Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/201187f7-8f78-3dca-bf5c-f203d896dd90.roa
File:                     201187f7-8f78-3dca-bf5c-f203d896dd90.roa (raw, json)
Hash identifier:          D62FJNlqRdFe1eKhLfaiAngI7SgOZ1fEpSxAyYZ4gXw=
Subject key identifier:   A8:3C:F7:72:4A:9C:39:FC:F6:E5:17:3C:B7:91:3B:B7:9F:46:45:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D4756B7EEFA784172AF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/201187f7-8f78-3dca-bf5c-f203d896dd90.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     396547
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:47:56:b7:ee:fa:78:41:72:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=91033c56-ef7a-4934-bdb9-252e4cd1b88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:83:8c:72:28:a2:51:ea:83:97:c1:3f:42:af:
                    53:48:f0:38:02:65:75:54:27:64:c3:50:f2:4f:58:
                    95:bf:9a:04:d7:1f:0f:46:b0:11:b1:93:00:77:dc:
                    88:b7:d9:1f:c1:43:98:0e:b5:ba:ba:8f:bd:f7:5e:
                    e1:09:62:0f:3c:30:83:52:6f:68:4d:88:97:37:18:
                    96:b2:de:5b:bb:86:31:cd:69:22:de:10:e5:3f:9e:
                    3f:e5:8d:be:55:6c:bd:9c:63:3c:b7:90:24:19:bf:
                    e4:5a:5e:db:41:0d:7a:14:8d:9a:bf:0f:3b:d4:54:
                    ff:2f:a2:2b:12:5c:b8:5c:97:00:c9:50:37:4b:72:
                    f5:27:84:8e:72:4a:2d:93:38:50:5b:a3:30:33:77:
                    5a:2e:53:6e:19:8b:99:39:88:18:02:80:5f:72:55:
                    ea:c3:5a:5f:a4:6f:96:e9:f0:98:87:bb:a6:b1:78:
                    f6:02:ca:10:29:68:29:8e:39:98:e0:11:50:48:02:
                    8a:c4:53:6f:48:9c:7f:73:ac:9b:ec:52:51:8f:6b:
                    fb:76:94:70:ff:83:80:ce:0b:db:ba:f7:6d:dd:84:
                    10:3c:0c:5f:fa:f1:5d:28:4b:9a:df:f9:da:c8:ea:
                    f3:38:d0:70:6e:67:00:24:d3:d7:63:f8:f8:f6:c8:
                    aa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3C:F7:72:4A:9C:39:FC:F6:E5:17:3C:B7:91:3B:B7:9F:46:45:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/201187f7-8f78-3dca-bf5c-f203d896dd90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:9e:70:52:e3:3b:b7:48:fa:5b:d2:6f:52:0e:e2:ed:90:07:
         a7:f5:d3:42:05:38:6b:8e:d9:36:f0:03:ce:dc:af:65:01:32:
         be:9d:6f:d5:39:c8:e5:84:f7:2d:23:26:f2:53:b2:92:89:89:
         07:11:7e:e4:23:57:e1:de:1f:72:73:61:64:37:c5:24:81:69:
         8f:70:d2:7e:f4:a8:ce:66:a1:f8:99:78:17:00:24:5c:6c:15:
         68:6e:1c:51:d1:47:1e:5e:36:73:d5:e8:c9:80:28:5e:05:95:
         1c:c7:c8:3b:fe:59:a0:7c:c6:cc:9b:74:03:c3:a6:92:55:58:
         4a:c0:d4:02:be:5b:30:ea:b6:05:35:f1:4e:39:af:ca:88:64:
         c4:ea:1f:d2:bf:1a:c4:f4:23:6b:ac:4c:1e:ff:f3:77:11:ab:
         b9:9d:77:e2:10:dc:5a:40:5a:38:bc:54:f6:e8:6d:b4:1a:39:
         99:ab:84:ea:26:a7:80:fc:ba:44:dd:03:3b:db:4c:65:de:84:
         47:ec:39:35:36:31:a7:23:21:93:48:26:25:e3:ca:84:7d:21:
         59:43:66:ff:1d:75:66:28:b4:52:a4:5a:50:07:2a:b7:cf:78:
         16:3b:d8:d4:a7:93:fe:a6:ac:31:10:74:41:e7:17:da:b3:f1:
         4f:86:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:12:14 2025 by rpki-client