Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04d40510-bb67-3939-93cd-5e6bbdcb722a.roa
File:                     04d40510-bb67-3939-93cd-5e6bbdcb722a.roa (raw, json)
Hash identifier:          fq5EOvIWEj4VSthCB8rzws/nFNAeVszsoWiJg6o2uPA=
Subject key identifier:   00:50:47:BE:35:5A:70:0A:0B:91:50:BF:C8:9E:5C:9F:C5:05:FF:43
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9CA989660F554D30FD940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04d40510-bb67-3939-93cd-5e6bbdcb722a.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     32651
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:ca:98:96:60:f5:54:d3:0f:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=fc375ca4-67c9-4326-af12-dceb5702a4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:df:45:45:22:e9:c5:c8:ad:c8:d7:b9:45:5d:
                    8f:ca:2f:99:70:7f:9e:3c:88:df:54:f0:52:16:86:
                    43:00:48:3f:f4:4f:40:2c:3d:98:5a:5a:dd:dc:30:
                    9c:23:8c:b8:6b:c0:92:f4:4b:73:a5:cc:4d:8a:a8:
                    7a:58:72:f7:ab:98:d8:2b:16:19:a0:38:f1:dd:de:
                    98:3a:ef:09:2e:66:ee:cf:ca:c4:ee:d4:11:1a:2d:
                    43:c6:27:73:6a:9c:9d:7d:a1:e1:0d:b5:fa:1b:89:
                    ba:83:4f:6d:d0:16:a3:96:b0:12:10:88:17:c7:12:
                    45:17:d9:44:f6:98:e7:59:7a:c8:c9:0b:65:5c:d0:
                    6c:2e:95:b2:bd:05:92:a1:3f:f2:c3:b1:16:2b:a3:
                    df:b9:21:e9:dc:dc:17:a9:81:f4:7d:dc:4d:00:37:
                    e0:cd:49:73:1d:fd:75:2e:6b:9b:3a:d0:33:c0:4d:
                    f6:2e:3f:7d:4a:00:ee:53:d9:b5:e6:b4:92:ad:80:
                    56:b1:e8:f6:b5:37:94:a2:1f:e0:25:28:3a:f1:8d:
                    3c:ca:ab:42:bd:ff:44:0f:59:8a:a2:3e:44:d6:14:
                    e4:0a:a8:7b:27:80:4a:d4:ef:7a:28:b3:47:15:66:
                    bf:f5:b1:ad:25:67:6d:1a:0f:34:54:6b:89:cb:b8:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:50:47:BE:35:5A:70:0A:0B:91:50:BF:C8:9E:5C:9F:C5:05:FF:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04d40510-bb67-3939-93cd-5e6bbdcb722a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:48:06:39:7b:2d:5e:2e:06:8a:e8:32:de:ae:aa:1b:e7:
         cc:59:f1:29:96:ec:10:af:73:f9:8f:45:7e:09:d6:7b:ee:8b:
         cc:2f:2f:3c:d1:5f:ed:e0:88:ba:13:05:58:87:18:8b:7c:a0:
         fb:30:4b:db:09:1e:34:e0:1a:19:07:b9:b8:66:69:93:65:d9:
         fd:39:21:e6:58:43:5c:6b:4e:4e:39:c4:fd:9d:cf:e9:9e:fb:
         8d:db:c4:7b:ab:10:da:24:2a:60:b3:94:30:b0:47:59:ae:39:
         0d:60:42:46:33:60:c0:42:d4:9e:c2:f8:eb:90:f4:29:f6:ef:
         b5:fe:60:d7:0c:30:47:df:4b:b9:92:25:3a:a2:dc:50:81:32:
         eb:d7:6d:36:cc:a2:4f:30:ef:11:68:0d:30:89:99:b6:93:0f:
         72:a5:0e:bd:d4:88:a2:6d:d2:a3:98:6d:a1:76:9a:c4:bd:8a:
         67:fe:68:c4:09:57:b0:58:d4:0f:6d:21:91:90:7c:ab:ef:53:
         4b:69:f2:71:51:ef:a0:3b:59:37:30:d5:bf:be:b2:f4:ec:ef:
         10:de:f0:2b:71:c3:43:58:76:7b:cc:c3:71:89:16:ca:5a:f3:
         55:d1:28:c7:b6:69:df:de:2b:8b:9a:d1:61:a8:d2:a6:98:49:
         7c:09:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:05:01 2025 by rpki-client