Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db5b7c4-aa1d-3b4d-bc68-839b4405f45c.roa
File:                     8db5b7c4-aa1d-3b4d-bc68-839b4405f45c.roa (raw, json)
Hash identifier:          To/lD8QXJbVVmc15MRMJ2eYXv2Qirpo9+qVrFdwwCa0=
Subject key identifier:   66:0F:DF:3E:B0:4B:B1:EF:27:96:A7:3A:07:D2:BF:18:30:CA:0A:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA2C642EF9599D44A7BAD696C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db5b7c4-aa1d-3b4d-bc68-839b4405f45c.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     19836
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:42:ef:95:99:d4:4a:7b:ad:69:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=5bca8450-9fec-4519-8e89-eff2e6916639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:49:a0:97:9c:e1:24:a2:72:61:ca:ad:50:
                    5c:89:29:6b:10:72:df:9d:7d:0f:91:2c:7c:2a:a8:
                    f4:1d:ec:9e:f6:12:f7:37:5c:a3:b6:e9:ac:7f:25:
                    e6:93:0e:58:aa:e7:70:ba:57:b4:09:84:0a:a0:c4:
                    45:cb:67:54:bb:f6:4c:1e:be:04:a9:88:f2:6e:de:
                    09:c8:d2:8e:7b:df:8a:4b:0d:a2:b8:4d:be:68:b0:
                    9f:a2:be:98:fe:13:1a:1b:63:b2:f6:fc:e6:e3:ad:
                    99:17:16:1b:19:19:b7:f1:65:d9:f1:02:fd:27:c5:
                    5d:f3:2d:c6:aa:49:91:32:5f:97:ca:c5:0f:31:62:
                    44:ef:89:bb:75:af:53:a8:6d:4d:21:a3:8c:2d:7c:
                    f8:13:f0:94:df:a8:86:50:f4:10:35:ef:6d:d9:1d:
                    e4:c5:1a:f6:b1:29:5c:72:99:c8:c3:e5:66:a4:d2:
                    64:a5:0b:a9:c9:af:b7:7f:04:7a:00:42:e6:23:0c:
                    36:dc:29:05:ac:ab:9b:f0:83:9f:49:26:43:0b:2e:
                    48:5b:01:4a:6a:c4:73:27:ad:21:d1:f1:8e:eb:fa:
                    e7:b5:69:f3:f1:c4:ae:1d:bd:d7:a1:01:c5:56:f7:
                    ba:88:25:86:68:a3:42:b7:5e:3e:26:7d:34:c9:13:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0F:DF:3E:B0:4B:B1:EF:27:96:A7:3A:07:D2:BF:18:30:CA:0A:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8db5b7c4-aa1d-3b4d-bc68-839b4405f45c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:8f:7a:01:cd:aa:d0:29:77:71:c1:bf:1e:8d:f7:a4:f7:bb:
         bd:ad:a5:0f:5c:c2:e5:6b:96:6a:e0:75:72:86:be:94:05:a1:
         5c:7e:8b:14:ed:73:ec:72:8c:cf:d4:41:a4:ca:2a:68:f8:e9:
         e4:72:53:f3:72:b5:1b:f4:03:c3:46:7a:6e:8d:80:40:04:a5:
         42:66:12:87:3c:2d:20:77:00:32:6a:85:d0:17:b2:0a:49:67:
         0a:43:0e:c5:8f:4c:91:ec:5e:8e:ad:81:e9:40:5e:63:a5:11:
         a2:eb:8c:b3:1a:dc:02:24:1c:fd:5d:c5:9a:51:37:43:64:11:
         44:df:1b:9a:aa:d6:75:64:ff:55:d1:39:32:dc:75:a9:a2:a2:
         90:a5:58:a4:c8:e3:9a:7e:8e:df:2a:44:e1:92:8a:c0:ab:d8:
         2a:c1:c4:15:e9:be:1d:3a:13:e5:ce:1f:d4:fb:a7:0f:fc:75:
         51:c2:c0:6a:3f:17:08:bc:d0:1e:50:07:9c:bb:fc:5b:d1:fb:
         67:ff:e6:18:f8:fd:74:0a:fc:b0:e2:12:2f:84:2c:19:cc:fa:
         a6:31:f4:90:90:24:78:b6:ab:ba:80:7b:34:a3:fe:bb:50:a7:
         1a:a8:5e:9e:fc:d5:53:ca:39:0a:59:41:7d:72:cc:22:1e:16:
         98:98:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:33:18 2025 by rpki-client