Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c5dd26c-e974-3355-bbfe-11a37a4a701c.roa
File:                     1c5dd26c-e974-3355-bbfe-11a37a4a701c.roa (raw, json)
Hash identifier:          xEJubGhp8hZ/MxKCZQrvCRkjXost5NAaqsBL3JHzTg0=
Subject key identifier:   28:E4:4A:C6:B1:1F:43:55:C8:E2:91:DC:B2:A9:1B:5F:0D:FA:E6:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AFC0DCE2949B0612B7BABD980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c5dd26c-e974-3355-bbfe-11a37a4a701c.roa
Signing time:             Tue 26 Aug 2025 12:32:17 +0000
ROA not before:           Tue 26 Aug 2025 12:32:17 +0000
ROA not after:            Mon 24 Nov 2025 13:32:17 +0000
asID:                     20431
IP address blocks:        2001:502:7094::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:0d:ce:29:49:b0:61:2b:7b:ab:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 26 12:32:17 2025 GMT
            Not After : Nov 24 13:32:17 2025 GMT
        Subject: CN=218e686f-fe17-451d-b1bf-8b2db2da9155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:04:80:78:03:92:9f:a4:64:54:22:3e:9a:
                    60:92:6e:8f:36:77:39:bf:b0:a5:2c:b0:9f:4f:20:
                    ca:c6:16:96:4b:0e:e4:22:4b:fb:cc:90:40:27:fe:
                    56:dc:a9:e5:ce:0c:28:8d:d6:1d:fe:be:83:71:ce:
                    84:1c:fa:9f:47:58:c7:3f:d4:14:0b:09:58:98:d2:
                    06:bd:70:ee:ff:99:65:54:0b:56:ea:31:6e:35:de:
                    2e:23:eb:0f:04:a6:74:c2:8e:88:0b:58:43:7a:8d:
                    cc:29:e9:8e:f5:d7:4c:a3:71:0a:91:14:dc:95:ca:
                    61:61:3a:ff:05:ad:b3:2f:10:6f:b2:69:21:01:77:
                    18:68:1d:41:22:41:9f:a9:5f:59:2c:15:ec:f7:14:
                    61:e9:3a:45:6c:81:b2:39:d1:b4:55:f3:ea:39:20:
                    1e:1e:e0:e1:1f:4a:a0:a2:59:9e:48:b4:6f:55:4e:
                    fa:98:10:79:b3:50:37:0b:a2:90:a1:8b:66:ba:24:
                    b0:ea:a7:00:9c:39:b9:06:2d:52:f9:f8:c3:65:3a:
                    27:3b:42:ed:17:b9:2c:38:0d:bd:44:eb:b2:d2:5f:
                    9f:5e:4e:e7:64:2d:5d:5d:e8:58:03:ae:95:bb:d5:
                    cf:fb:27:d5:34:70:6a:03:38:37:bf:62:bd:4e:8c:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E4:4A:C6:B1:1F:43:55:C8:E2:91:DC:B2:A9:1B:5F:0D:FA:E6:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c5dd26c-e974-3355-bbfe-11a37a4a701c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:c1:fd:37:b7:58:66:44:9d:42:9a:53:74:0d:b0:e2:69:a7:
         a9:4f:3d:1b:e7:02:7f:dd:6e:1c:86:06:b2:d1:09:c1:9d:7a:
         80:79:7b:e1:5e:2b:5c:43:de:5a:c0:af:4e:23:c4:96:6c:48:
         40:d5:79:0e:d6:4a:00:fa:95:54:8f:f9:2a:3f:89:db:ce:ca:
         4d:9c:a3:74:02:59:84:ce:e0:7c:9b:8d:bb:0c:3a:3b:88:e1:
         7d:04:29:45:86:c1:6e:61:6f:59:8f:35:a0:e1:74:c7:61:51:
         ae:0b:06:bc:af:4e:e4:51:1f:66:7c:42:ce:0f:22:00:84:45:
         f7:f5:36:1a:95:c8:99:c3:4e:a7:78:da:f2:ef:4b:20:9a:bc:
         e3:d7:e4:b2:05:12:f3:28:6c:85:75:10:7f:c3:ae:00:4e:4a:
         ab:a7:d1:96:d6:fc:0d:97:c3:cf:16:ad:7f:27:26:2d:7e:c8:
         e6:44:09:c3:13:68:ec:f3:5e:c2:1d:a0:67:8c:bc:af:82:e0:
         03:1d:75:97:76:a1:78:01:03:61:c1:4a:57:bf:ea:65:a9:43:
         3e:b0:4f:31:f6:35:04:f5:34:37:27:5c:d8:63:ec:fd:e9:f4:
         0f:4b:35:af:40:3a:82:ed:e5:26:fb:a2:9d:2d:a7:bb:ad:25:
         0a:24:15:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:50:45 2025 by rpki-client