Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39854961-beff-3820-b846-9897950ce803.roa
File:                     39854961-beff-3820-b846-9897950ce803.roa (raw, json)
Hash identifier:          fZmOZngmrXPDo4Cbz+uv40JDWPMehcD00ROEru9xSlM=
Subject key identifier:   69:78:F6:21:4C:7F:2B:F3:FB:56:61:8C:49:E6:C3:C6:BB:76:BB:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B0CDC17061CB3E9B277E27180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39854961-beff-3820-b846-9897950ce803.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     0
IP address blocks:        2001:500:130::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:17:06:1c:b3:e9:b2:77:e2:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=176dce49-2a30-47dc-bc4b-d740aca73bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f2:46:9e:45:65:0d:6b:ba:8c:05:75:31:cd:
                    1e:ba:b7:83:96:3b:fb:44:5e:07:9e:2c:7d:57:2c:
                    f9:03:3d:6f:bc:98:f8:b3:21:f4:e0:f7:41:2d:02:
                    2a:48:f9:0c:cb:4c:e1:8d:b4:f9:14:80:49:ff:9e:
                    59:62:9b:0d:39:ee:67:c6:4b:5d:fd:a2:5d:7f:95:
                    77:36:6f:42:0f:2c:8c:b8:bf:e5:46:6b:10:81:3e:
                    c6:3b:9a:d6:d6:18:fc:df:f0:2e:ac:32:27:f7:fa:
                    f5:e2:9e:03:8a:6e:00:0f:bb:cd:e7:9d:b7:1b:a1:
                    6b:57:83:fd:50:35:4d:ce:8e:bc:99:0a:89:23:64:
                    85:03:24:d8:6e:94:7c:3d:8b:cf:72:91:75:00:6a:
                    6f:c0:af:b3:f8:2d:84:26:61:d0:8d:fa:fb:85:32:
                    b2:c1:e4:d3:47:0b:c2:af:9a:f0:90:ed:f3:45:b1:
                    41:fd:58:c5:44:89:44:b8:cc:2b:7e:3f:d6:00:36:
                    3f:02:21:fa:e7:8a:6b:21:d9:ed:89:e1:1b:e3:7b:
                    7f:79:24:b8:2a:e8:92:54:2d:a2:8c:c7:11:5b:31:
                    be:21:23:91:ae:f4:b2:2a:7a:c1:9a:16:0f:51:a7:
                    b8:10:f7:e5:5a:7f:b2:46:ba:b6:8c:83:40:32:b2:
                    24:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:78:F6:21:4C:7F:2B:F3:FB:56:61:8C:49:E6:C3:C6:BB:76:BB:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39854961-beff-3820-b846-9897950ce803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:130::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:25:0e:bc:6c:58:6e:62:5c:52:87:2b:ce:3e:f2:94:7e:14:
         62:4e:1b:de:df:ef:f6:1e:db:8e:d4:42:6a:1a:7e:63:9b:c9:
         27:46:06:66:4b:45:90:d7:7e:f5:40:32:3b:c5:1e:62:1c:7d:
         65:5b:f8:67:1e:0b:e3:a5:5c:7e:e4:39:3e:f9:81:c6:e0:31:
         a5:6f:0b:02:57:40:b3:6b:b7:c7:91:6e:10:23:e9:4b:59:46:
         9f:23:7d:f5:97:69:d1:dc:80:15:3f:0e:1c:f0:f1:a6:6a:f0:
         12:76:e4:05:1e:6f:19:9f:e8:24:d4:17:c1:3f:3c:d7:a7:bd:
         cc:62:e9:c1:e8:e0:46:81:c4:d2:72:d9:4a:68:12:2f:5e:9f:
         ef:52:63:3e:ca:ef:60:3c:fc:3e:3b:60:42:e9:fd:6e:60:7c:
         f6:11:cb:80:13:19:94:35:7f:9b:c0:45:3b:b7:71:10:d1:e0:
         a0:5d:e4:e3:c5:f9:b8:6c:1e:ca:a7:b3:08:0e:a9:02:6d:ad:
         f7:66:76:a6:eb:b8:17:44:5b:55:46:09:7a:1b:5f:4c:c1:6b:
         44:62:3c:da:cc:26:ac:19:a7:f3:90:8a:86:d2:ea:9c:87:f5:
         22:61:f0:f6:d0:41:e4:8f:8f:ab:9b:9f:ce:ba:6b:ad:0d:72:
         91:3a:3b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:59:32 2025 by rpki-client