Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06b13a1a-c4d1-350c-812f-155a6cf8f16f.roa
File:                     06b13a1a-c4d1-350c-812f-155a6cf8f16f.roa (raw, json)
Hash identifier:          ws+9k2wt/hbIrE/tsw3SXjTdVDQcL/lhOJLfb3VQwXc=
Subject key identifier:   84:56:A1:12:7C:13:44:41:06:EC:99:70:6A:2E:C3:25:BF:72:AE:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B98724DC8F06ABCB0E65C1340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06b13a1a-c4d1-350c-812f-155a6cf8f16f.roa
Signing time:             Tue 21 Oct 2025 13:00:39 +0000
ROA not before:           Tue 21 Oct 2025 13:00:39 +0000
ROA not after:            Mon 19 Jan 2026 14:00:39 +0000
asID:                     396540
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:72:4d:c8:f0:6a:bc:b0:e6:5c:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 21 13:00:39 2025 GMT
            Not After : Jan 19 14:00:39 2026 GMT
        Subject: CN=5c83f515-ac48-4253-8b9c-3f9eb228fc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:71:eb:1f:37:44:cd:80:d8:65:d6:e1:64:
                    2d:9e:59:f8:9f:9d:64:69:ae:7b:10:27:32:89:3e:
                    8c:aa:ec:14:1b:4f:d1:3f:64:82:0d:83:cf:b8:95:
                    0c:4f:63:f9:4b:46:99:15:56:f7:c0:20:a1:ae:b1:
                    35:03:cc:a0:b7:28:c2:7f:eb:66:10:83:d9:82:fd:
                    4c:ca:25:8c:01:99:3e:fd:3b:be:87:8d:d0:af:36:
                    56:cf:3a:a9:01:c8:cd:34:37:eb:cb:ee:55:2a:82:
                    ad:63:32:87:02:3f:8a:3f:79:51:3e:36:70:a0:0d:
                    fa:1e:57:22:f3:e3:23:d6:8a:87:6b:60:05:55:96:
                    ff:91:fb:ba:ac:15:34:37:a1:f6:5b:17:c6:e5:3a:
                    81:85:e6:89:51:c3:40:e4:a1:2a:76:ab:bc:47:52:
                    45:c4:1f:f4:ad:6c:8d:76:81:21:d9:9a:d5:37:13:
                    69:0d:93:39:0c:cb:a3:73:b4:59:08:fb:b4:ec:55:
                    8d:c5:77:b1:0c:01:cf:93:2d:29:4c:73:48:09:1f:
                    34:cc:e3:dd:38:94:0e:57:8a:41:8b:0d:47:a5:b1:
                    ea:44:8b:f6:47:12:ff:03:e9:d8:da:03:35:32:ba:
                    12:69:b5:89:c8:6e:5c:48:73:fd:99:12:80:bc:e3:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:56:A1:12:7C:13:44:41:06:EC:99:70:6A:2E:C3:25:BF:72:AE:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06b13a1a-c4d1-350c-812f-155a6cf8f16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:97:c6:e2:b8:e5:e2:fe:96:ca:39:5f:9b:77:3d:ef:bc:c5:
         0b:60:9e:de:e6:c8:cc:3f:4f:92:67:0e:a3:ba:d8:c2:75:61:
         86:4e:c5:fa:26:de:7f:e8:69:df:bd:5b:02:a1:14:c0:49:65:
         70:28:29:12:0c:84:47:f0:24:96:43:15:be:bd:7b:0c:0e:c9:
         05:d1:f7:b4:b1:3b:fc:02:01:ed:b0:a0:80:6f:49:b7:ce:43:
         8d:91:39:a6:69:fc:d8:6d:00:d5:bd:61:55:75:57:ca:20:69:
         98:41:da:9d:cb:da:4b:4d:0f:c0:5d:ec:03:d7:84:e7:bd:49:
         23:7d:67:2b:cb:98:37:d6:90:2b:71:c9:e9:3e:10:f4:f6:74:
         a3:7e:91:75:48:46:7c:b1:12:da:11:a5:85:3e:a9:fc:ec:15:
         d2:21:79:ef:fa:ce:be:dc:96:05:af:e0:b0:73:b4:30:d5:80:
         2e:68:e6:e0:05:99:b8:ba:cb:b9:7b:53:00:2b:2c:11:53:6e:
         04:fe:6c:97:5c:5b:b3:60:b1:75:61:ac:6b:0f:aa:e4:fa:f9:
         42:e7:2b:56:ea:d1:1e:36:cf:5d:c1:cf:6c:33:f9:88:9d:35:
         5b:e2:65:32:ce:b2:a7:f4:e7:e9:b1:b6:98:04:9c:0d:6b:5a:
         10:e1:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 07:12:26 2025 by rpki-client