Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f181a934-2ef8-3e3c-982b-e34bc9db8fdc.roa
File:                     f181a934-2ef8-3e3c-982b-e34bc9db8fdc.roa (raw, json)
Hash identifier:          46A2S+I1RkqkkBmy0X4Lw/6gZ1zU3aPHl9QztieIgFg=
Subject key identifier:   D8:C8:3F:B8:08:B2:CC:E1:17:AB:6A:71:AA:5B:91:1F:F6:9D:B3:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA6887DA8A0B702887913C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f181a934-2ef8-3e3c-982b-e34bc9db8fdc.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396561
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:88:7d:a8:a0:b7:02:88:79:13:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=2424da24-3e21-4bb0-a758-7784209c9c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d7:71:49:37:9c:17:f8:6a:ba:46:20:b6:a9:
                    39:57:b1:57:1d:ac:e1:0b:ec:f5:a1:28:38:6b:e1:
                    c4:87:b5:07:a3:4c:7b:2e:27:f3:7d:e1:f3:a4:ea:
                    db:a2:5a:5a:4b:83:82:04:2b:3a:27:f6:14:45:d1:
                    d3:f4:08:59:46:08:f4:ee:39:52:a5:54:4c:2d:2f:
                    53:7c:9e:91:c6:e2:ce:16:b4:48:9c:ea:94:3a:8e:
                    c4:91:08:a9:68:65:e6:04:55:19:b6:a9:4c:f1:04:
                    c6:93:79:0d:2f:5d:54:c7:37:04:f4:3f:9d:d6:15:
                    ee:6b:25:8b:9d:9a:02:13:60:f7:a6:46:0d:f3:6e:
                    00:fa:cf:a2:55:46:8a:30:72:78:00:9d:be:f5:2c:
                    56:63:6c:23:6d:e8:f9:84:b0:cd:77:7d:53:78:29:
                    0c:55:b0:94:51:ef:53:f9:27:41:18:9c:cd:0c:ae:
                    b2:1b:e0:82:8d:b9:0a:fb:8f:57:a3:e9:c1:ba:07:
                    fc:49:9f:4d:8a:db:9d:45:90:65:6b:65:0e:a1:07:
                    56:cc:62:89:76:68:c9:59:63:ea:40:95:82:1a:a2:
                    3d:c9:bd:37:93:6b:50:81:7e:bb:a2:8e:45:26:e2:
                    20:eb:58:fb:8b:ec:36:5c:a4:93:78:48:31:71:07:
                    fb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C8:3F:B8:08:B2:CC:E1:17:AB:6A:71:AA:5B:91:1F:F6:9D:B3:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f181a934-2ef8-3e3c-982b-e34bc9db8fdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:65:14:f1:45:f7:61:90:b8:79:9c:b5:55:6a:0a:ae:02:a1:
         04:66:a0:ac:1c:22:ed:f0:f1:27:42:97:89:d0:90:b2:a6:a0:
         c9:1c:f4:2a:38:30:75:aa:79:4d:5b:35:a3:30:13:7d:e5:f6:
         f9:7b:6a:54:0d:dc:a0:17:2d:98:75:0c:26:81:41:8f:18:d3:
         90:4d:48:50:41:5d:93:f7:b8:4b:5e:7c:1e:ec:e3:a1:e1:48:
         a1:98:6b:63:cc:ac:be:e0:58:ff:ce:de:61:2d:de:66:56:c5:
         9f:8c:8f:03:d6:0c:36:26:84:f1:78:f1:c7:f5:45:ca:df:a9:
         29:e8:b0:62:99:9e:0f:c9:d6:d2:f8:7b:69:12:f0:14:a4:f2:
         65:42:e6:74:7f:03:55:21:78:6e:73:dd:80:47:bb:b6:7c:e4:
         70:8e:df:ef:07:fc:3a:d7:9b:52:4e:d5:16:1e:36:ed:7c:57:
         c2:b3:47:b4:0a:ae:5c:b6:65:43:b1:88:b3:af:ad:d7:3f:7a:
         f3:1d:2e:04:30:e9:bc:f8:61:90:45:f5:1e:eb:9d:56:b0:f6:
         df:c5:da:71:1f:7c:cd:9c:3d:74:40:a6:e9:ac:43:ea:7b:1c:
         20:80:42:23:5c:4a:2c:d1:0d:ba:14:fe:e6:0d:22:f8:aa:e2:
         75:93:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:02 2025 by rpki-client