Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02ed6247-086b-3dbf-9146-f800d023870f.roa
File:                     02ed6247-086b-3dbf-9146-f800d023870f.roa (raw, json)
Hash identifier:          FMOTF6k++CZ+MQI2Vx9WITqH8/6mEQSdueO4GLHrL8U=
Subject key identifier:   51:74:47:E4:9B:1D:37:BC:B4:B2:C6:E3:5C:A3:85:28:80:C1:07:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F5911D32D80A42C3939D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02ed6247-086b-3dbf-9146-f800d023870f.roa
Signing time:             Thu 23 Jan 2025 13:38:26 +0000
ROA not before:           Thu 23 Jan 2025 13:38:26 +0000
ROA not after:            Wed 23 Apr 2025 12:38:26 +0000
asID:                     396553
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:91:1d:32:d8:0a:42:c3:93:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:26 2025 GMT
            Not After : Apr 23 12:38:26 2025 GMT
        Subject: CN=b8e17647-d213-450e-bb11-2fe3a5bd3b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:84:8c:f6:90:02:e2:cf:a1:e7:96:bc:f8:51:
                    ea:e0:f8:cf:2e:10:01:fb:e2:ca:dc:45:63:66:b5:
                    e9:bd:d6:ec:41:9a:ea:43:64:da:29:63:9b:04:6d:
                    13:ac:93:b8:51:d6:ea:94:20:53:0a:50:7d:9b:b7:
                    f6:ca:b3:e2:4b:37:de:c7:a2:f6:15:09:6d:5e:f6:
                    99:41:0d:f4:4f:85:1e:78:da:43:f7:bd:ac:e8:68:
                    e7:3a:4f:48:a7:e5:be:5b:05:74:be:9a:28:72:ff:
                    15:a6:68:33:9f:5a:da:ca:a3:8a:2f:f4:85:1f:8c:
                    b6:a5:3a:99:dd:a7:45:5a:c4:0d:8e:67:fe:82:1c:
                    68:a5:f6:f0:71:0c:c9:ca:52:1a:28:98:e3:a7:59:
                    7a:fd:94:e5:8d:e7:43:df:56:8d:ae:0e:29:0e:fb:
                    02:c2:7e:1a:54:c0:61:63:8e:9d:0d:b7:64:4d:14:
                    5d:9b:14:c6:36:cc:b9:92:a0:87:55:5d:3f:61:85:
                    f4:25:2f:93:cd:c0:1d:ae:b3:6a:c0:95:bd:eb:57:
                    f2:07:12:86:f3:8d:8e:2d:bf:b1:61:cf:ab:b6:dc:
                    27:f0:74:54:7a:a1:c8:07:d0:2e:86:40:cb:52:f1:
                    c8:b3:7c:dc:c3:39:2c:d8:a7:58:36:19:64:3a:0e:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:74:47:E4:9B:1D:37:BC:B4:B2:C6:E3:5C:A3:85:28:80:C1:07:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02ed6247-086b-3dbf-9146-f800d023870f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:ef:2f:b7:58:67:85:b0:11:b7:e2:c8:5b:3f:1d:0a:5d:7d:
         c5:88:02:d5:6f:8b:f2:09:b2:26:e7:be:fb:52:7c:3c:c7:19:
         9d:7d:ee:79:75:01:bf:df:72:74:fa:a1:b6:2b:96:17:4f:98:
         d8:ed:9f:bf:03:9e:bf:e6:b9:55:06:31:7c:4e:cf:2a:05:ac:
         64:5c:5d:05:73:7c:cf:5c:05:21:8e:8b:55:66:a6:16:2f:1f:
         fe:e7:c3:7c:57:8b:70:02:54:22:7f:b3:86:df:5c:7f:a9:cf:
         77:ef:98:7b:5b:06:8b:cf:46:a3:a3:b8:ba:67:4a:c7:06:8e:
         6d:61:b1:c6:14:a3:a4:fb:a4:8a:c8:6f:05:85:4f:6b:de:c4:
         e4:23:80:d1:da:00:fd:c8:fc:3f:0d:f9:10:6a:9d:eb:3c:83:
         f5:6e:43:82:37:7d:b3:77:32:b6:15:c8:15:ea:56:eb:54:09:
         6d:2a:12:bb:b1:df:99:fa:71:6c:7d:36:7f:06:17:c6:b5:b4:
         14:bb:64:dd:d4:ec:db:25:46:34:2b:34:06:66:4c:a7:e5:e6:
         31:cd:2a:3f:66:29:64:61:19:f9:71:a5:be:de:7f:21:3a:e4:
         31:86:04:c8:1d:f6:97:3a:fa:9d:95:65:58:7d:01:91:7d:d5:
         5c:ec:d4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:27:36 2025 by rpki-client