Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545255d6-b391-3db0-9038-c42d863bafae.roa
File:                     545255d6-b391-3db0-9038-c42d863bafae.roa (raw, json)
Hash identifier:          1awhIlfcjHFvpF2zXYmRsoP4qZV1JmaDDWBzI5iI66E=
Subject key identifier:   98:E9:E1:DC:AD:2B:75:2D:50:D7:29:7C:F3:B8:AF:83:B2:EA:FD:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C5D31641EDD2B5623BB20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545255d6-b391-3db0-9038-c42d863bafae.roa
Signing time:             Tue 22 Jul 2025 12:41:21 +0000
ROA not before:           Tue 22 Jul 2025 12:41:21 +0000
ROA not after:            Mon 20 Oct 2025 12:41:21 +0000
asID:                     36616
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:5d:31:64:1e:dd:2b:56:23:bb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:21 2025 GMT
            Not After : Oct 20 12:41:21 2025 GMT
        Subject: CN=3aa8a616-d548-4426-a81f-1da9a7353f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:59:b0:07:40:ac:0b:5c:95:d6:6a:b9:9e:f6:
                    58:28:81:a1:69:ce:94:e4:4d:03:49:3e:13:76:c5:
                    75:d3:d1:23:e3:94:9e:63:22:d5:82:c2:31:21:ac:
                    0a:dd:0c:0d:5d:fd:db:58:e5:98:a7:06:8e:6b:9c:
                    f7:04:5a:38:79:b0:39:dd:76:2a:76:50:14:1b:98:
                    e3:a2:55:b2:56:1c:ab:fb:2f:91:3c:76:fd:fb:8a:
                    78:2a:44:5b:2d:9e:e7:96:4e:d1:5f:4e:1d:8c:53:
                    59:08:15:22:74:9c:72:b5:18:4f:53:f3:b4:69:af:
                    5b:45:40:80:6c:ff:0b:81:89:06:0b:90:25:c0:9c:
                    e5:04:7a:f8:cf:18:c7:7f:bf:a8:73:69:24:7d:f3:
                    c2:7f:46:22:aa:14:b6:3f:b2:88:62:75:12:44:91:
                    b1:26:9f:fc:84:ba:b1:fb:be:59:57:51:25:b3:e4:
                    e2:d9:2e:a3:be:a6:f0:49:8b:69:bd:94:3a:94:c2:
                    a8:9a:fb:81:c0:cd:88:eb:6d:aa:34:29:69:80:16:
                    76:b1:8a:e5:7d:bb:1a:6a:d1:75:18:68:6b:80:e8:
                    6c:aa:de:12:ae:5c:82:91:40:2f:e0:30:cc:ce:fb:
                    2e:38:c6:b2:df:9f:57:8f:3d:1f:b5:e3:15:02:d3:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E9:E1:DC:AD:2B:75:2D:50:D7:29:7C:F3:B8:AF:83:B2:EA:FD:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545255d6-b391-3db0-9038-c42d863bafae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:69:ad:f2:4d:75:f5:85:22:4c:3c:c5:b4:51:e7:ae:b5:c4:
         04:8e:f5:11:34:65:c5:41:96:66:9b:f6:1b:38:a4:35:03:8e:
         17:95:3d:6b:61:49:03:0a:df:fc:f9:0e:7c:3e:d5:65:81:0b:
         f6:ae:ee:b6:0b:a7:11:83:7b:3b:15:55:a7:4a:80:f9:3b:a3:
         57:42:07:02:b0:e3:a4:64:01:87:d1:ba:76:2d:0c:84:17:4f:
         21:4d:80:f5:6b:46:40:d5:62:4d:bb:af:7b:fd:eb:c3:79:9a:
         28:9e:88:5a:e4:29:dd:63:0c:55:54:a8:39:72:dc:f4:1f:04:
         10:95:56:58:7a:02:5f:ed:bb:41:2e:a1:7b:0b:bd:1c:42:a9:
         57:53:80:b1:57:91:b8:03:9a:3b:12:10:56:f2:c1:53:43:29:
         61:49:25:25:01:75:fb:08:13:19:67:4a:7d:ca:17:ec:7a:2a:
         10:00:21:b9:a6:ec:5f:e4:b3:8d:7d:ee:0b:60:13:a0:8a:e6:
         b8:a5:20:b9:e4:28:90:17:2b:6e:b3:be:ce:7a:38:7a:15:d0:
         d1:b6:46:15:0d:da:06:76:df:70:b8:d7:2b:c0:2c:10:5e:6e:
         26:3b:a6:be:3c:86:3d:4c:9e:05:20:c1:6e:c0:d7:87:96:a9:
         21:1d:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:33 2025 by rpki-client