e1:a5:87:0d:a8:43:55:7d:01:af:45:f8:41:c3:
                    9b:56:6b:cc:28:17:8b:6b:fa:74:0a:ff:02:b2:d1:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AF:36:38:63:91:52:D8:AF:BC:3E:56:F6:3E:ED:5E:F3:77:B4:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5214b6d-7c5e-3592-8050-80ebf23f20a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:94:94:2b:db:2e:99:61:73:da:7f:8d:9d:08:ef:e9:b7:be:
         74:a0:a0:70:59:bc:75:6c:df:6b:53:65:e3:47:5f:1e:92:a4:
         d1:4b:c2:31:9e:2d:5c:8b:56:e4:1a:86:9e:22:b0:c2:ca:aa:
         62:de:45:65:42:2d:a4:d7:71:a1:e0:a3:61:77:92:49:76:d5:
         ae:42:dd:b9:30:d5:35:c8:05:a5:73:49:35:41:f7:8b:a6:df:
         cb:18:4b:2b:08:55:8a:fb:08:9a:ff:1f:92:a4:92:8b:c3:44:
         e9:38:62:f8:ff:1f:91:5b:a0:14:b4:b5:2e:f0:0a:52:9a:42:
         21:1d:98:c6:78:93:f0:ad:9d:e6:e3:cb:24:58:95:04:7e:e6:
         59:cd:bc:21:eb:26:8b:22:7f:ba:28:39:59:66:41:3a:df:2d:
         96:39:fb:6e:64:bb:32:73:b7:73:d0:24:b3:d7:d1:ba:a5:64:
         8c:6e:a6:b7:3b:bd:34:d6:38:4a:9e:2f:77:d4:6a:62:61:25:
         d4:b2:04:9a:89:c4:6d:5a:f8:4a:37:15:d4:7b:06:bf:60:8d:
         ad:c0:c5:8e:20:04:b5:13:dd:0f:31:ed:37:bb:c7:76:32:3a:
         2d:c4:bc:65:47:aa:ae:60:3c:49:d0:03:5b:88:ef:5c:9a:23:
         f8:27:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:35:04 2025 by rpki-client