Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbd68319-238d-3b9b-a226-c868ebbcbfc9.roa
File:                     fbd68319-238d-3b9b-a226-c868ebbcbfc9.roa (raw, json)
Hash identifier:          xvUe1PB06G8SsF0IEAkMui6hyuZDYdP7Tb5bgXH+HGI=
Subject key identifier:   5D:85:1C:41:BE:61:29:76:24:AC:A9:89:5C:A6:44:DB:21:0F:DD:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4081CD96380FDEE815792980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbd68319-238d-3b9b-a226-c868ebbcbfc9.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     396609
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:cd:96:38:0f:de:e8:15:79:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=394c1355-1ef0-4456-b37b-556cb7b6d851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:2d:44:dd:ed:bd:b0:e0:ff:f7:da:a9:dc:
                    27:47:5e:19:20:ae:b6:40:76:b6:e0:7f:d9:f9:d3:
                    08:fe:44:51:80:70:cf:7d:b7:77:2c:79:51:39:63:
                    13:80:5d:a6:e8:f0:8c:1d:98:30:d5:bb:9a:4d:2c:
                    c4:49:34:61:8a:54:a2:6b:17:0c:bd:62:36:6c:d8:
                    f0:4d:42:d8:e6:23:5c:67:c7:6d:6b:2d:12:05:f9:
                    ad:24:df:ab:5b:9b:06:5a:c4:bb:0b:24:67:3c:aa:
                    9d:fa:31:6d:53:6c:8d:2b:f5:8c:d2:69:2d:74:6a:
                    85:bc:91:bf:80:e0:c9:a3:7e:8a:49:59:d7:cb:7e:
                    42:9d:13:91:e2:42:96:7b:71:71:9a:26:63:58:15:
                    6d:f8:c2:c4:40:4d:3f:ec:29:ef:f8:5e:d9:30:5a:
                    f4:89:d5:a0:63:e2:b2:af:23:bc:6d:4f:26:df:66:
                    e0:ca:ee:dc:d7:33:99:44:ed:e2:37:01:a3:d5:d6:
                    3b:f3:5a:52:49:c6:99:c7:47:f3:3f:92:32:39:50:
                    8a:28:19:f7:5f:4e:f0:0e:b7:09:cd:38:75:8a:84:
                    3c:ff:0f:c8:ff:fb:43:8f:1c:aa:ea:eb:fa:1e:3d:
                    d0:37:1f:3f:ef:85:e1:64:41:fb:ea:a4:c7:ba:51:
                    8a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:85:1C:41:BE:61:29:76:24:AC:A9:89:5C:A6:44:DB:21:0F:DD:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbd68319-238d-3b9b-a226-c868ebbcbfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:eb:27:a5:96:87:a1:97:98:28:db:bd:bc:67:02:87:77:d5:
         3f:b4:fe:43:db:8e:52:a2:84:76:8d:0d:f0:75:ce:89:ea:e3:
         c8:ae:73:13:27:7d:33:55:6c:9f:d0:f7:8f:ba:94:69:27:d1:
         0e:6f:c9:b4:4e:05:7c:13:7d:2e:ca:cb:d6:73:a0:6b:d8:c8:
         a6:bd:19:cd:36:bf:c5:1d:6f:af:36:ce:3c:ad:b6:72:2d:df:
         df:1f:58:fa:23:18:46:46:15:c8:9e:2f:b7:de:34:28:88:6d:
         76:13:a1:93:e7:be:3f:0f:21:4d:0e:07:94:35:05:50:d5:c1:
         f1:18:28:f3:99:50:a6:79:e9:13:44:ff:e0:d4:3e:c3:73:f9:
         f9:28:b5:69:3d:94:75:2b:00:71:72:4e:cb:26:fb:82:4a:18:
         dc:30:61:88:25:64:15:9f:ed:9b:93:ca:ea:73:94:c2:7b:d9:
         75:d6:94:82:2d:e7:02:99:18:c2:d8:f2:16:55:a0:86:39:f7:
         11:25:19:bc:4a:62:46:61:29:0c:3b:89:2a:9a:d0:1f:46:30:
         b7:31:c9:93:e3:18:e3:55:dc:d4:34:a9:37:02:3c:6a:fb:59:
         ca:d2:f4:c9:16:58:29:b0:ab:19:1e:ce:f3:76:9f:8c:b5:60:
         9e:ee:da:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:32:31 2025 by rpki-client