Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8822875-887a-3d40-b455-77144b54ea6f.roa
File:                     e8822875-887a-3d40-b455-77144b54ea6f.roa (raw, json)
Hash identifier:          R0MWBfkIrZbtqKC8StKGD0YKH+tnX5m8vs2SS3o7Yis=
Subject key identifier:   AA:E1:3F:40:7D:1C:B1:9C:F1:F7:0B:F6:0F:C9:40:FE:C9:D8:83:B2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C50A232016BA6FBAA5500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8822875-887a-3d40-b455-77144b54ea6f.roa
Signing time:             Tue 22 Jul 2025 12:41:15 +0000
ROA not before:           Tue 22 Jul 2025 12:41:15 +0000
ROA not after:            Mon 20 Oct 2025 12:41:15 +0000
asID:                     396599
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:50:a2:32:01:6b:a6:fb:aa:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:15 2025 GMT
            Not After : Oct 20 12:41:15 2025 GMT
        Subject: CN=f94df578-5f77-4efa-b925-75e29cf84367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:80:d4:7a:b3:86:63:8e:be:b4:f1:ca:6a:1b:
                    d9:f8:d5:6e:08:af:f8:fa:62:9a:db:87:05:71:27:
                    d3:60:96:1e:48:ba:64:ec:30:fb:33:c7:24:82:b3:
                    35:90:20:f2:f6:75:c3:9c:1a:85:d2:86:65:28:d7:
                    c4:2a:7e:ba:15:b1:31:13:00:25:06:2c:30:30:5d:
                    d1:4f:26:b7:30:1e:eb:db:26:cf:e1:16:76:c6:a2:
                    1b:e3:40:25:9c:65:dd:75:cc:75:68:c0:4e:4f:ae:
                    cc:75:4d:8a:ba:fc:e5:e6:e0:87:be:81:2f:46:4c:
                    78:36:dd:70:94:07:d7:9e:fa:1a:53:d8:1a:92:34:
                    eb:10:87:69:0c:21:f8:e0:0a:b0:28:e0:1f:8f:8d:
                    8c:7b:01:6e:4b:5b:dd:a7:1f:3f:34:d7:ec:c7:13:
                    57:fe:db:61:bd:86:c0:93:ae:b6:e1:82:ae:39:d6:
                    16:11:6e:3c:be:4d:df:3b:e1:44:f6:a3:a7:6f:18:
                    5c:97:7a:b3:be:1b:6c:69:af:f9:dc:72:69:0f:df:
                    1d:10:88:c6:f4:83:c4:d6:28:b3:54:3f:57:99:a1:
                    5f:d7:49:2b:46:1e:f5:a3:97:3e:1c:f2:e8:fc:28:
                    ef:0f:c1:1f:d0:ba:ef:3f:9b:aa:78:38:d1:a4:d2:
                    60:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E1:3F:40:7D:1C:B1:9C:F1:F7:0B:F6:0F:C9:40:FE:C9:D8:83:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8822875-887a-3d40-b455-77144b54ea6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:b1:4b:71:49:db:08:91:f7:02:c5:7c:b8:de:9c:44:e6:ba:
         f0:9e:ca:95:59:7e:8a:fd:6a:8d:67:ac:71:af:20:4c:4d:82:
         75:8c:51:1f:33:f7:69:24:d3:cf:d0:a7:dc:2d:13:f0:9b:e2:
         4e:a8:37:5e:a3:bd:96:b3:b7:fd:4a:5a:57:12:22:c7:e0:6d:
         f3:6f:8c:2d:29:fa:8f:5d:b5:86:e7:3c:90:7b:1f:2f:c0:6d:
         d3:21:54:5b:b5:65:bd:f3:d4:78:49:1e:6d:64:a1:63:f5:b9:
         12:8d:65:bf:49:54:75:5b:ec:cc:c6:56:d3:51:55:ea:a2:97:
         7a:76:f9:5b:9c:f3:53:49:03:fc:b4:4f:f1:0e:e0:7e:e4:2a:
         f7:5a:93:8b:2f:3b:07:18:ff:db:72:f2:9a:bd:06:e5:61:7c:
         41:2a:2d:65:38:bd:15:31:10:45:bc:fa:94:27:d7:97:af:25:
         be:0b:f4:89:e7:2f:b9:3a:04:9e:34:eb:f4:e3:2e:dc:06:24:
         9d:42:82:41:d8:65:dc:aa:e4:61:96:f2:d8:8d:5e:a6:0b:04:
         e6:53:5c:a4:35:06:e2:a6:6f:d8:38:fc:1c:79:6e:e0:a5:d6:
         e2:b4:f0:3e:aa:dd:4a:53:75:14:1e:ff:05:76:49:ea:aa:ab:
         49:25:33:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:30 2025 by rpki-client