Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/790dd112-30ea-335c-a107-a1c3f5eed415.roa
File:                     790dd112-30ea-335c-a107-a1c3f5eed415.roa (raw, json)
Hash identifier:          2HTA73yKClM/yJQs2GJ7tA5DBEmVYVD20q8yfxYYxcs=
Subject key identifier:   43:7E:74:CD:20:2B:4B:C3:01:A9:7F:E1:1F:6C:F9:0F:B2:59:A5:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D473406CA167591186900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/790dd112-30ea-335c-a107-a1c3f5eed415.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     396613
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:47:34:06:ca:16:75:91:18:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=699d19dc-0537-4a41-bd9b-29bf5f93475c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4d:d3:e7:47:9f:20:95:f6:8b:25:8e:b2:20:
                    16:42:9d:1d:6a:b5:2e:d6:b1:a0:35:7e:80:f0:48:
                    c7:15:28:e7:54:e6:9b:23:93:24:3c:f1:25:c1:b6:
                    2f:39:c2:02:64:0a:7a:e8:11:42:07:f1:dd:80:e4:
                    32:49:9b:d4:c0:9d:57:7b:34:0b:f5:a2:ee:11:01:
                    b1:a5:f4:5d:42:40:72:45:a5:80:dc:3a:02:eb:a1:
                    7f:dc:5a:14:52:64:f0:61:6b:50:0f:2e:c6:7b:ad:
                    0a:65:95:2c:9e:71:f1:18:8c:3c:d1:4d:7a:03:7d:
                    78:57:65:b3:b5:3c:8f:91:fa:15:86:4c:94:d0:6d:
                    11:d3:1e:b1:39:ad:64:49:ad:78:64:6a:6d:e0:89:
                    48:71:4b:55:69:09:b3:e3:da:37:20:1d:c3:24:40:
                    0c:2a:37:4a:46:af:94:37:ca:01:c9:9f:11:cc:da:
                    fa:18:02:d3:83:21:1a:be:9d:bb:68:df:66:6c:2c:
                    1f:ef:78:e0:55:7d:d3:a6:22:6f:58:94:4d:42:b5:
                    e1:5e:bd:ed:c9:be:c9:b9:f7:79:7b:97:fa:a2:16:
                    55:dc:a0:49:d2:ab:a4:a1:85:62:ec:c4:47:85:a1:
                    0d:c7:d6:3e:64:28:09:1b:b4:7b:ee:54:61:12:34:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7E:74:CD:20:2B:4B:C3:01:A9:7F:E1:1F:6C:F9:0F:B2:59:A5:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/790dd112-30ea-335c-a107-a1c3f5eed415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:71:44:1b:0c:33:1f:f3:c7:cc:92:1b:5f:7d:bc:7d:7c:3b:
         4c:21:d7:3d:aa:a9:c6:f9:7f:2f:4c:54:55:9a:2c:5f:25:19:
         e6:43:07:66:a4:01:64:c2:e2:ce:42:90:6f:2a:8a:e2:31:83:
         e5:62:6c:a8:83:40:fd:51:45:11:b8:c1:eb:8f:2e:a9:6d:06:
         ba:6a:8b:43:07:15:81:27:39:40:b5:96:a7:83:88:63:3a:2f:
         7a:49:8a:01:cf:e9:06:84:98:19:e6:85:91:0b:a9:52:c7:65:
         58:27:5b:54:40:29:b9:b2:62:ab:ab:0b:87:cf:33:9a:7c:3c:
         38:64:f2:c9:e5:78:2b:38:cd:4e:a9:83:26:ab:b9:0f:f7:bc:
         5d:7f:a5:fe:94:ea:7a:b2:c2:55:12:27:74:1e:df:cd:e6:56:
         f2:ab:0f:20:d2:a6:17:50:1b:59:d6:40:47:a0:75:18:d8:bb:
         4a:4a:d9:37:32:bf:b0:56:00:16:88:29:a8:6c:8d:51:78:7f:
         de:d2:15:95:88:a2:07:3c:d6:5a:d3:3f:22:d0:d0:e0:50:4a:
         86:55:67:c8:89:07:43:ff:bd:07:7d:08:51:e6:de:03:93:19:
         d1:70:ae:18:73:88:c0:05:0e:a1:20:44:9d:40:f8:c1:d5:ce:
         4b:63:a1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:05:02 2025 by rpki-client