Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e220c247-6f82-31fb-8588-bc274c6b86e6.roa
File:                     e220c247-6f82-31fb-8588-bc274c6b86e6.roa (raw, json)
Hash identifier:          u7oIKGRdCt75B2ouJ5IZrsDt9fyu+zrdi+sHaLbGNDE=
Subject key identifier:   17:1C:3B:06:C2:A1:54:F6:1C:FB:D8:5D:25:EA:48:AC:BE:B3:08:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A86CFA3469F9FA6590B6D4BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e220c247-6f82-31fb-8588-bc274c6b86e6.roa
Signing time:             Tue 15 Jul 2025 12:37:27 +0000
ROA not before:           Tue 15 Jul 2025 12:37:27 +0000
ROA not after:            Mon 13 Oct 2025 12:37:27 +0000
asID:                     36631
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:cf:a3:46:9f:9f:a6:59:0b:6d:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 12:37:27 2025 GMT
            Not After : Oct 13 12:37:27 2025 GMT
        Subject: CN=05155e25-cce2-4f8a-9fd7-62ecfbd5eb08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:91:23:2a:e9:3f:4d:e2:2f:f9:24:00:31:75:
                    f9:20:a6:98:30:99:4e:d8:11:2f:c7:d7:54:67:95:
                    eb:39:a1:76:9c:cc:e2:f7:ac:52:5a:57:dd:40:d5:
                    67:cd:66:28:16:2b:28:54:b2:a3:c1:86:94:b4:4d:
                    51:b6:a9:de:af:33:f6:a9:22:dc:bf:76:04:0c:a6:
                    6f:b9:0d:b5:59:62:ec:89:00:39:16:a5:b5:47:8c:
                    6b:6b:13:99:77:7c:c1:24:32:42:48:b9:13:4c:1a:
                    3e:5c:f7:c4:44:ed:30:c5:df:bb:05:0d:62:96:0e:
                    9e:17:f9:95:80:eb:49:cd:18:1c:cd:58:e1:37:bd:
                    0f:ba:02:ab:8b:23:5e:0d:cd:fb:1d:4b:ce:6c:e4:
                    7a:f3:96:e9:a7:ba:78:12:5f:a8:4a:f0:cb:e0:eb:
                    08:d8:c6:3e:14:9f:e2:ae:e7:db:21:43:08:a6:94:
                    4a:c9:d4:ed:e1:c3:4f:d8:26:1f:21:59:fc:e5:7c:
                    3a:e0:f8:0b:e5:77:7a:e7:73:bd:57:a4:10:35:1c:
                    a8:e9:16:fd:a9:dc:00:c9:37:e7:cc:19:d3:12:eb:
                    91:e1:4c:16:80:fc:02:84:37:7d:eb:10:c6:84:c1:
                    e0:c3:f2:c7:18:c3:d1:fb:f2:02:03:2c:81:3c:36:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:3B:06:C2:A1:54:F6:1C:FB:D8:5D:25:EA:48:AC:BE:B3:08:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e220c247-6f82-31fb-8588-bc274c6b86e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d9:82:23:f3:ba:b7:20:71:c1:10:e3:a8:2b:62:82:25:e3:
         e7:9b:59:23:51:92:59:bf:52:17:4b:99:b6:c5:10:98:6f:39:
         6c:e2:c2:9f:65:4b:ae:87:5b:fd:04:77:51:6d:b3:ee:fc:db:
         f0:1e:00:d4:99:14:6f:74:84:92:ae:71:65:61:a3:66:3d:bc:
         3a:7b:ab:ab:74:5a:c5:ca:d0:8b:b1:60:13:15:24:d2:3e:a1:
         7f:2e:12:35:df:e6:d5:9d:ae:22:5e:e0:77:ee:13:05:47:25:
         21:4d:dc:68:d7:06:2a:f9:19:75:cd:22:fd:a6:ac:bf:61:39:
         74:ab:d0:48:64:61:41:88:76:70:97:0f:b8:4d:9b:5e:4e:19:
         3d:1d:b5:8b:89:f5:bf:15:90:13:71:89:b1:3d:42:dd:47:34:
         b2:d3:51:85:d6:82:51:a1:cd:f3:60:88:27:9d:bd:1d:28:82:
         93:f9:94:8a:de:b7:05:64:84:80:65:0f:17:65:b4:98:a5:ec:
         f8:d5:7f:24:2b:ca:64:97:c0:76:95:eb:b7:6d:97:cd:69:2d:
         e0:20:7a:6c:a5:bc:23:17:f5:55:dd:bd:20:d2:b5:d1:e2:6e:
         ac:c1:b5:6b:93:71:e6:a6:d0:32:72:d7:25:f0:38:b6:19:c8:
         f0:88:be:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:13:25 2025 by rpki-client