Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e01e075-1b9f-395c-a052-6e18390e492d.roa
File:                     2e01e075-1b9f-395c-a052-6e18390e492d.roa (raw, json)
Hash identifier:          a6Cjo9AXG8Z2A1f8bvofjsFRVzT1ngOgK5/K6hZTq2Y=
Subject key identifier:   C8:AB:C0:15:A5:DD:F6:2C:92:D7:FD:A6:DE:97:5F:C4:76:0F:76:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848C573325FBBEEA305F3464900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e01e075-1b9f-395c-a052-6e18390e492d.roa
Signing time:             Tue 04 Feb 2025 13:33:14 +0000
ROA not before:           Tue 04 Feb 2025 13:33:14 +0000
ROA not after:            Mon 05 May 2025 12:33:14 +0000
asID:                     36632
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:73:32:5f:bb:ee:a3:05:f3:46:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb  4 13:33:14 2025 GMT
            Not After : May  5 12:33:14 2025 GMT
        Subject: CN=93d686e7-0aae-477d-aa82-f6f183387884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:28:af:65:6c:b4:db:e8:82:ba:96:31:8a:
                    b5:5b:9a:0c:85:a5:27:ee:7d:75:67:54:05:0b:ec:
                    97:7d:38:b6:5a:80:0a:96:95:5b:52:ae:f8:8a:0e:
                    82:64:a8:b3:5b:37:57:8c:f8:f8:28:5f:b0:43:45:
                    13:d7:91:a7:62:6d:c0:bf:50:20:c4:f0:67:aa:fa:
                    de:55:15:31:3e:8a:7a:75:33:f7:c2:e7:c7:a7:eb:
                    09:28:50:ff:b8:39:a0:10:69:cc:49:38:f9:be:c7:
                    cc:53:67:d3:0a:71:2a:be:88:08:c0:f8:7a:ff:99:
                    61:79:e1:20:91:2a:98:2d:4c:f6:48:ea:a2:e0:db:
                    bc:22:8c:a8:60:48:53:d1:6a:ee:d0:7e:e0:91:21:
                    46:e3:d9:a6:f9:65:80:65:0a:ab:e0:d4:2c:e9:d4:
                    fa:db:4a:5d:e7:43:0a:37:2c:c3:81:07:8b:d8:92:
                    7f:28:59:2a:dd:b2:45:35:11:a5:ba:a1:85:7c:03:
                    c2:9b:d0:c2:28:c2:76:25:79:8c:41:92:18:1b:69:
                    fd:16:d9:99:93:02:19:91:00:45:15:7a:23:e0:b8:
                    f2:a9:df:d6:ed:95:c9:2f:5c:6a:f9:d4:ae:8d:24:
                    5d:9f:66:6f:ef:12:f7:2d:14:fe:e8:22:73:71:bf:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AB:C0:15:A5:DD:F6:2C:92:D7:FD:A6:DE:97:5F:C4:76:0F:76:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e01e075-1b9f-395c-a052-6e18390e492d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ac:d8:ae:8b:76:c2:c0:d5:ba:68:78:a5:04:e4:cf:f0:ae:
         df:ca:ed:5a:02:1b:b2:fb:24:f8:b4:f3:34:3e:d0:48:23:d9:
         56:36:b5:e0:a1:ab:26:0f:a0:b1:8d:c2:89:17:a3:fa:5c:32:
         52:ad:ed:4b:51:7d:ff:dc:3f:3c:9c:ab:88:52:d4:d2:6e:86:
         fc:1f:ff:10:2b:b1:50:b5:50:89:32:0f:93:91:2c:c8:c3:73:
         76:2b:f9:3b:b3:81:ee:b2:a5:bb:94:01:2b:f6:db:f4:c8:2f:
         5f:18:30:d2:9f:9a:a9:e6:34:9e:ac:f7:3c:1d:cc:7d:3d:f6:
         9b:01:03:56:93:71:9f:d3:7d:24:6d:c5:9a:f9:b1:bb:04:93:
         2b:df:1c:68:d0:c9:69:ff:f8:48:3c:f1:60:d7:36:d2:00:a0:
         96:d2:83:b8:35:f2:47:22:72:f1:a4:15:d0:22:83:1b:7b:64:
         5b:53:c5:34:d4:72:e6:28:c7:e1:e6:5f:69:db:e4:3a:9e:c7:
         1a:13:5b:2a:81:eb:1c:22:36:4b:84:a7:32:71:8b:e9:bc:1f:
         ed:d1:4c:bd:b1:4e:61:cf:50:67:ae:1b:c1:96:47:1c:0d:18:
         0f:7f:bd:86:86:10:0a:87:7d:de:3b:4d:03:c4:0b:3f:1f:f2:
         85:67:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:02 2025 by rpki-client