Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f7db203-95d5-37e5-9c02-f1e31279d7c7.roa
File:                     3f7db203-95d5-37e5-9c02-f1e31279d7c7.roa (raw, json)
Hash identifier:          9WrTah0E9dEWwRVjRVdA5J7WCHBD+1TGAPSi2nSBMZ4=
Subject key identifier:   FA:3F:EB:F7:01:92:93:72:44:4F:75:D3:85:36:F1:48:38:FC:74:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F71541050115EF842A95FB00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f7db203-95d5-37e5-9c02-f1e31279d7c7.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396579
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:41:05:01:15:ef:84:2a:95:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=363f9c1e-8fa9-467f-8234-db75587c35d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:6c:60:35:3e:ba:bb:85:53:5c:73:2d:86:
                    1d:28:19:2a:f7:fd:97:5c:60:a0:ca:29:68:76:60:
                    bd:34:7b:30:6e:a0:4f:97:23:70:b3:ec:b0:98:e3:
                    bf:95:c0:e7:29:58:30:37:6e:db:88:0f:29:13:1b:
                    b3:7e:7f:db:ab:8c:de:87:77:e1:02:bb:bb:7e:3f:
                    c5:e8:14:ca:7d:f1:da:6f:a8:f5:89:7a:07:cb:46:
                    b9:61:d6:6e:b6:86:57:11:0f:8e:8a:aa:f3:98:bc:
                    e6:30:57:b9:55:48:76:97:79:79:de:0e:2f:ce:2b:
                    d9:7a:81:57:82:c2:4b:f3:13:52:7b:4c:85:81:af:
                    ca:c1:bf:71:9f:7e:22:11:88:e8:7a:9e:46:70:39:
                    5a:20:b5:c9:4a:27:4d:5d:2c:56:7a:c7:e6:a3:f7:
                    f4:61:fb:b3:f9:a5:87:92:06:39:a5:c5:cd:62:0f:
                    ed:11:ab:1d:27:ef:40:13:d4:f0:c1:75:1f:75:ce:
                    62:f8:41:7b:2c:b7:51:50:53:97:d6:ef:d2:b6:1d:
                    5d:4f:a0:c1:a6:f7:6e:da:37:9e:97:15:d0:ad:36:
                    f7:05:ac:96:6a:bf:da:cf:bf:60:b2:89:71:79:71:
                    15:70:99:81:f6:f9:6d:12:81:5a:5c:1b:6b:0a:19:
                    33:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3F:EB:F7:01:92:93:72:44:4F:75:D3:85:36:F1:48:38:FC:74:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f7db203-95d5-37e5-9c02-f1e31279d7c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:12:76:f1:41:95:1f:40:06:e3:1c:94:cb:42:b3:77:89:e3:
         cd:05:65:fb:1e:45:fe:44:3e:12:59:a0:1a:a0:fd:a1:d9:1c:
         3f:ce:34:d4:98:e7:04:f6:c4:ef:e0:54:1e:da:4b:15:f9:5c:
         6f:2c:e6:99:f8:4e:f2:9d:84:c8:0f:2a:91:7b:ec:f8:8c:12:
         a5:17:de:a0:15:eb:01:2f:df:fb:39:1b:01:c4:ea:d3:c1:66:
         f4:b3:82:eb:5f:ae:0d:d7:0c:ef:cb:21:62:74:93:c0:fe:b2:
         f0:1c:f0:bd:a7:18:0c:f5:8a:a9:d4:e9:2a:22:b2:9c:ed:a4:
         b4:31:ba:f7:93:b4:29:78:00:89:1e:6b:f2:82:84:15:cd:c4:
         01:9f:54:aa:b3:c1:b8:f6:d7:c5:8e:10:f2:09:79:13:d3:9f:
         49:d6:20:3a:f9:02:81:90:93:e9:42:e7:97:c4:50:9c:54:26:
         c7:25:dc:23:b6:89:d0:08:c9:a3:f6:39:90:df:31:bf:33:d3:
         0f:c0:f5:62:2c:d4:b6:1d:7b:ad:93:bc:46:e0:a2:8b:97:c9:
         a8:cc:ab:8a:ff:0a:95:eb:b0:16:3e:cd:3c:f2:de:76:01:cd:
         95:1d:8f:8a:4b:87:4c:96:a4:f4:a7:ff:86:a6:b5:f9:25:7a:
         84:77:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:28 2025 by rpki-client