Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64ebef26-6bb3-3919-ae1b-d8909a13439d.roa
File:                     64ebef26-6bb3-3919-ae1b-d8909a13439d.roa (raw, json)
Hash identifier:          Yy0ivfcg8gqznbcGPQiDbhoQncTL23y2pfZdl1sTLu4=
Subject key identifier:   AB:97:12:7C:E7:AD:46:47:A8:A5:32:BE:15:70:84:EA:35:70:4F:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF6869D5B2B4B3CE7356AF130
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64ebef26-6bb3-3919-ae1b-d8909a13439d.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     27544
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:9d:5b:2b:4b:3c:e7:35:6a:f1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=e3e2560a-be8a-4dd5-b498-233617ed6633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:95:33:ee:4b:88:97:b2:78:08:9c:e7:b8:d3:
                    bf:dd:ba:4c:7a:49:84:5b:56:ed:08:93:ad:28:e0:
                    77:67:45:e3:e8:67:cb:ea:28:a2:c5:06:f7:e7:92:
                    2c:d5:08:9c:10:60:ad:79:48:8a:db:a0:10:a9:93:
                    69:f6:c0:9b:99:9d:5c:eb:3e:21:7b:7a:b9:18:9b:
                    ef:81:1d:ca:46:f0:61:ad:01:95:45:8f:9e:bf:63:
                    8f:96:03:90:7f:69:75:62:ae:27:c7:be:60:21:02:
                    d6:e0:e1:93:95:03:36:42:11:bc:4c:3a:2c:96:e2:
                    d3:59:42:e5:c1:f8:59:f2:48:f7:95:84:63:04:72:
                    23:3f:b8:ee:26:3d:c4:2c:d2:61:dc:5c:b3:56:11:
                    77:20:2b:28:26:b3:59:4c:91:5d:de:77:17:cb:a3:
                    14:e9:3e:9a:fb:36:df:db:13:d6:3b:02:3e:c8:d0:
                    4f:56:1c:c9:a3:33:9e:ab:1f:d6:e1:ea:d7:93:70:
                    3e:02:ac:a6:f1:6f:6b:ef:b2:1a:21:c8:be:85:4c:
                    ef:d2:f3:c6:4c:34:22:4a:6c:61:a2:3b:f1:37:95:
                    0e:62:52:de:ee:3f:77:e1:a6:8f:fd:f0:f2:d7:37:
                    e7:c3:72:69:6f:af:47:30:7a:7b:6e:04:6c:3d:60:
                    fe:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:97:12:7C:E7:AD:46:47:A8:A5:32:BE:15:70:84:EA:35:70:4F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64ebef26-6bb3-3919-ae1b-d8909a13439d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:65:74:a1:ce:45:b5:b8:3c:29:9c:c9:56:3b:ec:6a:af:9e:
         95:03:3f:ae:91:35:c1:e1:11:ce:c0:e2:6b:2f:0c:dd:aa:5f:
         7e:65:44:d3:02:00:c8:5a:48:d0:15:37:ac:95:74:56:10:cd:
         f8:1c:23:84:ac:bf:e9:e2:c7:21:21:c8:77:c5:e7:cd:e2:c6:
         d9:5c:22:a4:ef:46:70:0f:78:64:49:e2:d1:54:10:cf:95:13:
         06:09:5e:fe:9a:c9:93:d4:7f:f8:5f:94:80:25:aa:bc:d1:c2:
         1a:97:96:85:51:e4:ce:5e:3b:fd:7e:2e:01:63:e6:66:75:4d:
         ac:61:4d:06:43:95:7e:31:f9:5c:28:e3:0f:23:a0:90:aa:e4:
         cb:8a:6f:30:a1:00:2a:a0:93:ba:7f:e3:f9:ed:15:62:2d:53:
         93:d7:e5:e5:41:87:1b:95:76:7c:4b:f1:65:7b:70:c5:38:24:
         46:90:54:77:27:f0:04:42:86:70:fa:d9:c6:c3:b6:af:52:05:
         f5:6e:6a:b0:44:c0:48:1b:c4:58:b1:60:65:97:75:8e:9b:b0:
         e8:38:a9:cb:80:91:fc:88:d7:df:b2:05:41:83:1e:c3:69:9e:
         7e:cd:49:a3:32:6a:cb:ae:59:54:97:db:6d:fa:a1:29:b4:80:
         7f:8b:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:50:45 2025 by rpki-client