Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/276ccb30-f68f-3060-86ab-b66e37695d92.roa
File:                     276ccb30-f68f-3060-86ab-b66e37695d92.roa (raw, json)
Hash identifier:          jYRcgjSrl4eVx8KVv0EBLwKHM/xreIX/XzOGfRVIUyA=
Subject key identifier:   4F:7D:FE:DE:1A:B6:99:51:18:A5:F8:22:F3:43:43:CE:0F:19:4F:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A189561B4E6F1204BCC485540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/276ccb30-f68f-3060-86ab-b66e37695d92.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396604
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:61:b4:e6:f1:20:4b:cc:48:55:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=c0b473ac-7521-4b85-9881-ff9eefcc62d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:89:c2:06:ac:6b:12:18:5b:02:e8:57:80:
                    aa:e7:3f:8a:2a:51:fc:bc:57:18:c9:05:23:2b:6a:
                    73:6e:57:8a:f1:eb:ba:38:6a:80:1b:5b:79:96:e7:
                    19:37:84:fa:74:25:d0:aa:39:73:0b:fb:2a:93:c5:
                    d6:da:f1:c9:59:cf:a8:95:3e:84:46:a3:c7:ef:db:
                    cd:68:b1:96:e8:80:d0:1e:b4:dc:5a:7e:56:62:ef:
                    80:00:3f:21:5e:6f:ae:4b:2f:87:e5:e0:b7:29:67:
                    e3:59:30:e8:f3:9a:89:d2:87:40:0d:3b:c9:5d:3f:
                    40:09:b4:09:f9:ab:91:f1:0a:df:6e:a3:56:2f:9e:
                    0b:06:ff:96:ed:3e:fb:6f:e8:c8:24:36:8f:9c:b2:
                    6a:30:19:ab:f5:2b:bc:4a:a4:a0:e1:c0:a4:cb:2e:
                    dc:dd:81:0e:40:db:37:a1:e8:e7:e7:54:32:c7:05:
                    51:10:e5:d1:02:7f:0e:c9:c3:eb:6f:48:65:b0:a1:
                    51:df:01:50:be:27:4c:79:e8:ab:11:d3:93:17:57:
                    70:f3:32:b2:99:bd:1d:e9:8b:bb:f1:e3:71:1a:3a:
                    52:59:fe:13:3d:28:16:e9:d8:aa:d8:e2:2d:66:1d:
                    bb:26:2d:f2:80:ef:03:35:97:22:25:8e:f6:68:a1:
                    47:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7D:FE:DE:1A:B6:99:51:18:A5:F8:22:F3:43:43:CE:0F:19:4F:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/276ccb30-f68f-3060-86ab-b66e37695d92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:fd:a8:35:95:12:61:f9:50:44:98:36:c4:6a:d9:98:a6:8e:
         82:96:48:6a:df:2c:6b:5a:3c:21:66:10:17:59:62:83:ef:92:
         3e:2e:62:f8:73:46:53:87:2d:68:6a:ba:bd:3a:80:db:58:2c:
         bf:1b:bb:93:a7:91:02:56:cb:0f:88:8f:3d:0d:66:e3:37:6e:
         7a:00:da:0b:a4:ad:4c:1a:27:9b:c6:e5:07:33:40:4a:1c:24:
         5d:ac:19:d1:99:37:67:06:7e:67:29:6a:bf:e0:e0:20:f4:a5:
         ae:43:2e:b0:7a:fb:a3:05:f3:e7:bf:be:26:39:0d:41:f3:a9:
         44:a8:ca:c6:fd:d4:8b:a9:88:2d:35:e2:85:da:b1:ec:13:37:
         1d:0b:74:8a:d5:40:53:d2:f6:c3:fa:e0:9e:d2:09:fd:44:2f:
         0f:63:65:fb:64:dc:3c:c5:88:fb:3e:12:48:3d:1b:e1:63:31:
         e4:9c:24:53:9b:da:03:ae:7c:0a:57:91:46:1b:df:67:1e:e5:
         2e:40:22:eb:ef:fc:82:46:c5:09:af:e6:94:c3:3f:aa:87:4b:
         30:aa:87:e6:ae:85:33:22:a3:cd:c1:ef:36:3c:80:b1:6f:11:
         33:07:cd:b2:2c:09:76:a7:9e:24:ab:a0:57:f3:43:64:cd:f2:
         3d:3d:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:06:25 2025 by rpki-client