Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/091a41a4-d96a-3c36-b5b0-906fc00d8bfd.roa
File:                     091a41a4-d96a-3c36-b5b0-906fc00d8bfd.roa (raw, json)
Hash identifier:          +gWdDPl2WIEtcisBbnbh/KOgjacnUrqIyA/Sq75WVC8=
Subject key identifier:   C2:32:5D:26:C9:9C:F2:B8:7A:96:01:D7:91:32:8F:47:C8:6A:1F:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7344CE9237AA93520442BA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/091a41a4-d96a-3c36-b5b0-906fc00d8bfd.roa
Signing time:             Tue 08 Jul 2025 12:37:22 +0000
ROA not before:           Tue 08 Jul 2025 12:37:22 +0000
ROA not after:            Mon 06 Oct 2025 12:37:22 +0000
asID:                     25485
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:73:44:ce:92:37:aa:93:52:04:42:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 12:37:22 2025 GMT
            Not After : Oct  6 12:37:22 2025 GMT
        Subject: CN=ab326109-bac9-43c0-b7ea-2a60d61adbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:43:7d:f6:80:31:62:72:e8:01:15:01:f8:
                    46:d6:3f:bd:e8:a3:df:24:1a:bb:6b:0f:36:ed:6b:
                    e8:8d:67:36:9d:e8:c7:1e:68:90:f5:27:e6:f2:15:
                    e3:e2:44:96:ba:1c:82:be:96:13:e7:85:fe:7f:8a:
                    db:14:96:66:88:67:b3:46:4e:0a:e8:bf:d5:52:5a:
                    40:a4:f4:2f:31:4c:95:7c:11:a2:c5:f6:77:72:76:
                    21:b6:ee:12:b9:f3:3d:c2:fd:96:e0:3d:86:d5:b8:
                    0b:f9:cb:c1:ad:a0:d4:eb:11:ab:50:bf:d5:36:f6:
                    88:19:0a:90:69:e4:1f:b2:f5:ec:95:5b:0c:22:3f:
                    13:bf:80:bf:82:bb:30:0d:ad:c2:ef:4b:3f:10:17:
                    74:e3:14:a9:bf:73:3d:a3:91:a8:37:76:4b:6c:65:
                    cc:80:03:cf:64:d4:f3:fa:47:ec:93:e0:e8:d0:0f:
                    29:4e:4f:ee:e7:bd:a3:f0:1b:1a:47:b0:99:70:ed:
                    51:2c:4f:da:e9:ff:9e:a1:c5:2f:c1:00:c8:f3:6a:
                    64:1b:fc:2f:43:e1:8e:57:62:db:dc:20:6e:3c:39:
                    23:ec:d0:c4:6b:b9:0f:33:03:c5:7d:ca:4e:ff:1f:
                    b9:80:03:95:50:9b:a7:ff:d0:57:bb:8f:0f:cd:c1:
                    fa:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:32:5D:26:C9:9C:F2:B8:7A:96:01:D7:91:32:8F:47:C8:6A:1F:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/091a41a4-d96a-3c36-b5b0-906fc00d8bfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:59:2e:62:16:7b:58:80:fb:dd:96:da:db:68:75:01:ac:8b:
         d8:c6:e0:42:0f:dc:30:ad:29:40:8a:51:3b:04:4d:38:0d:9d:
         59:c3:40:b3:b4:de:1a:1c:05:16:b2:d6:ab:8b:d3:a5:b2:a9:
         5d:53:e8:00:24:68:48:6a:54:30:cb:2c:d8:51:6e:34:79:87:
         e7:69:45:f6:03:35:b9:b4:dd:62:60:6e:33:34:6e:01:fb:61:
         a9:61:e6:a0:51:6b:53:59:7d:0b:81:3f:52:95:2a:50:34:6c:
         e0:17:b0:24:39:fa:86:a3:e1:79:2d:fe:23:54:d1:e9:08:39:
         c7:d7:c0:97:e5:13:8e:cf:97:15:64:39:03:a6:e4:3f:87:f4:
         48:14:98:75:5f:95:90:99:fd:62:b7:56:46:6b:91:44:39:70:
         67:5b:7a:7f:10:08:02:ac:c7:90:74:f9:42:92:c7:7c:92:22:
         f7:04:e0:a6:3a:4d:06:c6:11:3d:e4:15:87:30:e8:08:42:5f:
         ec:4c:cf:19:96:c8:de:31:c9:13:3a:32:c7:57:b8:94:39:4a:
         56:d2:dd:00:1d:70:a4:4a:da:5f:b0:da:17:f7:a8:c3:af:5e:
         4a:8a:5a:09:37:95:60:7d:42:63:d7:ee:bb:5e:b5:8d:78:ee:
         06:67:d3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 21:19:32 2025 by rpki-client