Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b19d909-f30e-3e1c-9552-9b351c06b7bd.roa
File:                     0b19d909-f30e-3e1c-9552-9b351c06b7bd.roa (raw, json)
Hash identifier:          gUbq+xEs9MZR3XwPUOGfDfAHaX5ZPHFkWzabAGyS8EA=
Subject key identifier:   4D:91:01:C4:E0:4A:F3:63:A1:88:CF:2E:1D:B4:03:6B:2A:E4:C8:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849244E9203D6A71139FC1A6780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b19d909-f30e-3e1c-9552-9b351c06b7bd.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     397208
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:92:03:d6:a7:11:39:fc:1a:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=e00b95a1-8864-486a-b126-8b3313974e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:73:b9:29:44:aa:ac:13:b6:9b:39:93:11:
                    49:20:49:84:e0:37:a0:17:6c:14:be:45:f0:71:42:
                    eb:22:01:fe:50:d9:1b:8e:96:ea:98:f5:7b:77:ba:
                    2d:6b:e5:f0:8b:77:c4:b1:fe:d8:1d:0a:7b:01:91:
                    1a:78:86:04:0d:69:96:5f:79:96:89:71:a8:be:93:
                    2c:4a:a4:de:ac:93:12:94:5b:42:c3:f4:2c:f7:b7:
                    fe:5a:3d:63:15:ac:3c:3c:19:d8:f6:42:7f:92:af:
                    05:0a:de:7a:ea:cb:49:cf:aa:be:71:98:62:5a:a6:
                    b5:4e:6c:fa:03:a2:97:f8:7e:cb:8d:db:f5:4e:83:
                    47:df:cc:b9:e8:48:f4:64:a4:06:dc:39:e2:b7:b8:
                    a4:27:60:d1:68:5e:6a:39:8a:c5:0e:cd:cf:9d:eb:
                    95:fe:03:d1:9a:c9:7e:ea:0e:6e:72:4e:18:50:75:
                    cc:73:5e:ec:23:71:e3:47:32:1a:bf:d4:07:b6:99:
                    8e:6d:b5:9f:5b:8b:fa:13:d0:55:66:31:c9:17:57:
                    43:a1:05:ab:e4:b5:74:0a:94:f9:d6:48:b8:7f:1f:
                    eb:52:a1:be:a3:a3:e0:0c:a8:e2:4a:24:fb:fe:4a:
                    5c:2c:c9:d1:03:0f:23:5c:34:4c:6c:ce:10:32:2d:
                    7d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:91:01:C4:E0:4A:F3:63:A1:88:CF:2E:1D:B4:03:6B:2A:E4:C8:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b19d909-f30e-3e1c-9552-9b351c06b7bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:51:a9:8c:ce:7c:1a:8e:e6:71:f5:fd:96:af:b5:90:ca:70:
         dd:5b:a4:1a:76:65:0a:39:0d:62:0f:fd:4c:b8:c4:3e:72:4b:
         5e:10:71:44:67:e5:b7:ed:3b:8e:29:93:5b:87:e9:e9:eb:c7:
         65:c2:02:65:33:94:4c:8c:04:6b:5d:c0:cd:0e:06:40:32:27:
         40:58:88:19:28:02:ad:8f:aa:f7:a6:4d:17:50:9b:1b:cc:e7:
         37:7f:b6:90:bf:10:85:aa:9b:9d:95:b3:3c:46:b9:ac:24:bf:
         32:38:6d:bd:a9:d2:c1:fb:58:20:2e:71:9c:b1:e6:15:c2:81:
         27:2e:b2:95:92:67:d9:6c:45:18:6b:03:4b:bb:93:7d:4f:33:
         e4:f6:23:eb:da:71:54:d8:46:11:7d:df:68:14:98:cc:1b:e6:
         3a:ce:4b:dc:24:41:48:de:f3:c0:f5:81:14:5e:b9:16:6b:15:
         c3:50:ef:93:96:00:37:8e:aa:de:61:52:6d:9d:5a:21:08:ff:
         31:48:03:d5:6d:a7:42:56:e9:49:41:f2:d5:99:bb:69:eb:3a:
         4f:c0:bc:89:f1:64:f9:34:53:51:8b:f6:3c:1b:2c:25:df:00:
         ac:96:51:af:fc:34:d5:25:c0:d3:21:5d:27:07:71:01:9e:65:
         bc:20:98:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:47:32 2025 by rpki-client