Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6d77a58-efdd-3d37-b7c4-333597855a0f.roa
File:                     a6d77a58-efdd-3d37-b7c4-333597855a0f.roa (raw, json)
Hash identifier:          6HhqDaJlXkQkdmuk1cL5upHJA3POvYJOtgPFkS/jPjg=
Subject key identifier:   FB:8B:69:E3:98:52:04:1D:BE:3F:72:EC:3F:61:35:3D:17:45:88:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C2B3162FD8D678F95D840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6d77a58-efdd-3d37-b7c4-333597855a0f.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     396542
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:2b:31:62:fd:8d:67:8f:95:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=b44cb8ef-2c7b-4203-8ae8-bcbee018be31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:cb:fc:5f:13:d0:76:22:59:23:46:2a:24:
                    d4:11:81:1f:14:af:c6:78:6c:e2:c0:2d:f6:7e:eb:
                    e8:7b:d5:dd:d6:e8:3c:26:5c:40:8f:25:98:0a:3c:
                    75:23:01:8e:a2:d6:4f:c0:5a:6e:87:f5:82:c8:ce:
                    a6:26:33:98:9c:bd:20:aa:63:9a:e8:25:5e:78:45:
                    21:80:ec:39:dc:14:4f:4f:3a:5e:48:9e:4c:0e:a6:
                    5a:6e:e7:fb:ed:54:f0:92:dc:9d:fd:01:a3:9f:37:
                    4a:dc:62:78:91:fd:f1:83:8a:37:6f:5d:a1:38:03:
                    3a:8d:62:6e:fd:29:57:e7:e3:c3:38:c2:13:f9:5d:
                    e2:ba:42:07:36:ac:8b:f0:0d:b9:f0:d6:0b:11:ff:
                    17:2c:e8:45:c0:dd:81:be:26:68:fb:e1:7a:f1:51:
                    7e:30:96:39:d6:f2:9e:d6:1c:07:d6:e2:90:5c:1c:
                    48:bc:6a:eb:35:4d:25:f8:da:d2:f4:ac:78:a6:44:
                    63:44:28:8e:92:99:88:41:c4:3b:da:b1:3c:d2:5e:
                    b1:e3:2c:60:fe:79:60:38:32:45:70:65:d2:d1:80:
                    99:9a:c5:d4:8b:da:aa:45:df:e9:b0:1a:af:d8:ac:
                    76:ef:7f:80:26:b1:47:d0:9d:43:eb:61:fe:91:a5:
                    14:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8B:69:E3:98:52:04:1D:BE:3F:72:EC:3F:61:35:3D:17:45:88:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a6d77a58-efdd-3d37-b7c4-333597855a0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:89:8b:a1:6f:21:d2:d0:1d:e0:21:f5:11:da:0c:bc:68:29:
         75:82:7c:c0:ae:61:22:63:78:05:af:a8:ea:25:99:6d:e9:54:
         43:19:30:99:87:9d:b7:27:9e:98:8f:8b:31:a8:e7:bf:57:20:
         7a:03:9e:61:51:65:da:90:ef:c0:75:c6:3e:83:66:9d:94:46:
         d2:43:2d:b0:86:7b:3e:fa:7e:e1:70:36:de:5d:12:f6:67:80:
         49:94:91:e2:7a:80:55:8f:fb:33:ba:eb:49:f4:e2:4c:dd:d6:
         d2:23:e3:c7:95:12:f5:ba:45:86:ae:14:83:00:9e:e8:14:95:
         e6:6b:d7:3d:4f:67:43:72:3c:4d:b8:07:f1:59:81:f3:53:73:
         88:c0:b0:97:45:37:19:28:7e:05:58:34:1a:cb:63:45:c9:e2:
         69:a5:bd:ed:44:74:de:c2:79:8f:7f:3a:68:fc:81:fb:49:7e:
         3e:d5:d2:b9:8f:5a:6e:2a:5d:5d:56:01:69:6b:11:8c:4a:1d:
         a3:68:8e:58:85:c3:2f:0c:26:d7:d2:9e:68:27:b6:e6:df:a8:
         d3:6b:91:4d:b7:aa:9a:51:cd:91:6a:f7:7b:bd:27:d6:69:41:
         a5:3a:e1:b6:86:9e:f9:10:18:e9:a6:d2:16:67:b1:63:52:fe:
         2a:37:de:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:31:48 2025 by rpki-client