Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d556697-6c46-33bd-85e9-d5746634d5b6.roa
File:                     2d556697-6c46-33bd-85e9-d5746634d5b6.roa (raw, json)
Hash identifier:          dnMPru1g+BK5aDVrRGLYpBAQJM3kC9aDDJ+fSl0rFaA=
Subject key identifier:   39:79:40:EA:2C:36:DB:39:55:AE:19:74:A3:22:B5:6D:32:50:C6:31
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496FAEFD1882DD4935918770C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d556697-6c46-33bd-85e9-d5746634d5b6.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     396614
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:ae:fd:18:82:dd:49:35:91:87:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=9c0ce18b-5f1c-48a4-becc-dca668630b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:3a:74:26:df:01:17:05:32:e0:de:40:7a:
                    63:85:09:3c:16:12:04:f3:92:9e:b9:23:b9:73:8d:
                    21:5e:c3:ef:fe:56:16:94:70:5f:1b:12:63:a4:ec:
                    e3:09:02:97:fc:13:f7:17:15:c0:f1:e5:33:d8:56:
                    36:ce:3d:bd:dc:44:21:57:9d:7a:1c:9e:5f:91:23:
                    5d:c1:39:5f:17:e1:86:7a:10:dc:f2:44:74:c8:4f:
                    9c:d1:fb:7c:dd:81:f3:c2:10:1f:01:15:c1:40:4c:
                    51:50:38:37:bc:63:41:de:fe:12:24:17:3c:71:6c:
                    1a:2f:29:c1:8e:23:27:22:88:21:af:3d:c1:4f:15:
                    01:4a:82:21:da:b8:fb:ef:2d:d0:fb:c1:7c:74:8a:
                    86:36:59:8c:d8:d4:5c:c0:5a:e9:34:0f:38:a6:e9:
                    07:ee:5f:75:68:c9:39:54:6e:49:b2:9f:2f:f5:6a:
                    91:6c:28:35:9f:52:5c:fe:ab:9b:ea:7a:75:2f:8c:
                    f6:40:46:b0:fe:4e:a0:54:64:f6:58:4d:7d:20:7e:
                    d6:ce:96:df:34:3d:1e:d8:b5:65:8c:da:16:88:66:
                    1b:ad:de:e4:3b:3c:92:ce:e6:8a:57:8f:ee:5e:98:
                    98:db:37:31:c5:5b:01:25:04:a1:d9:ba:c3:04:f0:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:79:40:EA:2C:36:DB:39:55:AE:19:74:A3:22:B5:6D:32:50:C6:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d556697-6c46-33bd-85e9-d5746634d5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:3f:94:7c:5a:4d:e1:73:1d:16:99:b5:fd:60:d6:2f:2c:cd:
         c1:ba:9a:36:d5:4c:9a:9c:ff:c1:87:58:2c:7a:15:2b:7e:86:
         2c:27:b2:0e:96:51:55:6c:d3:2e:ec:e7:32:98:f5:df:45:46:
         cd:77:a9:b7:7a:96:73:e7:a0:86:50:d7:8a:36:2f:ad:44:fe:
         b8:30:88:91:ff:23:d8:85:14:aa:6e:f9:05:d1:89:08:b6:45:
         2b:51:46:04:9b:2e:64:bd:73:ca:e3:8b:12:f6:20:60:fb:fe:
         7a:ad:d6:11:a5:a8:45:37:d2:5f:34:5b:3e:70:c9:47:b1:bb:
         17:b1:e5:bc:22:8a:6e:60:2b:c5:a0:5f:a3:52:7a:f2:1d:01:
         43:ac:83:b5:49:3b:93:ad:b7:2f:6a:f6:be:35:d8:5f:c7:e1:
         d7:c8:ef:93:ba:89:10:e7:6f:2a:d8:15:bc:7d:92:f2:34:ac:
         a4:2f:2a:e1:e0:ea:d2:b1:49:ff:2b:08:78:8e:1f:9a:eb:69:
         e9:d4:b1:1d:67:36:2b:06:3d:47:0b:b4:3c:94:d6:a8:c0:3f:
         8c:9f:e0:bd:02:f4:1b:d4:45:cb:b8:ea:36:23:ba:29:1a:57:
         5a:4b:4e:22:52:a2:bb:bb:df:18:9d:eb:d7:df:32:b1:c2:bc:
         f9:b0:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:49 2025 by rpki-client