Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f563e37-496b-38e9-b921-ad296cae4c5e.roa
File:                     7f563e37-496b-38e9-b921-ad296cae4c5e.roa (raw, json)
Hash identifier:          cL6/AWQf8nddycJQswm1kW4Yu87Bjjgs/8zua/G6TKY=
Subject key identifier:   36:9E:72:4A:A7:39:AD:F6:57:D4:B7:81:F1:85:3B:F2:77:D7:0E:CF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6290CAAE9DFE9D1773F3C980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f563e37-496b-38e9-b921-ad296cae4c5e.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     36624
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:ca:ae:9d:fe:9d:17:73:f3:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=758c1be8-a75d-4234-97ac-c37519c6c0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:3c:35:53:31:f8:10:00:c8:95:38:22:79:
                    51:3e:66:5e:b8:d5:f0:ba:72:4f:2a:0a:aa:ff:a6:
                    74:f1:ca:b0:94:70:99:6b:47:eb:46:f7:e2:94:65:
                    18:56:21:9e:92:dc:51:ca:38:3c:a5:6a:f7:21:bb:
                    d1:c1:fc:55:bc:02:0b:4e:78:b3:dd:8d:ef:cc:f7:
                    f3:76:0f:a6:8f:ba:cf:a0:1b:67:4e:0b:e1:d8:de:
                    ea:5c:41:e0:3d:73:d3:7c:cc:fd:20:5e:80:ca:ea:
                    ae:95:5c:85:c2:30:1b:b4:f5:62:a5:93:06:16:4b:
                    bb:0b:4b:f3:9e:d7:01:25:aa:18:b5:74:b2:7a:16:
                    1f:40:b3:73:d4:e5:e3:4e:8f:99:a0:0c:48:bc:c5:
                    dd:c4:b6:1f:fb:a2:a7:9d:93:3b:ba:6f:4d:f6:c0:
                    90:03:10:b7:bc:cd:50:eb:8c:0e:5e:0c:10:09:6a:
                    e5:be:4c:28:99:c3:56:fc:a7:13:ca:0b:dc:fc:0e:
                    04:ec:13:8c:34:5a:b6:1c:9d:75:3a:a4:8e:3d:53:
                    53:34:7d:bd:af:f6:77:63:0a:36:6c:d9:71:bf:be:
                    58:04:37:6c:69:6d:6f:03:8c:5a:57:44:7d:b7:f3:
                    b5:29:8f:09:c8:91:7b:35:e0:03:89:bd:bb:39:fc:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9E:72:4A:A7:39:AD:F6:57:D4:B7:81:F1:85:3B:F2:77:D7:0E:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f563e37-496b-38e9-b921-ad296cae4c5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:2a:5e:f0:32:e0:23:16:39:98:02:ca:82:a6:88:e6:4d:
         f1:e2:cd:b3:f0:13:2f:7d:5e:df:83:70:94:b0:d6:e2:37:72:
         51:ef:19:57:90:b4:f0:43:27:5f:81:27:bb:83:78:44:d4:cd:
         f4:54:ef:dc:6d:32:6e:80:1c:18:d1:20:1b:2e:f7:3d:a9:df:
         28:cf:c8:b8:55:c1:23:25:1d:ed:fa:7a:1d:d2:9f:6e:e8:72:
         84:51:bd:bc:d7:fc:13:ea:d8:99:6c:3b:d0:26:9c:82:0a:a5:
         b9:61:48:f8:29:19:0a:06:4a:de:0f:06:0a:19:b4:85:a4:bc:
         cb:b1:49:eb:4c:bf:cb:49:c0:2a:2c:d2:52:29:a6:67:d0:33:
         35:6b:a8:50:16:24:d1:4a:11:2a:42:21:80:0c:12:09:17:5f:
         3b:6d:d0:4a:45:f0:83:85:6f:fa:02:d3:dc:e3:f0:a4:63:87:
         8b:82:f1:1c:6b:42:20:27:6b:bf:17:84:8b:85:92:70:7f:0e:
         b2:18:9c:ea:dd:a9:e1:f4:40:ae:52:e6:98:a6:ae:a0:29:0b:
         e4:5d:6b:04:b3:f5:55:19:2c:89:e5:8c:d2:ca:b4:30:a5:b7:
         55:95:00:69:af:9d:5f:11:4e:42:3c:87:7e:fc:d7:27:f4:f0:
         6d:f4:8f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:14:26 2025 by rpki-client