Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0616569-464f-35d0-ad47-65a16ad97d6a.roa
File:                     a0616569-464f-35d0-ad47-65a16ad97d6a.roa (raw, json)
Hash identifier:          H7pbXK8VYTrGjfCSKTyOYC8s/q68Nivrgg9jePLejdU=
Subject key identifier:   C4:B7:92:39:3B:5C:F8:21:6F:AA:A1:15:22:54:A0:3F:55:97:22:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E60A4FA3FE3BF60B495F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0616569-464f-35d0-ad47-65a16ad97d6a.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     396583
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:0a:4f:a3:fe:3b:f6:0b:49:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=592084a2-7184-454f-96ab-ff7fbd683b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a8:f0:63:84:a3:62:d6:76:4f:83:29:7e:d7:
                    b5:da:d4:32:e6:30:f8:a7:fd:7d:4f:61:ef:90:b3:
                    1e:cb:d8:d9:96:44:47:ac:e3:e9:e2:03:7c:66:64:
                    c7:43:f8:0d:8b:26:b3:32:a1:a5:89:ba:13:33:24:
                    01:3c:fe:34:83:04:e7:ec:d2:3d:9a:9d:07:40:de:
                    bf:51:cc:ea:f3:e2:c9:2b:0e:91:fd:55:9e:b6:16:
                    f8:da:8e:e8:b9:ac:a8:2e:49:78:e2:e1:35:6d:f7:
                    08:84:8a:35:bd:30:b7:13:0f:53:f5:bd:3a:d5:e4:
                    7d:84:a8:fb:c2:f6:ab:be:82:41:b0:8a:2c:43:6d:
                    d9:8f:ad:23:b5:03:71:d8:29:05:4d:e3:f8:00:89:
                    12:02:09:dc:0d:11:98:08:57:27:b0:52:c1:7d:8d:
                    1c:58:87:32:79:df:f8:4e:13:f8:b5:da:5b:9a:77:
                    ac:6f:bc:ba:a2:22:a8:f3:66:e3:2c:5a:4a:25:8d:
                    99:ad:67:d3:cd:4a:26:1d:29:92:d6:4c:b3:55:c3:
                    00:47:48:27:02:75:ac:df:4f:c8:f5:bb:50:5d:8f:
                    49:c8:85:57:8f:fb:1e:79:0d:97:09:b4:23:db:06:
                    c2:db:f6:17:3a:49:f6:70:31:e5:7e:bf:a9:34:d3:
                    f6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B7:92:39:3B:5C:F8:21:6F:AA:A1:15:22:54:A0:3F:55:97:22:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0616569-464f-35d0-ad47-65a16ad97d6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:82:c7:f5:1a:a0:b0:20:8d:0d:37:00:12:45:20:ef:0d:a1:
         02:fd:a3:0d:ea:d8:93:2c:c7:51:2c:86:70:48:9f:67:41:a5:
         62:36:2d:8e:54:90:ad:8a:a8:c2:f0:4f:f9:68:a8:95:b9:a9:
         ee:eb:e3:23:04:e7:fe:fe:e8:9b:b5:37:04:34:c0:f0:2b:b2:
         cd:d9:f1:49:e3:cb:1a:ad:35:23:f8:ee:ba:8e:2a:dd:0c:4b:
         73:4a:25:78:51:26:cd:0b:67:1b:08:ec:9d:a1:b9:0b:b1:39:
         92:4f:ca:bd:ea:01:a6:1c:15:eb:c3:16:d9:2a:02:62:f6:7f:
         95:2f:a7:ea:2c:31:c8:45:58:53:e7:9a:42:74:18:b3:c9:6e:
         99:ff:ec:ab:db:c0:f4:53:9f:81:ed:14:c8:0e:b3:6a:2a:dd:
         83:d4:73:23:cd:56:2c:93:6e:09:c1:a2:4d:01:f7:0c:2a:fb:
         0c:a2:fd:4c:e9:07:83:ff:a4:d3:57:e6:e6:b5:5d:3b:09:dc:
         a4:f0:56:85:8a:58:a5:28:e8:3b:64:21:ea:85:ee:de:0c:15:
         3b:99:2a:f4:4d:10:e6:cf:a1:75:2a:45:03:c7:92:3f:38:d8:
         86:1f:7b:a9:e5:f1:e8:3c:96:62:ca:4a:cf:03:07:9d:8d:25:
         b1:56:8b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 11:03:08 2025 by rpki-client