Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ac1551e-9607-3cfb-96a4-3e15998a9170.roa
File:                     8ac1551e-9607-3cfb-96a4-3e15998a9170.roa (raw, json)
Hash identifier:          /W5aAJeR7W3N4515teRd8TjfGLrJ78QfrRQ6id9boMs=
Subject key identifier:   16:59:EA:82:AD:5D:04:98:69:D8:CE:65:7F:70:F6:F5:36:6C:08:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF68699327FA02DD06079D900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ac1551e-9607-3cfb-96a4-3e15998a9170.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     396589
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:99:32:7f:a0:2d:d0:60:79:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=fab93e03-1f91-48e2-91dc-a54fa2eef818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:3c:34:74:29:3c:18:0e:49:c8:87:00:59:
                    3b:f2:ef:df:66:4f:59:b7:30:aa:b4:cc:55:95:62:
                    cf:d3:7c:cd:9a:a0:1b:22:6a:97:8b:43:a9:3e:ae:
                    72:7e:6b:9b:28:01:98:61:56:0b:f1:61:41:7e:03:
                    9f:2d:f6:aa:4d:8d:a2:e1:17:7e:36:49:e1:af:10:
                    4c:d4:8e:60:e0:15:d0:77:4b:78:f3:37:d0:54:43:
                    d9:82:79:27:c9:7d:9b:88:3e:93:49:a2:a9:8b:0a:
                    0c:b2:9f:ba:f9:d8:4c:ab:55:35:23:e1:03:74:17:
                    58:46:39:4a:5e:e3:b4:20:3e:75:ed:d3:43:d1:cf:
                    49:42:76:92:de:49:23:b0:e7:d4:23:85:71:c5:3f:
                    66:2b:47:1d:e1:fa:c9:77:bb:6b:d1:60:f9:c3:40:
                    81:e5:47:85:20:f2:f4:78:db:05:cf:ac:b5:b9:e2:
                    03:d0:e2:da:8e:d5:90:f6:b6:b6:4e:e8:af:9d:f5:
                    2c:56:fc:2e:12:e6:04:11:bc:b5:d3:8b:3e:a9:40:
                    c5:a0:42:57:1b:81:ca:b9:d1:94:5b:df:4e:9f:2b:
                    82:11:58:79:10:44:3e:76:c6:8a:5f:d2:06:c2:87:
                    63:cf:bb:a2:83:15:db:e3:fb:ec:cd:8d:a7:1c:10:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:59:EA:82:AD:5D:04:98:69:D8:CE:65:7F:70:F6:F5:36:6C:08:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ac1551e-9607-3cfb-96a4-3e15998a9170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:bf:83:ab:ae:a4:7d:21:68:32:c7:96:1d:3b:06:63:58:de:
         65:4b:80:9b:3b:27:d9:0b:d5:e0:49:4a:c6:75:7e:b7:f5:7a:
         d4:cb:2c:7c:18:7f:f5:2f:cb:7d:f6:af:94:89:9f:71:1e:9f:
         74:f2:7d:29:d7:b6:5e:6b:d6:40:f5:5e:a5:47:4c:44:68:62:
         08:e3:5b:ea:12:7d:37:0e:3b:a9:46:ed:9e:7f:d1:86:d0:11:
         77:cf:c0:47:b6:80:86:80:74:c7:36:02:55:b2:03:a7:f1:16:
         06:ec:ef:58:98:7e:9e:67:cc:93:af:a7:41:c9:60:39:f7:4d:
         18:b1:27:8b:3c:46:68:b9:e5:e4:54:79:8d:31:0e:5e:11:48:
         38:02:31:e8:7c:78:5f:5f:17:58:d8:6f:ea:78:ae:e4:02:f5:
         db:70:26:40:16:ff:ef:21:a1:be:08:eb:87:39:b7:48:22:83:
         84:ed:24:93:d2:e3:78:25:76:5b:76:cc:c2:34:df:0a:79:7a:
         49:5d:d0:db:1d:c6:9a:94:3d:e3:89:7d:6c:c8:66:b0:37:8a:
         7f:60:67:7f:cc:f5:2c:74:68:8a:af:54:4f:53:78:1b:99:0e:
         23:3b:19:cf:00:4d:ac:67:6a:61:d7:37:a2:df:9e:45:37:36:
         7b:a8:34:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 18:01:57 2025 by rpki-client