Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cfe3cb3-e377-3425-8843-a5d6cd8703eb.roa
File:                     3cfe3cb3-e377-3425-8843-a5d6cd8703eb.roa (raw, json)
Hash identifier:          Zv1DotFtVp0nRvJ9jOKHrxSjDun1oG7LOCmTkJte+kg=
Subject key identifier:   A3:C3:C0:3E:1C:C8:FE:37:64:21:B9:18:6E:93:6A:27:E0:17:0E:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF08F97F4D5D4B639180580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cfe3cb3-e377-3425-8843-a5d6cd8703eb.roa
Signing time:             Thu 24 Jul 2025 12:38:59 +0000
ROA not before:           Thu 24 Jul 2025 12:38:59 +0000
ROA not after:            Wed 22 Oct 2025 12:38:59 +0000
asID:                     396605
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:8f:97:f4:d5:d4:b6:39:18:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:59 2025 GMT
            Not After : Oct 22 12:38:59 2025 GMT
        Subject: CN=887116d2-c8ff-4bb2-a213-9ca306090168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:74:02:d0:9b:39:d7:9a:ad:8d:8b:09:5f:a1:
                    c3:ee:89:66:c5:15:df:22:a8:b9:8e:8a:d5:80:44:
                    e8:f8:2a:a9:ba:df:22:5e:4c:ec:5d:42:65:49:0b:
                    40:b3:ef:15:25:31:5f:c7:a4:22:79:8f:6d:90:71:
                    08:99:66:46:90:f9:b3:f4:47:17:8f:92:8d:68:49:
                    55:8b:8d:60:59:22:ff:cd:69:58:51:1a:b0:e0:fa:
                    44:aa:9a:83:46:e5:96:8b:ab:dc:16:9c:0c:cb:d3:
                    56:31:fe:45:10:8a:f2:0e:c6:db:24:93:38:d8:58:
                    2a:b2:33:00:c1:90:e1:a5:ae:22:ef:36:33:83:56:
                    f5:2f:30:12:1a:5d:85:0d:b7:f3:2c:c6:7e:4f:1f:
                    c3:64:bd:a8:28:f0:e0:11:5d:46:5f:30:d0:db:e8:
                    94:1b:81:a4:5f:5b:ba:88:d0:48:b7:0b:64:3e:38:
                    c8:ef:db:4e:03:f6:ef:9c:4e:fb:5b:dd:ae:ad:0c:
                    a7:97:8c:aa:75:7b:8d:44:8b:20:af:02:e4:6e:ee:
                    49:62:32:cb:36:1b:9e:ba:30:2b:6d:5b:bb:8f:2d:
                    99:6a:9a:28:b9:40:75:fa:fb:4b:40:c2:5f:0c:a2:
                    cd:fe:5e:5b:6b:78:c6:18:cc:b9:90:42:26:1f:8f:
                    45:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:C3:C0:3E:1C:C8:FE:37:64:21:B9:18:6E:93:6A:27:E0:17:0E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3cfe3cb3-e377-3425-8843-a5d6cd8703eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:47:16:3a:bb:88:81:c5:cc:a7:08:d4:da:9c:b3:59:ed:88:
         83:32:e1:44:60:dc:79:1c:41:d0:ef:3b:05:03:d8:fc:ef:41:
         27:60:54:1c:ba:36:f3:2f:5c:50:85:e3:ab:d4:89:71:32:8c:
         cd:66:d6:8f:cb:28:5d:67:94:c7:7a:f4:66:89:0b:7f:91:a3:
         20:0c:b6:a9:63:dc:cf:62:c4:3e:f2:e7:f0:ae:65:65:c1:c8:
         88:f8:3d:9a:12:c2:6a:19:90:72:af:74:0e:8b:18:53:96:3f:
         81:07:d0:44:95:78:c8:c6:dc:c3:60:b8:f2:2a:98:0e:df:4e:
         34:d3:5e:95:28:db:eb:50:6e:60:3a:0b:48:a9:ce:ae:7f:d9:
         2a:6c:96:d4:04:2d:55:f5:7b:cd:e1:b3:e5:44:32:f0:0d:2e:
         55:42:7c:09:63:26:e2:67:cd:cf:f2:84:ff:fc:b7:a0:0d:ce:
         f1:22:72:de:a5:db:8d:6b:e4:1b:bf:39:f0:46:03:22:b9:4f:
         3f:2f:79:2b:16:30:72:a5:7a:15:5c:3e:1b:db:cc:0c:71:4d:
         ff:b3:98:71:aa:a0:55:ac:c2:a3:66:fe:0a:f7:ff:4b:9d:c7:
         b6:18:96:02:f8:15:b2:46:20:f0:8f:2a:71:b0:f9:42:0b:8b:
         94:08:10:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 19:34:44 2025 by rpki-client