Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa
File:                     0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa (raw, json)
Hash identifier:          RzdUM7c77ipviahyC3vzCGYzgnqX3/eZGDor8BqFtvw=
Subject key identifier:   66:0B:FB:F6:8A:DD:87:D9:D2:9A:D8:BD:31:F3:70:D5:3A:78:AA:B6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DAFE9C1D7EA13A543B9480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396582
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:fe:9c:1d:7e:a1:3a:54:3b:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=0450f15c-003c-434d-85a7-4362a6407b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c8:8b:9b:95:2b:6e:df:80:19:14:e7:db:c2:
                    a7:e4:5c:3b:69:17:da:d0:c2:77:5a:3b:bf:9f:37:
                    6a:36:6f:bd:45:2b:46:d5:8a:22:82:df:da:71:23:
                    cb:a2:d8:f1:d7:3f:64:61:cc:19:41:22:e6:42:18:
                    47:67:b4:38:43:2e:10:e7:98:58:e2:2d:62:a9:53:
                    16:81:a6:21:17:e0:54:41:d9:7e:9c:8b:dd:e5:1e:
                    8f:81:a6:d7:c8:7d:fb:72:ea:99:15:e4:11:b3:cc:
                    60:9c:6f:22:62:9b:23:e8:7f:b2:0a:31:de:c5:57:
                    d7:f5:b0:fd:59:fd:92:92:71:78:da:cc:87:6c:5b:
                    40:69:e2:a0:aa:19:5a:a9:30:d6:dd:d5:c7:31:2a:
                    cc:81:a3:27:90:b6:67:d4:fa:7c:ac:63:e0:1e:d7:
                    d5:16:12:53:1e:85:62:a0:56:e6:c2:07:c4:04:8b:
                    8d:78:a2:c1:72:03:2d:53:7a:11:49:1c:e4:3d:97:
                    12:ee:64:8f:8e:53:30:14:00:cf:56:3d:e7:29:c0:
                    c0:0c:33:9d:4f:04:53:e8:b9:85:78:6c:05:55:9b:
                    42:8c:ca:79:e9:c2:45:e4:8d:63:4c:26:e1:ea:1c:
                    e8:96:f8:7f:2c:b8:b4:79:cb:0d:ea:86:05:7d:8f:
                    69:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0B:FB:F6:8A:DD:87:D9:D2:9A:D8:BD:31:F3:70:D5:3A:78:AA:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:26:32:c4:4b:6d:d2:fd:c8:c5:a0:ae:40:4e:3c:3c:61:00:
         9c:5f:70:06:60:dc:23:22:5c:f3:62:59:78:c9:fe:81:38:b9:
         88:be:c0:8b:c5:5d:d0:b1:c2:83:6f:26:c7:89:0a:4e:83:4a:
         f7:a7:33:e4:5c:92:6b:d5:6e:80:34:39:d1:3e:92:8d:dc:e2:
         f4:04:e0:e6:c1:07:a6:8b:51:c5:54:b3:c0:a6:90:1d:0f:34:
         7e:93:c8:ca:85:18:2a:e8:84:51:43:cc:82:ed:7c:1b:74:93:
         7a:21:48:03:43:ee:19:92:80:e8:ee:35:48:db:cb:5f:af:a7:
         ae:53:42:76:88:31:db:59:df:b8:24:e7:66:90:d8:37:33:10:
         68:48:32:42:03:fa:4e:5c:ac:cb:78:4c:5d:9e:53:40:9f:69:
         fe:79:45:b1:c1:e1:e5:92:b4:c0:ca:6b:b9:0c:3c:ae:60:a6:
         f9:bd:69:fe:e4:2d:a1:72:a6:dd:b9:9c:2a:42:95:fa:30:07:
         31:b2:0d:bf:91:e6:3c:61:fc:ba:cd:a9:ea:29:a2:6d:41:17:
         17:cc:3d:8d:97:80:76:a1:39:a7:14:d8:b9:10:4a:fc:8c:2b:
         db:c1:d7:c2:81:b5:bc:f9:ed:40:9a:2a:99:03:72:ca:25:72:
         48:a8:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:18 2025 by rpki-client