Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddbab032-09ac-37dd-b25d-121d95c1e630.roa
File:                     ddbab032-09ac-37dd-b25d-121d95c1e630.roa (raw, json)
Hash identifier:          1+A6Y0jIyT/eBE4X2ERlT+ZcjDN+h6QeqSHoebQMVc4=
Subject key identifier:   9F:AA:79:3E:14:4F:9C:54:95:6F:23:E0:A4:8F:79:AA:85:20:FB:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF9515F92CE984CFF49A26900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddbab032-09ac-37dd-b25d-121d95c1e630.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     397202
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:5f:92:ce:98:4c:ff:49:a2:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=c9845749-3c93-4920-8f57-f53d27b729f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:47:f0:1c:7d:11:7f:31:f2:26:18:2a:11:
                    61:ef:8f:24:da:23:79:d1:57:95:46:ec:37:63:ef:
                    ef:5e:8d:f5:96:49:3c:ec:b1:bc:b7:78:85:f6:32:
                    7f:98:3a:21:57:64:db:4a:f6:8a:5d:d6:43:60:e4:
                    c0:cb:de:00:1f:b8:5c:a3:d6:2b:08:a4:fb:f6:ad:
                    cb:f0:80:fe:04:c6:af:cf:78:50:db:7d:2c:f2:b1:
                    af:39:28:00:df:ef:11:e6:e8:df:a6:05:44:9f:65:
                    15:93:aa:cb:3f:c5:d5:d1:f6:8e:3f:9a:46:0f:53:
                    b6:fe:e0:7c:d0:3d:68:03:c4:e3:43:24:7e:e8:a3:
                    73:85:d1:0a:47:b9:99:0f:f5:8c:53:67:a1:42:31:
                    59:42:e1:c7:11:c0:87:4e:dc:70:d6:c7:be:8a:38:
                    ad:3b:68:ba:b2:c2:81:d7:37:f1:4d:55:66:ee:88:
                    b5:f3:4c:d3:d8:3b:a6:7c:34:fc:03:01:e0:25:20:
                    c8:ff:c8:6d:1c:a7:e0:be:cc:e1:26:ed:27:4e:4c:
                    5c:9f:66:5e:3e:2e:17:9a:bf:e2:db:9f:1b:14:d9:
                    e1:6f:17:16:31:a6:91:40:90:a8:b5:fe:97:91:c4:
                    f7:39:08:4b:11:95:1b:8c:65:8a:d4:7e:fa:23:61:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AA:79:3E:14:4F:9C:54:95:6F:23:E0:A4:8F:79:AA:85:20:FB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ddbab032-09ac-37dd-b25d-121d95c1e630.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:67:0b:2c:06:94:bd:06:90:cb:69:e6:49:55:ec:04:74:37:
         61:e8:ce:18:07:da:1b:a4:09:70:8e:9c:07:74:0e:f5:fe:d8:
         f9:a4:57:0b:cc:d3:7b:9a:6b:14:2c:1f:96:2a:05:d2:ff:cd:
         b7:12:0b:d6:de:00:65:61:ad:49:5d:92:1b:a9:ce:99:2e:0a:
         5c:40:3d:75:0d:61:5b:9a:d0:05:93:18:f2:d7:09:85:3c:6d:
         01:ce:bb:77:73:5b:ec:6c:e5:2c:00:38:3a:27:0b:8b:ab:0e:
         b9:f5:47:31:2f:bb:fd:92:bb:b4:95:41:ce:fa:01:ec:bc:65:
         77:2a:a6:e0:55:3b:4d:0c:46:e7:7f:e6:ac:41:f7:87:ce:43:
         65:c1:f5:1d:0d:cb:e9:ff:72:b9:ca:9e:91:19:fc:19:2f:b8:
         4e:97:78:23:f1:d6:83:29:a6:91:93:84:91:14:7f:4e:06:e7:
         ca:14:04:45:f4:00:38:02:03:5f:75:e5:c6:4f:27:f1:96:58:
         b1:8a:ca:1d:4d:8b:71:8c:38:56:17:ae:07:5b:e4:d2:61:83:
         1e:73:d9:f7:6d:f2:d2:10:10:ac:4c:3f:28:b3:19:a3:e4:b1:
         1d:09:8a:81:31:64:01:a0:dd:13:49:87:04:3b:a1:5f:3c:ec:
         ab:1e:bf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:30:48 2025 by rpki-client