Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb2c20d8-f6e4-30ee-8472-b680d20c9936.roa
File:                     eb2c20d8-f6e4-30ee-8472-b680d20c9936.roa (raw, json)
Hash identifier:          ZR6m+7VpeKX/SZWxbIcSUwRPxmhtT6qDqXt0tJyamIw=
Subject key identifier:   29:95:5E:96:96:5B:7C:24:8C:5A:BC:69:54:F5:52:E4:B5:C4:3F:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A86CFA2BD7BB4DAC9DB45E340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb2c20d8-f6e4-30ee-8472-b680d20c9936.roa
Signing time:             Tue 15 Jul 2025 12:37:26 +0000
ROA not before:           Tue 15 Jul 2025 12:37:26 +0000
ROA not after:            Mon 13 Oct 2025 12:37:26 +0000
asID:                     40647
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:cf:a2:bd:7b:b4:da:c9:db:45:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 12:37:26 2025 GMT
            Not After : Oct 13 12:37:26 2025 GMT
        Subject: CN=221347c9-202d-4922-b399-babc2ed8ee5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fe:50:9e:f7:6a:e0:5c:90:83:6c:74:bc:44:
                    e2:0c:45:c7:8d:58:6a:3b:29:fc:d9:05:18:7a:a6:
                    4d:f7:a4:a3:40:6f:bc:15:c4:f9:28:59:da:80:2e:
                    39:ba:56:0d:04:24:49:83:9d:a4:7e:73:14:12:2e:
                    2e:50:1d:30:5d:19:ef:82:a9:19:24:95:99:75:b7:
                    e4:0b:1a:5c:6f:3a:6f:6a:33:dc:97:04:bd:44:d4:
                    60:1f:04:db:07:21:1f:df:f1:46:16:4f:5c:2e:7b:
                    55:28:0c:67:b9:44:2a:b7:26:8c:2d:a8:d8:d9:c4:
                    f6:be:8c:b1:6d:01:d2:6e:99:a3:1b:2d:a9:ed:a1:
                    67:5e:64:91:37:be:d9:90:3a:23:be:4e:36:79:d9:
                    be:11:bd:40:5e:1f:e5:aa:85:65:34:a5:34:d0:da:
                    c3:18:7e:0f:12:5b:d7:a0:e5:e9:25:b6:85:cc:e3:
                    51:ed:3b:e3:13:24:4c:01:87:f2:e4:ff:a3:e0:78:
                    b5:01:44:f1:ac:36:d4:db:d9:48:29:44:52:bd:61:
                    45:56:9f:a8:a2:4c:a8:1a:48:59:d4:9c:da:65:bc:
                    31:27:40:3b:ad:b5:6e:d2:1f:f8:e8:fe:8a:3a:ca:
                    94:bb:68:69:3a:5c:5c:fd:8d:31:3c:df:fe:2b:69:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:95:5E:96:96:5B:7C:24:8C:5A:BC:69:54:F5:52:E4:B5:C4:3F:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb2c20d8-f6e4-30ee-8472-b680d20c9936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:83:a3:a9:1b:99:b6:b4:45:2d:f4:ac:d8:4f:9e:c6:03:59:
         d3:09:40:d1:aa:16:0c:20:58:9f:47:bc:22:42:0b:bd:81:a7:
         dc:26:0c:ce:9d:72:a9:4a:81:53:62:e7:4d:4c:52:91:5b:12:
         55:52:9f:a2:24:45:95:b8:72:47:06:5b:0d:3e:f0:40:21:35:
         37:6b:1b:ef:96:58:08:d8:04:4b:ba:e7:41:62:8e:5d:d3:1e:
         76:9a:0d:a3:e7:29:38:a3:1b:2e:99:ee:cc:a5:1d:d1:b9:3b:
         9e:62:b2:fb:a6:05:b1:27:9d:46:87:7e:df:18:88:03:41:0f:
         10:08:f9:c2:55:f4:86:ae:e6:27:3d:5c:9a:44:71:b6:be:a3:
         90:60:49:9f:2b:5a:8e:76:89:da:32:f0:79:4a:8c:2e:c2:90:
         12:dc:6e:52:ff:7c:4c:62:3a:a9:d2:6c:e9:c5:37:e7:14:ba:
         fd:ae:5f:ec:1c:9c:54:7c:cb:15:0f:e2:74:5b:64:65:34:6e:
         ec:ec:9a:9e:e8:70:21:61:13:fc:16:04:9e:af:7e:e7:35:67:
         c5:66:21:b8:80:15:be:65:8c:4f:28:96:bb:30:a1:82:b0:67:
         d2:68:78:d1:d6:85:e4:59:1d:75:c3:52:02:73:0b:bc:fa:37:
         ec:e4:ad:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:49 2025 by rpki-client