Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7330e72-5c25-3c8a-b31f-727b9653cac0.roa
File:                     c7330e72-5c25-3c8a-b31f-727b9653cac0.roa (raw, json)
Hash identifier:          Kv75DMzbQ3TVXeSsiCbCHFBt1qEdgXx1qT48KRP7x94=
Subject key identifier:   EA:B6:11:DB:DF:ED:C4:75:2F:38:92:46:53:40:EF:C9:8B:15:49:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF07B985BA1028387F30A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7330e72-5c25-3c8a-b31f-727b9653cac0.roa
Signing time:             Thu 24 Jul 2025 12:38:50 +0000
ROA not before:           Thu 24 Jul 2025 12:38:50 +0000
ROA not after:            Wed 22 Oct 2025 12:38:50 +0000
asID:                     36618
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:7b:98:5b:a1:02:83:87:f3:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:50 2025 GMT
            Not After : Oct 22 12:38:50 2025 GMT
        Subject: CN=2241447a-ed70-46d7-a1df-d3df316de711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:0f:d6:7c:0b:cf:b3:bf:ca:81:e4:16:ea:
                    ca:e6:11:84:2f:b0:80:a4:ff:99:9a:9b:f0:a5:57:
                    3c:f3:2d:ce:5b:be:b0:15:31:51:ce:3b:5d:03:d9:
                    01:77:93:c5:11:0d:e2:a3:41:e3:e7:29:1a:a9:13:
                    39:04:10:f4:ca:92:cc:67:71:5e:ce:3a:9d:86:68:
                    80:3a:3d:1a:7d:84:87:cf:ef:0b:75:6b:cf:87:c4:
                    56:08:90:e7:a6:7b:11:bb:9e:1e:3c:38:67:73:1e:
                    54:96:a4:db:03:7b:79:10:08:93:47:fe:ad:5e:12:
                    fd:8b:8e:d1:6b:d4:8d:03:71:2f:63:83:9a:8a:50:
                    fc:ad:23:33:b3:e1:70:d3:0f:b0:27:f9:d1:ca:2e:
                    0c:c6:f1:66:9d:32:26:7a:3a:b9:d6:5f:0c:b8:c5:
                    e7:b8:fb:71:ae:32:8a:31:4b:bd:89:3e:38:cb:34:
                    39:85:6a:e6:f5:6a:be:71:52:9b:12:68:c6:73:37:
                    f9:0b:9b:bb:49:b5:90:e6:d6:bb:06:5a:79:37:88:
                    e8:f2:1b:17:e5:1e:0b:43:34:25:81:81:2e:04:1c:
                    aa:3c:ab:6a:2c:ba:69:17:c5:0c:34:22:d6:c8:d8:
                    46:da:22:a4:e2:e7:37:17:56:00:95:b4:ed:51:f7:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B6:11:DB:DF:ED:C4:75:2F:38:92:46:53:40:EF:C9:8B:15:49:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c7330e72-5c25-3c8a-b31f-727b9653cac0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:e0:63:29:14:f0:0d:dd:cc:67:93:6c:37:89:b3:4f:2c:
         37:dc:b2:6a:be:08:99:5a:44:75:ec:66:9c:52:75:d9:a9:98:
         58:e1:1b:7e:50:4f:a7:22:7b:ef:60:45:b5:e4:50:2e:2e:21:
         98:64:43:01:59:24:f5:0e:b8:e9:d2:27:27:47:65:7b:64:82:
         e0:4f:22:6c:02:bf:e5:13:7c:3c:b8:ff:51:b1:d9:51:dc:15:
         ac:62:c8:59:7b:28:9f:e8:5a:51:76:27:34:49:5e:60:94:53:
         04:25:04:04:8f:3c:03:5e:d2:13:6d:e1:14:20:cb:9f:e4:a2:
         ef:38:3d:2e:0e:09:37:44:c9:33:aa:e3:8a:e0:79:c8:c4:6b:
         1b:83:64:f6:4f:f9:60:59:7d:8a:f3:03:ff:43:43:6a:15:b9:
         85:10:79:1a:c6:67:de:bf:f9:d4:0e:d7:eb:94:90:fc:55:f7:
         8a:4b:01:d5:1b:53:05:e9:0e:6b:cc:20:5c:f5:64:9f:9d:40:
         57:7b:47:a3:da:85:df:da:af:3c:de:ff:74:4e:bd:04:eb:f3:
         89:94:17:4a:16:45:a7:b7:33:2c:09:2b:c1:b5:56:05:71:c4:
         01:96:67:e4:d1:01:28:f5:46:29:f5:0b:72:48:94:f3:0f:be:
         62:ac:0a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:49 2025 by rpki-client