Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a024df37-caf2-316a-905a-bdeae9fc90f3.roa
File:                     a024df37-caf2-316a-905a-bdeae9fc90f3.roa (raw, json)
Hash identifier:          WVGZeRXa5S5VP41Q2KUT+100Mkf8/apRVywFRn6eqh8=
Subject key identifier:   DC:F9:53:65:4A:B0:9F:70:C8:1E:4F:90:8F:C5:7B:1A:79:26:B8:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF07A7CCDB0380A6ACDB620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a024df37-caf2-316a-905a-bdeae9fc90f3.roa
Signing time:             Thu 24 Jul 2025 12:38:49 +0000
ROA not before:           Thu 24 Jul 2025 12:38:49 +0000
ROA not after:            Wed 22 Oct 2025 12:38:49 +0000
asID:                     396596
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:7a:7c:cd:b0:38:0a:6a:cd:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:49 2025 GMT
            Not After : Oct 22 12:38:49 2025 GMT
        Subject: CN=4c5a038b-8784-4d69-a381-b2b284313a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:90:83:93:dc:a7:ff:34:ba:36:dc:e7:4b:
                    d4:9f:66:ab:e3:09:36:9d:75:f8:92:2c:cc:6b:f6:
                    55:c6:d4:56:4d:e2:0a:cd:20:9a:8b:01:15:43:1c:
                    8f:47:09:95:24:c0:8c:89:7d:fa:04:e4:8a:31:de:
                    03:08:6d:52:a1:4e:bb:06:98:9d:d8:48:61:a5:ae:
                    0b:a2:0e:f0:31:48:73:9d:40:ee:53:f6:80:46:c0:
                    aa:cb:e0:df:36:ac:3b:7c:72:f1:1a:f3:5c:fd:fa:
                    24:d5:77:fb:92:95:91:de:e9:a2:7f:52:bf:1c:1c:
                    19:cc:dc:7b:bb:2b:fd:f6:b1:ba:be:e7:d7:f6:02:
                    8b:24:59:02:f8:12:4d:bc:fc:af:6a:45:77:81:f1:
                    fc:b9:00:70:6b:e8:d5:de:62:cb:61:d3:df:34:27:
                    0a:e7:fc:b2:6e:49:8c:e5:22:54:04:69:07:5a:65:
                    ff:9a:0e:0c:10:3e:69:b6:58:6e:98:71:f6:97:b5:
                    8b:6f:60:14:23:5a:30:0a:35:04:20:39:53:86:b4:
                    65:77:ae:c9:d0:59:01:7a:27:67:ee:96:42:0e:22:
                    39:fe:78:e8:58:08:43:ea:9a:26:33:a0:75:85:ec:
                    5b:43:69:13:b7:44:0b:cd:11:33:aa:f9:2f:ce:3f:
                    41:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F9:53:65:4A:B0:9F:70:C8:1E:4F:90:8F:C5:7B:1A:79:26:B8:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a024df37-caf2-316a-905a-bdeae9fc90f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:69:e2:e7:85:78:97:60:e9:57:1f:53:2e:54:f4:e1:13:29:
         0c:20:62:8e:5b:7b:79:26:0b:d2:16:a7:91:8d:3a:db:8b:42:
         ad:bf:1e:42:bb:b5:38:67:db:d7:b6:2d:5d:ec:8f:a2:e8:c9:
         74:b2:03:ee:ac:5f:f5:96:f8:22:6b:35:39:1f:81:cb:67:ce:
         8d:ba:e6:0a:d2:3e:0e:e4:8d:cd:ac:c1:ce:6f:57:22:58:79:
         7c:09:cc:00:ae:10:f7:77:d0:fd:93:26:d8:a3:c1:b8:44:4e:
         6f:ca:ed:58:19:06:c0:6b:74:1f:fd:79:87:8e:44:d1:85:1a:
         e9:12:98:2a:c1:2b:41:3f:1a:3d:06:23:b8:69:a2:84:aa:df:
         83:87:c2:75:6a:48:5b:35:cd:f5:4b:a8:5e:10:ed:9d:c8:68:
         41:61:da:26:12:fc:43:eb:5f:4b:a0:c3:55:52:4a:a1:64:f2:
         d4:fb:99:5d:c8:6b:bb:c0:15:24:6b:1b:34:f9:10:b6:53:47:
         01:3b:ec:9a:d9:26:71:b4:77:22:24:17:ff:04:62:83:77:00:
         8b:ff:fa:3f:86:4c:a2:98:cb:f1:46:2a:63:49:9f:74:d3:ab:
         5e:47:a7:a3:0e:14:c4:59:29:52:c9:58:01:20:5e:2e:00:a4:
         44:5f:18:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:07:50 2025 by rpki-client