Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c00faaf-fb4e-3fae-b262-58cf3eddff8f.roa
File:                     0c00faaf-fb4e-3fae-b262-58cf3eddff8f.roa (raw, json)
Hash identifier:          wYzLxVpQtJqx1ae118crAYu0dUzWcbdvcN0V1IlC4Bo=
Subject key identifier:   71:86:E2:1A:3A:89:7C:86:5B:C0:E4:74:B2:BE:E2:93:C0:D0:B4:C3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF084FC04375EEA72B2B0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c00faaf-fb4e-3fae-b262-58cf3eddff8f.roa
Signing time:             Thu 24 Jul 2025 12:38:54 +0000
ROA not before:           Thu 24 Jul 2025 12:38:54 +0000
ROA not after:            Wed 22 Oct 2025 12:38:54 +0000
asID:                     36632
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:84:fc:04:37:5e:ea:72:b2:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:54 2025 GMT
            Not After : Oct 22 12:38:54 2025 GMT
        Subject: CN=86237345-a77f-4bb1-abe3-07c32b0c84b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f1:af:17:94:6e:21:db:8a:d3:56:10:3d:fb:
                    ed:81:20:b7:2b:bf:e7:06:42:7a:d3:8f:39:b7:32:
                    ab:bf:ea:17:45:94:4f:d5:24:f7:70:1a:6f:53:83:
                    a9:d0:b0:3b:78:dd:f1:78:84:f7:e4:d2:3e:db:64:
                    6c:dc:48:2f:d4:83:8e:c6:b9:d4:66:35:46:2b:ac:
                    7b:2b:1b:a2:60:f7:88:d6:28:96:ca:74:9a:23:a3:
                    96:2b:eb:4d:c9:e2:a9:6d:a7:51:0f:e9:8c:ad:ad:
                    0d:1e:62:48:ee:74:39:92:23:19:0b:7f:08:0f:02:
                    5c:d1:74:85:21:64:83:1f:bd:3a:b8:93:40:46:1b:
                    d3:6d:3d:65:5e:0e:9c:47:5e:a9:d8:44:71:ab:65:
                    04:47:de:16:b7:f0:34:d7:6c:be:22:1e:85:d2:4b:
                    d0:0a:7b:43:73:77:a1:4c:3e:fa:49:c3:89:25:2e:
                    49:d7:a6:bb:be:5c:d9:0e:46:f9:f0:39:14:4b:0a:
                    8b:d8:ca:14:1b:67:b8:96:cc:ea:69:d1:af:7c:79:
                    93:74:dd:01:f4:cb:f8:ba:78:4f:3f:4b:bf:65:8e:
                    09:2c:80:47:97:a2:59:0d:10:c1:19:a2:63:27:fc:
                    e5:b1:c9:4d:72:ec:a2:5c:44:08:67:3b:d5:38:44:
                    c0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:86:E2:1A:3A:89:7C:86:5B:C0:E4:74:B2:BE:E2:93:C0:D0:B4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c00faaf-fb4e-3fae-b262-58cf3eddff8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:e5:e7:db:9a:d8:ef:ce:29:9e:1e:98:9f:ed:c1:21:7e:66:
         fb:b8:7d:ce:a4:f2:b7:5c:43:04:22:36:89:60:4d:25:ce:7c:
         6f:8f:43:bc:64:e7:ce:c0:17:ad:5f:84:91:02:ae:e5:0f:6e:
         1a:8f:4b:d2:7e:8e:67:9f:64:34:32:b0:07:60:e4:df:79:d2:
         bc:dc:68:88:92:a4:44:fb:12:c5:d3:19:bb:64:bf:ec:db:9f:
         01:d5:de:40:f3:c0:e1:f4:f9:88:1b:73:02:f5:e9:2b:45:c3:
         ab:c3:d8:e3:53:ec:3e:1c:c4:1c:65:fa:8e:5a:3a:f9:2f:47:
         a6:d9:c2:4d:bf:d2:0f:bb:35:c3:88:55:f8:4a:7e:2b:e4:21:
         4f:42:6f:7d:cd:8b:94:a8:5d:46:48:01:1b:fc:98:00:aa:db:
         b7:5d:88:24:f4:80:92:90:ca:8c:8d:1e:9e:65:95:ba:97:73:
         bd:03:b9:2e:2c:7f:44:26:0b:31:4d:d0:88:08:e9:e0:2c:de:
         f9:aa:5d:ff:28:1f:bd:0c:28:ae:76:46:02:d2:ca:9d:53:46:
         3e:86:9a:08:3c:27:58:c0:40:7b:e7:77:c1:0b:43:0e:24:37:
         7f:95:df:2e:2d:32:9d:e1:a3:dd:cd:b4:22:20:b9:d8:02:b6:
         17:f8:7d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:19:22 2025 by rpki-client