Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc880457-3b44-302b-80fb-4ba976e47531.roa
File:                     fc880457-3b44-302b-80fb-4ba976e47531.roa (raw, json)
Hash identifier:          fPWGb5tGxe//aU+Al73ETv4T7MUKMZ1Da88EblrLy6w=
Subject key identifier:   C8:61:60:51:B8:BB:7B:97:EE:8C:20:24:2F:C6:DC:29:93:E8:B3:20
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3DB6EFD96FE56D45B312D870
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc880457-3b44-302b-80fb-4ba976e47531.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     36628
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:ef:d9:6f:e5:6d:45:b3:12:d8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=e6fb7afc-4e27-4fc1-9ebd-2fdaac037d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bb:b3:26:6c:4f:94:a4:a0:0c:13:a2:f7:c5:
                    6a:2e:03:20:ae:c5:92:f4:e3:a9:e2:e4:f3:6a:05:
                    4f:66:2f:6e:7b:7b:a9:83:9a:ee:a8:73:61:2f:ef:
                    98:e0:f9:be:b7:5f:e6:4b:79:0c:af:dd:04:4e:c3:
                    e1:50:3c:48:e7:db:b0:69:a4:3e:83:d0:6a:be:00:
                    b9:9c:a0:45:5b:81:ba:a4:64:68:d5:96:a6:8d:a8:
                    8f:e4:d4:6f:ed:78:a0:4b:82:94:17:01:4a:78:5f:
                    e6:ea:ad:14:2b:b4:eb:b2:37:fb:bb:58:db:41:c6:
                    b7:d2:ee:62:dc:01:7a:f3:c8:96:e1:16:a0:60:98:
                    71:29:0c:44:97:df:27:24:51:40:09:fc:1c:ef:8f:
                    21:fe:ec:62:57:25:5b:e1:2f:51:f1:ec:ad:a0:f6:
                    f9:b6:1b:52:13:38:09:0d:9b:b4:e8:29:72:3a:ae:
                    e0:be:3e:b6:8d:fa:10:f9:51:04:12:68:60:7b:26:
                    22:09:1a:06:70:65:11:42:5c:a4:ce:33:cd:4b:56:
                    43:39:0d:6d:b1:d0:0f:b2:34:8d:61:5c:56:7c:98:
                    f8:41:0c:4e:ab:7b:8e:db:95:ab:67:d7:ae:c6:8a:
                    87:26:51:0e:27:3b:92:b9:33:79:6a:ab:42:6f:68:
                    2a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:60:51:B8:BB:7B:97:EE:8C:20:24:2F:C6:DC:29:93:E8:B3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fc880457-3b44-302b-80fb-4ba976e47531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:ea:3b:dc:d8:7c:a3:2e:bb:64:88:f8:ee:92:78:a7:80:f1:
         3e:57:26:cf:40:85:8e:9c:d0:ad:48:da:f0:5d:79:47:3e:66:
         03:47:e1:46:fc:d2:9b:c1:78:09:16:ac:7c:a7:14:66:f1:d0:
         50:a6:e9:cb:04:20:3c:c4:86:0b:66:e8:a3:c7:e1:cd:5e:e4:
         c6:43:6a:b5:6f:fa:49:f6:82:e7:9e:1b:ff:06:32:6f:d7:3d:
         6d:dc:46:e5:af:21:a7:01:42:4a:4c:d6:f9:7f:a3:0c:4c:f0:
         ea:c3:3f:74:35:d4:42:0d:c5:cc:c7:fb:c9:56:80:a3:40:6d:
         d9:31:06:b5:91:55:91:fa:ab:98:95:db:49:6f:24:72:ae:82:
         86:2d:1a:30:24:d3:d4:e2:fb:95:be:1b:48:17:14:1c:4b:7a:
         ff:57:03:42:a7:70:1e:6e:7d:e0:7d:21:c3:51:33:28:5a:4e:
         dc:d9:d2:db:31:29:c3:97:55:6e:c5:de:2d:6a:cf:7f:ef:3b:
         bc:7e:c9:80:a3:0d:ea:53:28:a6:55:e2:fa:a5:2a:66:b0:dc:
         0c:3a:61:b7:ac:ae:95:a4:47:7f:29:65:b8:ba:fc:07:c7:88:
         0b:69:43:ec:0b:ca:f2:66:e0:34:af:0b:e4:9d:5c:b9:76:f5:
         84:6d:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:36:37 2025 by rpki-client