Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03f18b1b-0c54-365c-b4d5-3d08aeb3b08e.roa
File:                     03f18b1b-0c54-365c-b4d5-3d08aeb3b08e.roa (raw, json)
Hash identifier:          qoN8y2SBwxQTVs2J/dDU1DYSYdlX6EvpOfpBFMShN4s=
Subject key identifier:   80:C0:B7:7B:55:26:C2:47:6A:91:A5:DE:A4:63:54:B3:EB:56:F6:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA5D7EAAB1718B0C2DF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03f18b1b-0c54-365c-b4d5-3d08aeb3b08e.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     396557
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a5:d7:ea:ab:17:18:b0:c2:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=f6ae1854-4553-41cf-a204-522f8725f13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b2:46:7d:25:9f:eb:21:27:c7:3c:04:f6:ea:
                    6f:2d:22:9e:2e:d9:41:ab:bb:e9:54:b5:66:52:aa:
                    5f:cb:b8:f1:28:ad:e8:8c:16:de:46:36:93:f4:23:
                    f2:71:80:9a:45:81:8e:e2:80:79:ba:68:80:52:4d:
                    6e:56:52:1b:50:4f:ec:6f:82:23:cd:58:6f:9e:3d:
                    90:63:f2:f8:46:ca:a9:6d:92:71:b4:62:7c:c5:5e:
                    69:c1:72:d3:73:4c:cf:15:15:17:63:7b:87:e4:4b:
                    69:b4:d7:5d:9b:00:c3:3c:9c:72:bb:3c:d3:9d:80:
                    1b:f6:1c:d4:4f:93:35:42:74:e5:15:55:19:1e:9e:
                    bc:91:27:8e:d1:fe:9c:80:c7:fc:22:bc:41:07:a6:
                    7a:cf:64:2d:6b:48:88:70:7a:8f:b1:c3:88:90:d2:
                    b2:b7:f1:72:eb:0f:fc:d8:ca:58:f1:81:54:5d:06:
                    92:f9:3a:ce:f1:4c:7e:07:8f:53:2a:b9:5d:10:43:
                    39:0a:19:5e:bc:e8:66:a0:f7:16:9f:6b:4c:bd:4b:
                    d8:07:5d:f6:a2:c9:58:c5:ad:60:1d:7d:9a:fa:20:
                    02:73:c0:19:99:d0:e6:d7:81:76:0f:fa:fc:a4:36:
                    3c:0d:e4:f3:b1:4f:31:6d:7b:19:23:d2:ed:99:cc:
                    89:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C0:B7:7B:55:26:C2:47:6A:91:A5:DE:A4:63:54:B3:EB:56:F6:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03f18b1b-0c54-365c-b4d5-3d08aeb3b08e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:9c:e9:89:58:c6:49:c6:ca:78:64:07:ce:10:08:8d:28:
         d5:0e:df:91:71:a5:0b:d1:6e:73:80:7b:70:fb:d4:07:65:09:
         4f:a3:a6:ab:cb:d0:5a:d6:28:04:04:58:e6:16:7c:f6:c4:69:
         e2:63:2c:e4:3c:c8:20:dd:84:37:f0:c6:cb:8c:85:59:b8:46:
         4b:f4:a1:ba:09:67:bd:f9:01:c6:a9:71:c6:27:e6:b4:05:82:
         08:87:06:a0:13:be:b8:01:f1:80:d1:bf:61:ea:85:f6:ad:b4:
         d4:1a:6d:dc:2c:05:06:ea:dc:3d:97:13:e8:58:e2:83:48:69:
         7a:3e:3c:8f:ba:b3:28:e5:05:bc:9a:f9:17:6a:41:bf:10:b9:
         b2:18:51:ad:d4:e2:1a:3a:f9:0c:09:d0:2e:26:fd:57:e0:2a:
         16:59:e7:27:1c:ff:1d:83:50:77:c9:2d:98:1e:e5:95:bf:1d:
         d5:14:a2:a5:6a:5a:ee:db:62:5f:df:5b:bd:2c:eb:a9:c8:b5:
         50:f7:6c:98:ff:93:18:ea:a3:7a:05:ae:8d:b8:3c:d7:65:25:
         03:8a:0f:ec:40:91:23:af:67:28:a7:8c:0c:4b:13:32:ec:90:
         e7:6f:96:5c:1d:81:c9:3c:de:81:0e:e1:c6:85:f1:3f:fa:0c:
         7b:36:6f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:14:07 2025 by rpki-client