Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa
File:                     ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa (raw, json)
Hash identifier:          dEhE1/kltMLrgWcM/Dbc61zSRU+2RS1vgIgnxa9Kc00=
Subject key identifier:   EF:DD:01:B0:38:9F:57:CD:A9:34:F7:C4:40:2E:D0:B4:BB:6C:99:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCC95DA2B500B6ED52B300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396547
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c9:5d:a2:b5:00:b6:ed:52:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=efa37513-fa93-4b2a-8609-27ee9cd7e7fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:be:60:8d:fc:1a:cf:79:01:57:7d:a4:51:d9:
                    5d:9d:cd:d2:29:a8:94:74:76:9a:51:49:ee:0d:cf:
                    38:7e:f7:a2:a8:e4:f4:e8:56:c4:73:8f:e0:3f:b5:
                    01:2e:84:f4:0a:c0:14:d9:d0:25:6a:ee:a3:44:df:
                    63:6b:76:78:97:49:db:f9:12:7a:82:38:99:57:63:
                    52:7b:9d:69:39:af:14:6a:2f:90:3e:db:6d:91:03:
                    a1:7a:17:be:d9:b3:fd:c8:32:81:16:ba:f6:db:9a:
                    3b:7d:9b:f5:68:6e:a4:c4:61:67:da:86:fb:29:10:
                    92:9f:d5:c8:3b:63:43:de:af:08:f3:5f:02:e0:20:
                    0a:bc:2a:2d:f5:3e:c0:46:f9:dc:f1:bb:b6:33:d1:
                    e1:04:d7:4b:e8:c4:b7:3d:ed:2e:30:ce:8e:03:5e:
                    1d:ca:2d:67:aa:ef:2f:bd:82:89:26:6c:c1:e8:41:
                    ba:aa:ce:34:94:d5:cc:92:e2:c5:10:20:ef:b4:ac:
                    17:51:f0:40:f1:b0:6b:b5:dd:23:d9:49:45:67:b6:
                    e3:18:2e:c1:ec:e0:11:92:87:ee:21:73:f6:fa:a6:
                    9d:a7:e4:a2:15:b2:7c:2c:d3:e1:14:c9:58:53:0f:
                    d4:a3:3a:b3:e4:a1:4b:d2:4d:28:82:b3:4c:9e:c2:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DD:01:B0:38:9F:57:CD:A9:34:F7:C4:40:2E:D0:B4:BB:6C:99:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ee4458e2-b77f-3f86-b7ec-30610d5bd3d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:0f:99:f4:8e:91:f1:b3:16:c6:38:79:14:b5:c7:5c:db:3f:
         11:14:23:cd:a8:bc:a1:c8:68:e4:88:2c:53:ad:0a:22:91:35:
         99:bc:16:18:9d:de:ec:2b:4c:f8:31:a0:7f:ef:2a:b0:2a:09:
         59:9f:1e:bd:bf:b4:65:36:e3:36:c1:09:3f:ff:48:54:bd:ba:
         01:63:77:a3:2a:62:54:65:5f:c1:9e:1c:47:33:ca:19:50:ec:
         b1:e9:b5:b4:d3:e1:a9:78:3b:be:9d:74:02:3d:84:6d:59:55:
         0d:d8:cb:f2:9f:04:bb:ab:7f:c2:5d:c0:a0:9a:74:13:f0:79:
         a8:39:a0:86:b1:05:27:c2:1a:6f:79:86:80:08:f6:93:bd:c5:
         46:8a:dc:d2:36:56:c1:b9:bb:46:8d:df:2f:16:1f:be:b8:f9:
         15:97:62:98:3b:4f:52:7c:77:b0:38:91:51:a1:dc:3b:a8:3a:
         98:cf:c6:1c:54:2c:d9:8e:5e:8e:e0:d2:0a:a3:ed:ba:92:24:
         3a:d2:d1:6e:4c:9c:47:00:42:62:11:ec:d0:6f:0d:42:39:80:
         d5:3c:a7:73:ac:78:52:72:3a:4d:44:e9:d5:bd:a7:16:f0:82:
         25:a7:75:77:07:ea:80:ca:5e:34:5a:a7:09:59:1f:39:fe:73:
         78:f3:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:04:11 2025 by rpki-client