Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d5cfac6-e269-386a-a865-94c3bd9dffd8.roa
File:                     8d5cfac6-e269-386a-a865-94c3bd9dffd8.roa (raw, json)
Hash identifier:          TJtUcH+SfKMrFmknbs3gUBE0S+I/Dua1ZxBfdP4HBrM=
Subject key identifier:   85:DD:99:3A:93:A5:C4:40:AE:58:B4:AF:D4:F1:DC:62:FA:39:7B:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF6869C144A1A33DB34F70EA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d5cfac6-e269-386a-a865-94c3bd9dffd8.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     396549
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:9c:14:4a:1a:33:db:34:f7:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=e5dfcdfe-5f0d-4606-a698-ca605a6433b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:ef:06:52:15:3b:18:cd:ba:50:ed:03:ed:
                    d9:a4:b3:52:34:d8:a2:33:73:73:18:02:1f:b3:57:
                    72:e3:ea:9e:0d:70:38:bd:16:85:b0:91:04:ea:e3:
                    9a:2a:e9:96:61:e4:81:4f:e6:ac:88:97:33:8d:f3:
                    cb:67:76:6b:27:4c:84:27:95:db:f2:30:0f:4f:2d:
                    50:96:e3:ef:cc:3f:16:e3:b7:7d:20:d2:6b:79:8c:
                    34:3d:8a:2e:91:5c:0d:c0:ed:1d:6e:5c:e0:16:5f:
                    84:71:a1:78:00:ec:b9:2e:0e:ac:24:26:14:0a:a5:
                    77:0f:fc:e1:52:da:ff:31:ff:fd:df:01:e2:46:b8:
                    45:8a:27:f7:18:b7:03:e2:e9:0f:ca:7d:63:cf:75:
                    21:8e:2c:57:f1:e1:30:d3:db:d7:b2:c7:cd:b9:68:
                    3b:46:d6:02:e1:a9:bf:7f:b5:0b:da:b1:00:a7:88:
                    ba:d0:69:ce:77:54:84:b8:39:dc:ad:50:a0:47:7e:
                    8f:35:ad:2f:43:da:3c:52:78:41:33:d9:2d:e1:bb:
                    45:60:9e:5f:c9:36:bd:8d:7f:2c:e5:c3:ed:af:2e:
                    04:2f:5c:5f:55:bf:91:92:8f:df:d0:37:4f:d7:00:
                    1e:86:2e:36:20:de:ef:06:17:fc:22:53:ae:e6:0e:
                    84:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DD:99:3A:93:A5:C4:40:AE:58:B4:AF:D4:F1:DC:62:FA:39:7B:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d5cfac6-e269-386a-a865-94c3bd9dffd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:8e:bc:9a:51:d3:b3:f5:80:79:21:d9:89:b8:b9:ca:e6:c3:
         51:8b:06:f1:b7:29:01:8b:f2:1d:63:ce:e3:9b:ac:6f:83:79:
         0d:6e:d4:5b:40:5e:fc:25:fe:68:ff:17:e4:6a:a6:86:16:8d:
         b8:aa:22:1c:93:9b:2d:24:e3:e9:04:a8:f5:77:7d:2f:8f:57:
         7e:c9:84:2a:28:a1:bf:bd:a6:6b:50:d7:d0:25:71:07:86:80:
         97:3b:b5:8f:7d:3a:37:b1:2a:ee:32:aa:07:e7:31:41:4e:4e:
         10:d1:71:e3:bf:9b:8e:71:4d:14:c3:ec:38:97:a6:74:9b:0c:
         46:cf:45:e7:07:54:ed:0f:53:17:17:bb:63:07:01:2b:27:d6:
         2c:1b:65:6c:54:5c:69:5e:86:98:b7:83:e2:57:c8:b3:7f:74:
         ff:b2:e7:01:ae:02:c3:72:62:8a:cc:5a:1f:0e:f3:86:e9:14:
         a6:4a:8f:23:68:c3:db:a3:ed:d6:86:50:90:df:e3:5e:28:f7:
         93:d1:5a:64:a7:8d:1d:b7:17:ee:0a:ac:38:64:bd:36:b4:88:
         67:dd:12:6e:75:33:8b:f6:b4:96:09:df:40:2d:f6:87:74:5d:
         2c:c3:59:06:bd:f6:8a:68:81:7e:ac:cd:5d:e1:24:df:88:57:
         c1:eb:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:42:28 2025 by rpki-client