Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7de99d32-945d-3dcd-993b-8763776e54b8.roa
File:                     7de99d32-945d-3dcd-993b-8763776e54b8.roa (raw, json)
Hash identifier:          MJXHIi4cvqqCtSDNJepObzc7pLOXvHTVxEMCEwh4MYo=
Subject key identifier:   C7:33:9A:07:73:EB:E6:F5:EC:16:25:F9:C8:0D:AE:25:E5:E8:13:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C285B000715BCC3F3FA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7de99d32-945d-3dcd-993b-8763776e54b8.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     397210
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:28:5b:00:07:15:bc:c3:f3:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=778a2c91-c0b0-46d0-adc7-99d4b6946473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:1a:75:16:6a:86:2d:ef:3a:a0:71:41:3a:
                    9a:ba:72:3b:5b:da:37:3e:52:5b:a7:48:ee:79:78:
                    84:15:e5:09:6d:af:99:da:4c:78:2c:0e:6d:7c:61:
                    59:5e:2a:7f:79:09:28:91:aa:34:82:90:41:e1:a2:
                    d1:46:3f:10:31:62:59:be:dd:e6:90:a3:ba:5b:09:
                    c5:7f:61:7e:ef:cb:60:59:e1:02:86:7a:05:89:6d:
                    e2:db:4d:5a:63:93:d8:9a:11:9d:48:4c:4c:5c:6f:
                    0a:fc:98:ce:2e:c2:26:09:8e:73:3f:34:19:2e:4c:
                    67:b6:48:4f:bd:b4:ba:d2:93:15:be:ea:4b:3f:85:
                    53:1c:e9:21:0a:d2:b8:30:d7:ac:bf:0d:1a:57:fe:
                    19:72:f7:7c:21:33:61:e5:23:a6:28:5e:15:f5:75:
                    c5:bf:05:c9:c9:06:40:16:31:d8:cd:92:ac:40:75:
                    1f:ba:e8:e6:9c:8b:c5:5f:f8:c0:55:89:19:f9:9c:
                    fa:98:c3:83:2c:d6:95:59:ff:e2:f4:69:4b:0b:72:
                    1f:0b:d0:1b:28:bc:56:bc:32:6a:7d:95:ce:df:c7:
                    0e:f5:44:a8:ca:2b:bb:f5:ed:2e:58:a2:53:de:70:
                    51:ba:d0:65:d4:68:ae:eb:cc:d1:2d:42:1b:6d:c1:
                    ee:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:33:9A:07:73:EB:E6:F5:EC:16:25:F9:C8:0D:AE:25:E5:E8:13:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7de99d32-945d-3dcd-993b-8763776e54b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ef:56:47:82:ea:01:b6:0c:82:7c:f7:73:4f:d9:5c:d2:ac:
         df:42:82:f4:f8:e4:87:ef:e0:59:27:e4:b6:e4:71:e4:98:8c:
         0e:09:5c:41:4c:1e:3f:65:03:88:1e:6a:a9:08:21:e2:2e:29:
         5b:c1:b6:0d:f4:8a:0b:75:b2:32:9a:cd:b5:57:14:b0:2c:df:
         52:7b:48:7f:15:85:f0:cd:be:5d:7e:5b:2e:52:f3:17:2c:97:
         f4:60:49:ce:57:fd:f7:d2:71:e9:69:4b:3a:84:cd:55:ab:5b:
         a1:04:fc:38:b5:87:9f:71:6a:ac:d9:d7:b3:4b:0e:6b:d4:60:
         b8:19:b4:69:75:9c:91:29:31:0a:4c:57:c7:ee:56:51:ea:36:
         62:3c:d7:39:09:af:da:c0:7c:b3:fb:59:70:1a:d7:7e:a8:01:
         6d:d7:33:79:04:97:e9:cf:cb:20:35:bb:71:30:0a:51:75:0b:
         a5:f7:fb:ac:2d:bb:f7:a1:f9:e4:c7:7c:34:f6:05:f6:81:20:
         22:ed:dc:93:1c:20:6c:a5:91:23:07:0f:b7:31:7d:bb:33:c8:
         38:80:26:16:b3:bc:0c:64:37:91:c4:8d:ce:5a:66:3b:1f:81:
         14:48:1d:f7:09:4b:2a:85:87:67:10:4c:19:8a:34:ef:76:43:
         f5:46:65:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:43:17 2025 by rpki-client