Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1935ee0c-657d-3aaf-a54c-b3a78002a29b.roa
File:                     1935ee0c-657d-3aaf-a54c-b3a78002a29b.roa (raw, json)
Hash identifier:          oWpUgExr2MEKgrbiokLDuvf6M0TqV1JEJ1NqPO1VLeE=
Subject key identifier:   25:39:55:01:4E:A4:03:06:5A:D2:D4:F3:39:78:19:A2:A2:E8:DE:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A86CFA3846B67AF73DAC89DD0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1935ee0c-657d-3aaf-a54c-b3a78002a29b.roa
Signing time:             Tue 15 Jul 2025 12:37:27 +0000
ROA not before:           Tue 15 Jul 2025 12:37:27 +0000
ROA not after:            Mon 13 Oct 2025 12:37:27 +0000
asID:                     36622
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:cf:a3:84:6b:67:af:73:da:c8:9d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 12:37:27 2025 GMT
            Not After : Oct 13 12:37:27 2025 GMT
        Subject: CN=ef359362-26cd-430e-9f2e-9033ef698254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ee:c2:92:89:54:6b:a3:7e:76:66:3b:68:1e:
                    2d:22:d4:32:9a:f6:a1:e4:93:b6:a9:7a:70:6a:7e:
                    78:f0:56:47:67:30:ef:bb:05:7c:11:8d:c9:f6:36:
                    ae:05:ad:76:54:a5:a1:5f:5b:5e:4a:40:03:d4:20:
                    40:92:dd:c8:f1:8d:0c:63:f2:c7:09:fd:f1:77:6d:
                    3d:e4:c6:c2:4f:38:68:22:c8:29:83:8f:74:5a:06:
                    35:8e:48:10:34:f4:20:ae:18:70:29:c8:0a:bd:20:
                    27:92:60:74:74:fd:0e:a4:cf:b2:17:65:a5:a9:01:
                    f2:a0:67:f0:1f:36:8e:05:76:e4:67:81:81:c1:77:
                    df:f9:c5:cc:2b:0f:47:ef:ae:e5:08:f0:ce:8b:1d:
                    00:5e:7a:e7:c6:e0:70:a3:ec:2d:b1:11:73:8d:fb:
                    9d:c7:29:17:5d:54:f2:9f:86:80:65:31:03:d6:2c:
                    90:67:cf:1b:9c:7a:e4:55:9a:5d:3d:da:e6:6f:17:
                    fc:ac:59:d2:5f:5a:a0:76:23:c8:19:17:bb:82:a1:
                    31:7a:a9:b4:81:63:bc:0c:8f:63:1d:fc:3a:6c:0f:
                    6f:f9:94:3c:6d:04:ce:27:96:91:e8:cd:b9:1d:00:
                    d5:77:80:cc:a9:e7:9f:27:77:c7:a6:28:2f:1e:ad:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:39:55:01:4E:A4:03:06:5A:D2:D4:F3:39:78:19:A2:A2:E8:DE:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1935ee0c-657d-3aaf-a54c-b3a78002a29b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:7a:12:96:87:58:40:14:be:8b:f0:d1:15:8a:b5:b6:bc:81:
         15:d8:ed:e9:93:fc:83:b1:5a:e2:2d:6b:c6:24:bd:4d:0c:28:
         d7:52:2d:f4:10:70:e7:a6:33:f5:1a:21:18:70:74:28:78:41:
         fb:03:09:a3:e4:d2:f8:cb:f0:a1:4e:0d:26:b6:80:68:4a:e9:
         4c:0b:8c:af:ac:4c:9e:76:64:93:9e:b4:19:5a:fc:4b:83:fb:
         c1:dc:9f:08:de:05:1d:e6:41:a9:89:81:99:70:64:06:5a:51:
         92:5e:2b:6c:6f:e5:6b:d7:0a:62:d2:5b:e8:65:a8:ba:cb:10:
         ff:e0:69:d7:f4:60:1c:31:6b:04:4b:65:1f:37:dd:1e:04:00:
         85:bb:15:39:10:36:b6:59:6c:3e:3b:9e:f8:b8:b7:1d:10:92:
         02:bd:6b:c8:8c:9e:bc:6e:19:ae:14:cf:93:45:36:1f:4d:03:
         4e:e0:2e:30:c7:1e:15:66:e2:f9:53:8e:ec:6d:c1:d9:d6:bc:
         44:36:36:81:fb:3f:d1:ac:cc:ea:f3:f4:9e:7f:b9:4e:2f:cc:
         64:aa:e2:eb:b8:20:c5:07:b9:5d:8b:52:8d:31:0c:ec:8f:30:
         f5:3f:a0:71:68:64:03:7a:6b:1d:74:2a:18:ed:93:97:65:c2:
         24:52:c2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:22 2025 by rpki-client