Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f186a859-185c-30f4-9fb4-3bd6e8b109c3.roa
File:                     f186a859-185c-30f4-9fb4-3bd6e8b109c3.roa (raw, json)
Hash identifier:          zcgv8640aqZuDQzrJZPYtsSzX/qYrBdh7auaEEveB4A=
Subject key identifier:   0B:12:E0:CC:DA:A2:E9:9E:80:FB:FA:13:FF:F4:1C:3B:74:B4:47:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1AD1B71D50EF724A1F88C280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f186a859-185c-30f4-9fb4-3bd6e8b109c3.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     397194
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:b7:1d:50:ef:72:4a:1f:88:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=ab4da845-1fe9-4daf-abbd-3dcae5ab46ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:56:8c:a4:1b:4a:dc:0f:46:7d:a9:53:d6:
                    32:fb:67:02:b4:01:1e:1f:2f:67:fb:f6:47:d5:3d:
                    17:f7:97:5c:18:f0:7b:1f:b2:8e:7d:de:41:94:3a:
                    6c:e7:3c:3a:11:d8:c7:df:2a:58:ff:fe:c0:6d:ea:
                    ed:df:df:d7:7b:9a:57:8f:21:36:e5:52:a3:ce:91:
                    31:2d:ac:58:cc:ac:c9:16:ae:77:97:01:1b:a9:c9:
                    2e:ea:d0:5b:b7:73:e8:be:63:8b:94:e9:ca:b2:2f:
                    a6:69:80:27:ed:b8:85:cd:df:32:42:4c:e3:28:54:
                    56:18:a4:8a:d7:2e:83:72:d9:13:3d:55:c1:b8:81:
                    c6:05:60:4a:be:66:3a:ef:a3:09:f4:81:e3:34:a0:
                    e2:f1:17:2c:75:e9:4c:74:9f:a9:8e:32:52:39:cc:
                    28:5f:2d:2c:5a:e8:97:2a:55:55:ac:9b:f6:ff:ab:
                    3d:53:06:91:49:b5:bd:19:a9:80:90:35:18:af:20:
                    f9:ee:02:ec:7c:8a:05:88:d9:fc:42:40:4e:7b:90:
                    e6:5b:4f:eb:1f:50:35:96:80:bb:90:a1:14:1c:aa:
                    38:f8:d5:b0:7a:db:d6:ea:27:44:19:5f:ab:4a:32:
                    23:fc:d1:12:39:32:23:59:78:b1:ba:1b:78:64:52:
                    7e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:12:E0:CC:DA:A2:E9:9E:80:FB:FA:13:FF:F4:1C:3B:74:B4:47:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f186a859-185c-30f4-9fb4-3bd6e8b109c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:05:8a:64:f2:04:13:9d:f5:58:dd:3b:ff:ea:47:76:f5:4d:
         e0:ad:19:12:6c:11:4e:1c:5c:5f:7d:a4:18:26:60:68:b0:b3:
         79:ad:dd:9b:18:ee:f0:35:2d:0b:b4:ca:bf:14:76:37:35:3d:
         43:06:c4:b8:d3:ce:7b:d4:64:31:84:18:86:e4:21:7e:e2:8b:
         07:cc:2c:df:86:b4:12:ba:77:7a:cb:24:4b:26:58:5e:63:8c:
         c5:03:84:53:24:50:25:5f:a8:6f:52:4d:18:0d:3f:8a:72:82:
         55:08:32:73:01:db:f8:e8:ca:e7:09:29:b0:ea:24:95:62:9a:
         ee:70:f1:1e:79:59:56:24:3d:e2:ee:e9:1a:81:8f:b5:4d:0d:
         86:67:9c:78:2a:1d:0c:58:cd:c5:8f:28:0a:2f:b4:c2:59:7b:
         2e:2c:45:58:65:e4:89:20:76:8d:84:51:1c:db:3a:42:42:4b:
         ae:eb:a6:ae:6a:ee:1c:a2:86:15:5c:ce:ee:db:c6:44:c4:ef:
         f3:5a:db:2d:5d:47:7a:3b:3a:01:7f:7c:43:6a:8a:15:01:76:
         7f:ec:e0:ab:e7:82:22:0c:58:47:bb:0f:0d:4e:12:f6:e8:ca:
         38:82:25:fa:50:58:2f:d8:64:44:4a:61:9f:ad:bc:92:94:b6:
         33:7e:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:49:30 2025 by rpki-client