Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
File:                     2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa (raw, json)
Hash identifier:          Xw/FPLPLataakcjA8TwMDiYmxgtCLyY3VHF8jpE7OXQ=
Subject key identifier:   9A:CF:62:C3:92:6E:BC:E8:ED:52:73:5A:C2:0F:7A:2C:2D:99:37:91
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F7153F171DAB68E6AD4F2BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396553
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3f:17:1d:ab:68:e6:ad:4f:2b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=fd607645-ce03-4ae0-8b5c-2d5c8766ed12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4d:1f:b8:e3:8b:72:ec:b7:9d:79:7f:6d:15:
                    bf:66:df:d9:20:db:41:80:19:23:f1:7e:79:00:78:
                    b6:ed:14:61:57:05:cb:ca:55:58:10:8c:34:e8:03:
                    43:23:fc:ca:77:de:56:19:65:b5:da:f8:46:fb:35:
                    0f:23:21:ba:4e:2b:f9:4e:fd:2f:58:91:81:09:11:
                    f4:07:4f:d7:9e:da:78:a6:eb:da:e7:d9:ff:00:32:
                    a0:69:a8:6d:09:06:bf:26:8d:ce:65:61:cf:52:b5:
                    e8:08:54:60:79:c3:50:4b:7e:cc:d8:13:f0:8a:02:
                    eb:5a:1c:28:6b:1a:35:fe:24:3f:dd:6f:ac:55:f2:
                    45:2a:46:12:77:f6:d9:f4:04:77:d4:3c:be:e1:b0:
                    a2:ca:48:db:6c:d5:9e:45:16:d3:32:a0:ca:45:e5:
                    42:76:19:c9:c7:3d:dc:38:f5:5e:88:de:dd:fa:c0:
                    81:55:06:86:c6:21:e0:d1:e6:ce:e1:e5:4c:c8:f5:
                    42:04:6f:73:a6:43:05:5e:91:50:c4:05:cb:49:27:
                    e8:27:01:51:17:6f:ea:18:f4:13:17:28:ec:44:00:
                    94:d1:2e:5a:79:09:27:5b:02:cb:45:b0:70:6e:0b:
                    6e:0f:31:c2:07:83:b0:63:4c:cd:c0:d7:b6:6f:d3:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:62:C3:92:6E:BC:E8:ED:52:73:5A:C2:0F:7A:2C:2D:99:37:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2a85e5af-726e-3fc4-a7dd-ee94a828a998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:95:8e:fc:f8:ba:0d:72:af:df:6b:f1:84:08:6e:69:de:4c:
         d3:41:b6:36:62:bb:26:96:89:fb:a2:54:44:5d:fc:4d:fa:63:
         21:05:79:c7:73:3d:0d:39:93:19:21:71:aa:82:bc:c0:c5:ff:
         90:14:95:ae:1e:d1:3d:98:f4:ba:91:74:7e:68:3d:d8:c7:08:
         e4:c0:33:51:25:19:7e:b2:85:dc:ea:8a:3a:80:4d:f3:93:ac:
         09:d8:75:ec:b4:2c:27:29:a5:ae:01:c4:ed:e6:ea:1b:ee:5b:
         88:0b:32:de:3d:fa:84:b9:f7:59:32:17:b1:25:57:69:95:f2:
         3d:6f:ab:38:88:65:c2:fb:8b:a9:4a:42:49:b4:98:55:fc:56:
         f8:e4:e8:8b:cd:7d:db:5b:d0:7d:34:eb:79:c0:85:17:61:8f:
         e9:8a:94:e1:75:ba:ac:51:4d:4b:25:42:7d:8f:fd:23:19:40:
         2f:73:ee:3b:2a:a6:07:c3:af:ce:70:be:c3:9b:8a:5b:ec:39:
         aa:43:55:fe:1e:34:ed:87:d5:6b:f9:a5:95:3b:28:08:34:b3:
         3c:85:bd:fb:4b:43:ca:fb:d9:b1:12:b3:f3:fd:b4:39:f8:89:
         98:ba:9b:4a:87:df:fe:6f:2c:30:c3:cf:33:84:20:c3:f2:ff:
         40:91:f8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:45 2025 by rpki-client