Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa
File:                     33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa (raw, json)
Hash identifier:          eD4SXl8YzmkYld1mwdl6YjI2900GcmWmKhyJUaJSV3M=
Subject key identifier:   1D:18:98:7A:CF:5B:B5:92:E4:2C:F5:D3:DA:F5:2B:2C:08:84:20:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119ABE5093FC8B485CD05CA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     40717
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:be:50:93:fc:8b:48:5c:d0:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=57863099-7cfa-444e-bd09-7ba8572aea4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:8b:3d:7e:c6:c1:a6:65:5d:68:2e:d8:6d:
                    1c:1f:8d:82:1c:28:9f:af:b8:7d:9f:47:ec:4a:4f:
                    e9:68:b0:f8:0e:33:a7:8c:0b:fb:c3:a5:09:a7:ae:
                    a9:f9:f1:61:35:3b:99:c4:a4:1c:76:61:c3:5e:73:
                    75:3c:15:ed:1e:1c:e7:9d:4a:01:ba:b8:ca:b0:4a:
                    00:cc:a2:7f:19:4f:28:39:63:7b:f6:68:3f:00:73:
                    98:81:af:6c:1d:de:32:f7:ac:7f:e5:e8:4f:e4:bb:
                    94:6b:48:6f:35:cb:37:29:5f:38:26:04:77:30:4f:
                    80:fc:69:c4:42:d8:df:31:be:f3:8d:6f:45:95:fe:
                    a5:99:e9:89:c5:b3:a7:32:8b:04:32:17:32:d2:6a:
                    f8:51:85:ae:aa:53:e6:6d:39:ee:d7:bf:08:4b:1e:
                    00:30:23:94:7c:b7:04:0d:34:bc:90:45:af:ed:b6:
                    3d:15:5f:1b:92:58:61:de:e8:1d:a0:79:e9:6c:2b:
                    58:ca:a7:70:0e:2d:b8:00:1c:58:60:1d:ae:cd:68:
                    91:dc:41:86:94:b6:3a:18:03:49:a1:ac:48:dc:01:
                    ac:ff:96:6c:96:71:d8:35:47:4f:74:51:63:57:ce:
                    82:91:48:91:67:a4:89:f5:d7:1c:28:33:46:a6:37:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:18:98:7A:CF:5B:B5:92:E4:2C:F5:D3:DA:F5:2B:2C:08:84:20:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33a1eb5c-1d69-3add-9aa4-e55163f8de48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:93:bb:df:c0:4e:51:7a:19:8b:61:a1:8b:60:c7:07:c1:ce:
         0f:77:46:61:94:e5:b3:2f:6a:71:57:a5:04:df:d9:1a:2b:4f:
         89:46:fb:d3:f8:0f:ff:12:75:33:dd:43:ae:d2:24:74:32:ec:
         fc:7d:4c:f8:fc:76:3e:83:ac:36:cf:ee:78:6d:3f:c1:49:bc:
         77:89:72:56:e6:b8:ca:32:61:09:53:ff:e0:8a:ab:47:8a:a9:
         da:36:71:0e:df:f1:b2:af:e6:74:13:37:1a:ee:c4:17:05:10:
         e9:bc:b0:d1:c8:e0:b5:d8:28:32:66:a0:dd:cf:7b:36:1c:a1:
         9b:92:5f:90:58:17:f1:d3:d5:e6:96:44:a9:2a:b5:7f:7f:f2:
         a1:5c:ce:aa:69:94:3d:a2:27:bd:78:85:10:d8:e2:e4:df:5b:
         c6:09:18:9e:45:98:46:a4:70:0d:f4:09:18:cf:cf:be:d8:9d:
         f4:2b:49:ef:12:ad:e6:3e:6d:47:c0:f6:c6:cb:a6:7a:3b:1a:
         2d:19:85:c3:8b:84:c5:f9:ff:c0:de:a7:5d:0e:de:c5:3b:56:
         bc:0c:05:b5:23:f0:de:ad:87:26:3b:50:1b:dc:93:63:af:fb:
         55:c2:88:8f:e5:ea:cd:f6:64:d3:15:8d:06:c2:d3:1a:b8:4b:
         9a:29:47:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:15:35 2025 by rpki-client