Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9daa24c0-3f11-3f2c-8065-525399aca264.roa
File:                     9daa24c0-3f11-3f2c-8065-525399aca264.roa (raw, json)
Hash identifier:          rgIKQWleKlhTN3JBIoOD96/ciHX3PMG+/H9WqVdFyHc=
Subject key identifier:   02:50:02:07:80:11:FD:2A:AB:80:B2:CB:3E:C4:63:36:24:C4:22:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C2B952020DEDEFE3501E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9daa24c0-3f11-3f2c-8065-525399aca264.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     36627
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:2b:95:20:20:de:de:fe:35:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=a332f04d-7a54-4cc7-b440-86647cea72ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2f:b8:80:ec:f2:43:24:92:c0:02:52:16:fd:
                    96:30:59:9b:80:17:5d:b3:94:25:d5:ee:d9:19:44:
                    9c:e2:e5:91:bd:7c:f6:f3:de:a3:81:ed:de:0c:bf:
                    d3:12:22:2a:da:2f:93:51:b5:9e:19:1d:aa:46:b0:
                    a9:de:d7:83:4d:1c:be:69:9a:1d:63:9b:49:54:63:
                    d5:5e:9d:64:74:82:51:19:30:12:94:0e:aa:b4:36:
                    04:d2:cf:de:3d:70:df:a2:18:c3:c9:05:5c:ce:ae:
                    22:10:b6:23:b6:5f:ca:8a:ea:f8:7f:0d:d2:04:ad:
                    73:b3:73:ad:c6:47:2c:e9:7a:f1:1f:2f:c4:4a:89:
                    ed:d3:0a:9e:04:87:a4:95:c5:35:b6:5d:b8:c8:b7:
                    65:b6:40:3f:56:24:53:50:51:f5:bf:b6:e2:ba:ac:
                    fb:9b:e1:1d:3f:15:42:21:2d:d2:85:97:8d:68:07:
                    90:ee:61:be:31:ab:bc:09:c6:6e:c9:b3:97:2e:59:
                    20:d0:9c:18:14:98:ff:90:37:6a:89:12:0c:e9:75:
                    9c:ec:52:62:45:54:05:66:02:50:24:90:66:ab:e2:
                    42:08:c5:02:95:1c:6b:5d:09:79:b4:f1:b4:2d:07:
                    23:2a:99:a1:c3:48:97:38:36:39:c3:da:46:2c:3d:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:50:02:07:80:11:FD:2A:AB:80:B2:CB:3E:C4:63:36:24:C4:22:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9daa24c0-3f11-3f2c-8065-525399aca264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:30:27:89:e1:92:e1:ee:8f:21:5c:b3:6d:bb:1a:b4:f9:e7:
         ff:61:5e:2e:cd:f5:64:af:7b:a1:64:1a:d6:7a:39:38:73:e0:
         97:39:9b:fe:8a:a3:f4:76:b7:21:e7:30:16:70:70:2c:7c:cd:
         9e:c5:0f:63:de:6f:7f:13:05:41:42:e5:18:65:bd:81:02:d4:
         24:68:07:25:ab:a3:76:2c:d2:de:8a:9f:57:e1:78:2c:31:55:
         a5:55:a4:dc:75:74:ee:29:9b:81:e9:c3:6a:47:90:9c:5e:bd:
         80:69:a9:a3:ea:c0:0b:81:bb:93:d6:f2:70:c9:e6:49:11:ec:
         6c:04:3f:0f:fc:3d:6d:27:f9:c8:0b:85:ab:1b:ce:b1:6c:7d:
         b1:d8:66:17:5d:73:9e:77:ca:ab:60:59:52:61:32:0f:c6:10:
         e9:4e:c7:38:8a:b6:f1:14:ef:18:e2:e5:d8:f3:35:66:16:f7:
         b8:72:39:93:50:5b:27:25:83:88:6a:12:f3:93:97:d7:af:47:
         73:a8:5f:ce:39:92:53:92:63:ca:f9:cb:53:49:56:52:6d:e2:
         d6:49:df:5e:38:96:5d:6a:d7:e8:98:36:43:1d:38:83:e2:75:
         d0:73:b2:05:ec:d8:63:5c:a8:f5:76:ca:d7:bd:52:db:54:ed:
         55:03:5a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:36:09 2025 by rpki-client