Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27ad6d2-caea-3bee-908f-9364fdc1f43b.roa
File:                     a27ad6d2-caea-3bee-908f-9364fdc1f43b.roa (raw, json)
Hash identifier:          QopgG5l/s5OVplqsekUsfEyPNToXJbZTCsDDnTc4HUY=
Subject key identifier:   BC:60:A4:0C:22:F0:E0:D0:86:6B:D8:9A:E5:67:50:03:34:85:3F:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290890DCB208055972F53A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27ad6d2-caea-3bee-908f-9364fdc1f43b.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396544
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:89:0d:cb:20:80:55:97:2f:53:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=b766939a-706b-4942-9d0f-b63fe612cb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:da:65:d7:55:8f:6e:2f:65:79:d9:8d:3d:
                    bc:0b:e0:85:42:29:93:5a:a2:7a:14:a1:27:99:e6:
                    62:78:ec:f3:f8:7c:b4:fd:8a:e1:b3:84:d8:c9:40:
                    ac:36:c8:51:09:54:14:37:f8:4d:68:76:aa:e8:70:
                    51:c4:7d:60:bb:89:6a:55:eb:0a:ae:bc:1b:d4:97:
                    b6:05:10:80:11:19:c5:d0:b3:e3:43:f4:a9:4e:fb:
                    4a:9a:41:7d:15:82:ff:ca:aa:33:76:25:d6:fb:e5:
                    60:53:e5:ac:6b:37:d4:cb:a6:91:98:e3:d7:07:5c:
                    48:9a:bf:b8:52:9f:b9:1e:cb:d8:ac:a0:4e:b4:04:
                    d8:63:c4:a2:28:55:19:36:dd:23:77:1e:c0:92:f4:
                    50:6a:cd:54:7d:5a:65:44:87:47:cb:88:13:d2:d8:
                    c2:b1:c9:9f:70:b6:23:7a:05:52:7e:8e:42:dd:73:
                    15:4c:f5:1e:be:ed:9d:78:66:ca:70:90:90:3b:4d:
                    4d:16:51:3d:69:f2:4a:af:13:f8:81:12:7b:95:1c:
                    ec:57:81:67:b2:68:af:46:9a:89:05:51:14:ab:85:
                    9b:0c:48:48:30:e4:9c:2a:af:cf:81:a8:d9:f6:39:
                    cd:c8:d0:fa:0b:48:1b:d6:ea:65:1a:6b:ff:63:10:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:60:A4:0C:22:F0:E0:D0:86:6B:D8:9A:E5:67:50:03:34:85:3F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a27ad6d2-caea-3bee-908f-9364fdc1f43b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:fc:a0:1e:5b:3d:29:9d:25:4b:b9:39:6b:5b:1b:37:df:3d:
         f6:af:12:c2:47:45:ed:2e:02:97:82:5e:e2:df:b1:ce:57:82:
         e7:2d:7a:b1:94:d7:ae:1a:2f:a1:12:5a:3d:e0:c0:6e:dc:91:
         ff:7e:4c:30:f7:fb:1c:6d:a5:a3:00:2b:ca:6d:6e:a8:3e:59:
         30:be:54:1b:9d:45:c9:66:5b:7a:6b:a3:2e:c2:75:f2:ab:63:
         02:d4:e2:11:f7:03:79:57:61:78:5c:1e:6c:7c:35:3c:49:b3:
         48:df:1a:bb:af:bc:66:51:a4:64:07:cc:18:9a:da:ec:59:49:
         bd:a2:47:f1:52:53:f4:b5:cb:2d:cb:bd:dd:15:2a:ed:ed:ad:
         c4:36:d7:1b:44:df:56:b0:1a:d8:4b:46:93:d2:4a:97:5a:7c:
         83:8a:c3:d0:d6:ab:79:14:96:6a:f6:45:ca:d0:f6:ea:d2:15:
         f2:f1:22:ac:80:25:33:97:09:44:5b:fb:93:80:10:77:87:f1:
         e5:9c:86:f6:3b:31:5e:36:47:39:f0:f3:4f:55:d1:7d:3a:5f:
         78:4a:d1:67:37:5f:24:bd:3d:60:23:72:b4:e7:18:05:e4:13:
         8d:ff:04:94:fa:af:0a:71:1c:dd:0f:07:44:94:9a:38:ea:1c:
         05:b2:29:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:30 2025 by rpki-client