Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5b0c45a-f186-3214-9951-46214a95b929.roa
File:                     e5b0c45a-f186-3214-9951-46214a95b929.roa (raw, json)
Hash identifier:          5dL4v6l4IDAh1fdXZHWwPTMKzMtP3RFYd5YY+yhq8ro=
Subject key identifier:   36:A9:DC:3C:80:FA:4B:5D:FA:B4:15:CC:3D:9F:68:A8:92:DF:7E:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2CF7174578AAE922FFF53280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5b0c45a-f186-3214-9951-46214a95b929.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     36621
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:17:45:78:aa:e9:22:ff:f5:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=f3a49ac7-b78c-4bb7-9981-4e561d5b8ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:c9:eb:89:1c:53:aa:ed:e8:f7:79:92:88:
                    4f:d9:8d:4c:56:33:20:97:c3:87:fc:8e:e9:5f:47:
                    7e:bb:29:7b:e7:3d:da:7e:b2:3d:e4:86:68:cc:f6:
                    33:20:3f:d4:07:9d:da:29:dd:13:e6:a8:1c:94:c7:
                    07:c9:3f:2c:d3:f3:6c:fc:d6:f0:d9:25:47:63:64:
                    ce:e9:af:65:39:d5:fa:9a:74:e6:7b:ff:01:3f:c2:
                    07:bc:1b:46:8b:52:54:d2:8e:1c:be:92:dd:f9:8d:
                    23:84:f9:40:66:ae:b5:03:8d:a8:02:4b:59:e1:37:
                    40:1c:6a:f0:1f:70:68:f4:3c:c1:fb:a1:c0:00:bc:
                    05:63:4d:63:cd:f0:e0:7b:ff:2b:15:df:f2:ab:df:
                    13:da:ee:96:5d:57:b4:7e:3e:b5:d0:67:24:1c:97:
                    50:ba:fe:1e:a6:2c:c1:2a:54:fb:83:12:74:0d:57:
                    52:90:4e:9f:f7:1e:f6:60:b4:d7:00:f0:eb:e7:12:
                    76:6f:1d:1f:97:3d:80:96:24:95:51:8f:0d:5a:d1:
                    f5:0a:56:4c:88:f6:8c:58:d4:cc:1a:72:80:6c:8e:
                    d0:38:f6:9a:db:4a:c2:71:d0:39:36:d8:90:38:76:
                    66:f0:fd:29:59:7e:39:90:93:32:c2:27:3e:50:2c:
                    d6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A9:DC:3C:80:FA:4B:5D:FA:B4:15:CC:3D:9F:68:A8:92:DF:7E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5b0c45a-f186-3214-9951-46214a95b929.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:58:59:da:ba:49:be:8d:96:50:7e:ed:fc:89:85:06:c9:b8:
         b4:fe:d3:d8:ca:8e:af:63:7b:fa:2a:6f:fd:94:2f:41:95:54:
         50:62:64:90:36:37:29:d9:1e:2e:02:bf:12:a6:11:7b:27:d0:
         da:69:39:4d:5c:b9:03:49:b7:e7:fa:fd:5d:5d:2d:ed:61:c4:
         f9:72:7d:17:28:f1:e5:f3:4e:66:c8:11:06:5c:b9:f6:e0:d5:
         d4:20:cd:99:94:b0:bf:32:b8:79:0d:ab:88:4c:30:46:16:07:
         52:d3:52:08:64:e6:ae:35:31:bf:7e:d8:30:b0:99:ab:f2:a0:
         99:d1:04:88:35:e4:a9:94:7b:6d:6f:a8:d2:c8:15:52:75:91:
         a9:fc:14:70:d6:c7:72:3b:66:c1:15:15:91:4d:da:d5:35:d2:
         a6:70:fc:5a:37:3c:ba:b9:04:4b:20:d5:6b:b1:98:79:79:d8:
         b8:5a:55:b3:59:df:84:2e:0c:ba:16:e2:83:f1:7f:29:4d:d5:
         3c:cd:1f:be:d8:e0:1f:61:33:ff:0b:a7:bb:d0:9e:74:93:3b:
         dd:20:4b:c0:0f:a6:54:16:25:f1:d5:43:aa:d2:12:d1:bf:5f:
         fb:71:71:72:94:da:28:58:4d:f9:47:d7:03:a5:7d:7a:6d:ab:
         7f:80:50:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:18:52 2025 by rpki-client