Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c2f64b9-4b38-39d5-861c-02354a011eed.roa
File:                     6c2f64b9-4b38-39d5-861c-02354a011eed.roa (raw, json)
Hash identifier:          rWe5kMK+I3Dz75vqHq3l+EPMfepk9WAdMl6tTPSk+qU=
Subject key identifier:   19:A0:7E:DE:AA:80:07:BB:BB:42:97:56:FB:9B:DE:DE:27:19:FD:F5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF0781C0C4E8A8DCBFBCC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c2f64b9-4b38-39d5-861c-02354a011eed.roa
Signing time:             Thu 24 Jul 2025 12:38:48 +0000
ROA not before:           Thu 24 Jul 2025 12:38:48 +0000
ROA not after:            Wed 22 Oct 2025 12:38:48 +0000
asID:                     396541
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:78:1c:0c:4e:8a:8d:cb:fb:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:48 2025 GMT
            Not After : Oct 22 12:38:48 2025 GMT
        Subject: CN=ccba04ca-193a-4407-adac-944a4cc55609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a9:c4:97:40:45:a2:97:e8:f3:e4:b5:a3:9f:
                    53:4e:ae:83:68:8c:ce:b0:9f:37:9d:33:9d:1f:98:
                    d2:87:e6:e5:48:cb:92:7d:aa:01:9f:34:33:6f:6f:
                    16:80:fd:32:c1:d3:a1:a5:ba:92:a3:98:76:40:72:
                    f4:e0:0c:74:05:36:b2:8e:d9:d2:e9:1c:1e:27:fb:
                    38:52:76:a7:10:40:74:c7:77:48:e9:91:28:5f:c6:
                    fa:11:09:3f:39:13:8a:94:54:43:b6:fa:34:90:32:
                    e8:fc:39:99:19:80:75:90:39:ed:d2:44:40:a3:12:
                    0e:5c:ef:02:52:eb:5f:88:4e:fc:c1:ec:40:d7:3b:
                    93:b9:67:80:ca:b8:bb:b3:f0:51:04:a5:64:6d:fe:
                    cf:c2:88:75:71:1c:cf:36:d0:05:aa:17:eb:b5:f1:
                    96:0c:36:24:2c:38:a9:75:0b:b3:c4:4e:93:f0:cf:
                    a6:9f:aa:ff:75:d8:52:37:77:01:4f:36:de:1e:8c:
                    56:ed:19:48:ab:23:5e:cf:d1:be:9f:dc:1a:2f:32:
                    e8:4c:dd:1f:17:ed:fe:ab:15:e3:20:3a:80:df:f2:
                    f1:78:93:b3:94:70:6f:b4:b5:df:66:df:11:5e:45:
                    0c:83:30:75:f6:6e:a3:6e:ed:af:33:65:45:5a:48:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A0:7E:DE:AA:80:07:BB:BB:42:97:56:FB:9B:DE:DE:27:19:FD:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c2f64b9-4b38-39d5-861c-02354a011eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:6e:c7:73:89:3d:bb:41:69:c0:0c:cc:f7:ad:a6:ba:20:b9:
         86:11:c6:bc:0b:9c:04:2e:b2:54:63:2b:30:be:28:80:f1:39:
         e7:f7:7a:a1:ef:b4:ca:e1:db:bc:25:43:3c:09:f3:51:ca:b1:
         f5:c1:88:4a:78:ae:4f:3c:a2:17:83:8a:bd:e4:ca:28:8a:9d:
         ea:6a:14:b7:fc:1b:38:a9:dd:96:ab:ae:d4:d8:a4:82:06:8b:
         b6:c9:5e:ae:81:72:26:60:ba:4b:6b:1b:88:67:9a:e3:ab:7e:
         22:75:9a:d4:93:d8:98:49:86:07:d1:3e:84:bd:16:9e:8b:c9:
         ea:18:ed:a8:6b:53:88:7b:06:b1:51:26:4d:1c:f2:db:ff:a9:
         57:3f:c3:9a:a4:1b:49:b9:13:fd:08:a9:29:a7:5e:95:ec:f5:
         18:29:00:19:53:43:f7:93:51:b3:fb:ec:d5:05:85:65:01:dd:
         b8:bb:70:92:d6:ae:cb:54:61:f3:97:a9:b5:9b:4f:8f:32:83:
         6b:f7:82:29:63:c0:ce:bc:48:a7:ef:eb:b8:60:31:86:fb:24:
         99:f7:77:59:17:3d:a7:89:3a:d6:ab:6f:da:92:b1:a1:49:c8:
         cd:b7:54:87:c2:11:e0:57:83:c5:ec:f4:f0:3c:d0:3b:71:40:
         15:73:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:59 2025 by rpki-client