Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/284f6467-2199-3265-b43f-117ee3787a86.roa
File:                     284f6467-2199-3265-b43f-117ee3787a86.roa (raw, json)
Hash identifier:          mIOVYEVx6OJm57DDdoB+Nn8NaXtF3lfEQWAphnV5g2s=
Subject key identifier:   6D:9B:13:2D:01:A6:67:3C:A0:95:0D:FC:A0:5E:DF:2E:2C:7F:AD:99
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D494EDAE97974AA96D780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/284f6467-2199-3265-b43f-117ee3787a86.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     396564
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:49:4e:da:e9:79:74:aa:96:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=c9e088b8-d0e2-4e28-b317-d0a7d46d747f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:e0:ad:56:d0:35:7f:d5:73:19:a8:fe:43:
                    26:46:ad:d6:c9:de:d6:e6:db:80:84:f1:66:59:4a:
                    21:ed:b4:b8:dc:2c:5d:af:09:40:51:d1:6e:2c:cc:
                    26:39:fe:fe:56:69:cc:6b:c4:a4:95:b5:e8:8e:b4:
                    fd:9a:5a:3b:9e:a8:8b:03:51:29:8c:0e:ca:9f:90:
                    45:a0:c4:49:b6:35:a1:15:e4:ae:18:33:2c:57:a0:
                    10:11:ac:29:61:ad:c7:1d:78:d9:5a:09:8f:0a:72:
                    65:54:97:b6:f7:67:8f:63:9b:ce:10:d9:db:b6:8b:
                    2a:d9:ad:77:bc:31:5d:76:aa:f2:6f:fa:7b:35:96:
                    02:ee:09:ad:59:14:36:a4:f1:c7:c1:9e:cc:17:d0:
                    df:07:26:b5:74:9e:f0:a5:0b:06:59:d5:19:48:09:
                    47:e3:ca:24:03:d8:a0:72:84:d5:ed:45:21:2a:0b:
                    73:77:8d:6f:25:d6:5d:c6:cc:81:d3:f9:12:d1:89:
                    5c:46:bf:e5:6a:f8:89:fa:7f:ee:06:3b:c0:83:55:
                    7c:00:69:c0:7d:81:2c:94:88:fe:e0:cc:a5:51:98:
                    c3:62:64:06:3c:72:48:9e:ee:87:f6:3f:3f:8d:e9:
                    e2:32:06:94:0e:33:61:79:a5:03:df:18:cf:22:21:
                    06:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9B:13:2D:01:A6:67:3C:A0:95:0D:FC:A0:5E:DF:2E:2C:7F:AD:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/284f6467-2199-3265-b43f-117ee3787a86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:fb:da:f9:b5:c5:65:b7:f0:33:03:75:42:71:1b:24:d6:87:
         7b:72:2b:68:ab:4d:68:d4:f2:c7:15:39:90:2c:8e:d9:3e:1f:
         3d:de:f9:5f:30:52:f2:d8:3f:fa:a4:66:11:b0:cc:e1:d3:9e:
         a7:38:75:ce:db:ec:6a:0c:3c:d5:c6:7a:cd:0d:15:57:de:69:
         52:b5:ae:e7:8b:72:69:46:2d:70:2c:45:9e:8f:32:4d:75:2e:
         43:77:16:ea:2a:59:09:1a:49:5f:ba:c5:af:95:1d:7f:8f:77:
         f6:10:e2:4d:08:aa:79:0a:15:98:e6:55:36:9b:c0:e4:6f:ca:
         73:7e:ba:c8:72:c8:15:fe:3c:75:b4:47:8f:3a:9a:52:61:f1:
         d5:5f:53:c9:96:64:84:2c:a1:67:03:97:96:44:25:d8:f8:78:
         9c:b7:8b:a1:20:11:75:75:c0:19:e0:94:40:95:5e:c0:8a:77:
         d8:47:e6:c8:4d:68:84:83:e7:7f:18:c9:46:47:85:fc:6c:4c:
         84:76:05:af:be:ff:17:1c:96:90:75:ca:72:4a:72:4c:61:12:
         3b:2b:0b:16:a7:b3:4d:6c:c7:a3:f5:9d:dd:be:09:89:26:12:
         87:30:b8:d5:64:83:69:18:2b:99:72:5c:9e:32:63:74:74:0d:
         69:ab:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:39:54 2025 by rpki-client