Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa
File:                     3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa (raw, json)
Hash identifier:          QmjEUAgKMQVPvprISSZ/kSxfqoduBq5hGovbK6opTYs=
Subject key identifier:   7C:1A:FC:2E:54:EC:83:2C:E4:E4:82:5A:51:40:A8:0F:C9:D0:A2:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119ABFBF9F1DC90F2C48FA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     36632
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:bf:bf:9f:1d:c9:0f:2c:48:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=de85eb54-8e64-4823-9e1f-2f47a34568f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ff:01:bc:6f:b8:0c:39:7f:91:e8:80:0a:7c:
                    5e:3c:5a:4f:95:80:54:2d:cf:95:f4:55:24:e3:15:
                    56:fa:21:16:ab:ea:b0:38:1a:02:7a:25:d9:7c:7f:
                    57:99:8d:88:55:38:cc:c4:29:da:91:f1:3b:67:b0:
                    01:e3:96:72:60:f7:b5:cd:40:29:7a:ec:d8:6f:3e:
                    5d:bf:d2:44:fb:49:59:a9:eb:37:bf:75:f7:63:97:
                    64:99:b3:06:fb:4e:a3:20:6e:09:13:1f:ca:71:17:
                    5a:bd:97:e5:4e:89:fa:0c:5a:a9:88:66:8c:2b:21:
                    af:6d:22:67:85:a4:1e:f0:64:2a:65:68:14:df:52:
                    b3:92:2d:c0:d5:90:0b:60:70:c1:1c:a5:a8:e6:e0:
                    a1:5e:f2:a0:da:fc:37:fa:03:96:32:2d:9c:44:3d:
                    c8:a2:1f:cd:47:04:80:b4:e5:fc:4d:b2:5a:48:26:
                    9c:e8:43:5b:e0:9c:20:08:e1:89:f3:51:a4:3d:76:
                    55:02:cc:f9:d2:1a:2f:ec:4d:55:4f:d8:ea:55:0d:
                    e3:67:46:dc:15:3f:5c:82:53:a2:c8:eb:c5:38:67:
                    8b:b2:29:3c:15:da:d4:4b:64:55:cd:b4:d7:e8:82:
                    12:a9:06:33:c5:84:38:31:72:47:ce:b7:d7:27:bb:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1A:FC:2E:54:EC:83:2C:E4:E4:82:5A:51:40:A8:0F:C9:D0:A2:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e57b1af-5c0d-375f-a6c7-9fa5eae00e0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:7b:30:8c:1c:2b:55:4e:c0:13:e5:73:eb:27:67:c8:18:9c:
         43:64:da:ef:a0:8e:6d:01:24:61:9f:14:be:25:f6:69:fb:5a:
         79:92:27:40:93:61:1c:b5:89:61:6c:43:44:52:51:61:fc:78:
         43:0a:32:de:7f:7e:b3:d4:25:a5:80:bf:ba:cb:6c:3e:6b:ce:
         fa:e6:30:5e:94:dc:e1:21:42:f5:76:d0:d6:dc:80:0f:9d:0c:
         a6:d7:63:06:40:7c:20:68:54:7f:ca:35:13:b7:e4:4b:c4:92:
         41:ff:d1:27:db:fc:12:18:7b:03:58:e5:f4:b5:0a:dc:c5:01:
         8f:5b:69:65:3e:3f:bf:ed:44:51:21:48:2a:cb:a5:52:7b:68:
         d3:e7:4f:d2:f6:9e:02:50:5b:01:03:d3:17:bd:48:72:dd:3c:
         e9:60:79:d2:f8:02:57:1a:64:ed:18:b2:c2:b8:eb:1d:1d:f6:
         d9:e7:fa:34:f5:42:18:c0:47:2e:3a:fc:ce:63:30:d8:d1:03:
         1f:27:cf:44:9e:65:a1:af:c2:78:cc:fa:3c:5f:2f:43:cb:1a:
         45:f4:b4:2e:74:a0:a8:db:23:76:81:83:75:2f:fd:00:4a:3f:
         16:4b:a5:e7:58:d2:ec:a5:ab:8c:5d:94:0c:28:f7:37:aa:64:
         7c:f6:68:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:38 2025 by rpki-client