Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b0c7fcf-f6e0-30e3-a587-467a8555b600.roa
File:                     8b0c7fcf-f6e0-30e3-a587-467a8555b600.roa (raw, json)
Hash identifier:          /K1u3WmOZSvyNCaWYn0e+D+8DQmma2R5QTn+6ianssw=
Subject key identifier:   09:CB:97:AA:EB:96:94:2B:39:11:F3:89:B2:E2:F0:38:B0:19:49:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ABBE63A06EB01DCAFF7140580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b0c7fcf-f6e0-30e3-a587-467a8555b600.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     396579
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:3a:06:eb:01:dc:af:f7:14:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=637825bd-db79-4173-ad8e-63c8cec4c9a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:77:f9:d2:1a:46:1c:09:db:4d:c7:3c:39:
                    fe:5e:f1:fe:ef:0d:12:8a:2b:14:ad:c6:97:c6:84:
                    ce:0a:bf:59:89:23:8e:2c:d7:cb:9e:50:35:dd:43:
                    7d:ad:7f:f1:31:b4:4b:73:75:25:37:61:92:97:1a:
                    42:ba:69:e0:a8:30:de:6c:0a:d3:48:47:59:91:6f:
                    0b:3e:dc:20:ea:bd:87:63:69:05:47:38:7b:38:a3:
                    18:0a:24:3a:8a:74:55:11:8d:b4:ec:d1:14:85:23:
                    8f:ac:fc:0f:b9:95:e5:8c:1c:36:ec:d0:c8:4e:86:
                    2f:13:59:4a:1c:08:c1:08:a4:e9:a1:8c:17:b0:ac:
                    dc:e2:5f:23:ab:0f:21:78:8b:d5:3c:8a:e5:97:46:
                    c3:d9:9a:9e:c6:ad:66:53:ee:9d:b1:e9:e8:d8:d2:
                    19:55:33:1b:c6:1e:4f:be:dc:59:3e:c3:e5:9d:e3:
                    70:2f:96:6c:14:01:d0:88:8f:2d:00:5d:5e:ff:6c:
                    24:e4:63:8a:1c:ef:a0:00:c1:97:41:7e:2a:2c:58:
                    bb:f6:6d:fd:c2:d2:3b:0c:94:97:51:86:73:5a:a1:
                    03:df:24:a0:97:9d:21:4a:a4:d4:4c:71:bb:ea:34:
                    4d:4e:a2:59:79:d0:ef:30:c7:16:c2:42:f5:f3:0d:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CB:97:AA:EB:96:94:2B:39:11:F3:89:B2:E2:F0:38:B0:19:49:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b0c7fcf-f6e0-30e3-a587-467a8555b600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:61:f8:a2:7d:cf:49:81:cb:98:3d:2f:e5:46:21:1f:b9:ff:
         1a:ec:07:ec:1b:2c:4b:b8:3b:96:2d:38:41:5b:80:4d:b0:d1:
         ff:3a:15:37:71:2c:6b:69:bc:9f:58:56:96:ed:2e:1a:79:8a:
         9c:8b:80:69:f5:48:87:60:b0:3b:e3:c2:01:b3:72:ac:66:06:
         9b:f7:85:d5:e1:d9:ef:43:be:bd:1a:1f:e2:71:fd:bb:43:b9:
         97:6d:bb:de:49:e0:ed:9a:63:92:9c:0e:e0:4f:f3:ea:19:6c:
         b1:90:25:1e:c2:eb:bf:0f:21:b7:b2:0d:f5:85:28:09:65:6f:
         6b:89:1d:80:41:b3:21:a6:56:02:fc:74:af:ba:33:1f:d8:d0:
         a4:ac:e6:73:53:a8:90:f4:f5:69:5f:55:a5:88:75:f6:22:72:
         1f:29:32:53:35:5d:b5:a7:3d:a9:84:f2:19:de:33:5d:c2:29:
         bd:4a:6e:fe:3b:77:22:97:31:50:76:c3:fe:c0:35:90:e7:c9:
         fa:b9:75:74:b1:ee:d5:ec:67:47:a3:6f:d4:d0:9d:54:58:9f:
         d5:e6:b7:36:46:5e:46:19:87:72:7a:c3:d5:05:1d:1e:07:09:
         89:22:ee:10:90:9d:a9:c5:28:6e:1d:b0:55:5a:98:00:a6:69:
         3f:4e:20:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:43:42 2025 by rpki-client