Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41db38cf-0df2-3e17-a674-fc5e071aeec9.roa
File:                     41db38cf-0df2-3e17-a674-fc5e071aeec9.roa (raw, json)
Hash identifier:          VVza7asom9n4KT83aF9seh8QA4U3T9AMdr9lK/IKSxk=
Subject key identifier:   94:E0:BD:01:34:38:42:42:95:E7:B0:62:CC:05:01:2B:EA:63:AE:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285848A3F58635E2D84736A773F5A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41db38cf-0df2-3e17-a674-fc5e071aeec9.roa
Signing time:             Thu 23 Jan 2025 13:38:21 +0000
ROA not before:           Thu 23 Jan 2025 13:38:21 +0000
ROA not after:            Wed 23 Apr 2025 12:38:21 +0000
asID:                     396585
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:f5:86:35:e2:d8:47:36:a7:73:f5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jan 23 13:38:21 2025 GMT
            Not After : Apr 23 12:38:21 2025 GMT
        Subject: CN=82afe3b5-0c29-4986-920b-2d26b23490e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dd:49:0d:1d:09:73:43:b6:35:5f:74:2d:58:
                    6c:7f:8a:1a:ef:62:d2:74:da:a6:bd:11:cc:2e:b6:
                    83:1c:09:5a:f7:19:67:e3:d6:92:74:37:47:0b:87:
                    37:07:4e:0e:0b:1d:24:83:33:a2:75:d5:5c:4e:8c:
                    d2:b2:46:43:d3:85:16:48:54:ac:56:ff:a0:54:10:
                    44:fd:57:1e:9a:fa:0e:d1:f0:65:c4:ad:09:eb:ab:
                    82:06:91:27:95:a0:57:3b:33:7b:3b:0d:c9:17:d6:
                    05:b5:df:62:cc:ad:41:71:9a:ef:e7:de:0e:26:5e:
                    d3:83:4a:10:08:6e:78:88:46:de:08:a9:7b:b2:54:
                    5e:ca:8e:69:eb:8b:19:f2:2b:84:7a:b8:9f:fe:19:
                    b4:7c:5a:dd:d3:b0:be:03:77:22:03:f0:80:9b:9a:
                    4c:9f:e7:c1:93:9f:9b:37:79:9a:27:6e:42:6f:78:
                    81:e0:9e:25:25:f3:cc:3b:ae:33:36:d2:77:17:39:
                    3e:7f:5d:87:51:15:70:23:56:57:07:fd:6f:51:90:
                    c7:f5:7b:ca:07:59:70:f3:b6:2b:53:f8:1d:47:98:
                    3b:69:36:49:b8:0f:cf:74:e0:46:bf:47:d3:03:67:
                    96:ac:dc:35:9c:0e:4b:c2:9f:07:62:bd:98:85:34:
                    01:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E0:BD:01:34:38:42:42:95:E7:B0:62:CC:05:01:2B:EA:63:AE:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41db38cf-0df2-3e17-a674-fc5e071aeec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e3:10:3d:8d:4b:67:63:6d:e6:7d:60:24:f9:05:24:65:ed:
         ec:5b:46:35:a4:f5:fb:e8:bd:c0:5e:20:ce:fa:d4:a6:f0:af:
         45:fe:02:ee:4f:ed:6f:26:e3:29:90:7a:91:43:0c:81:85:82:
         bc:bb:f1:ae:a6:e6:34:ce:09:5a:ee:14:b4:fa:81:97:87:ed:
         8a:e6:bb:d1:b1:75:5d:71:d8:c2:eb:25:d9:92:ab:60:2a:14:
         7c:55:d1:69:6e:dc:fc:15:41:a5:17:82:b7:e1:50:1b:d4:51:
         48:9c:ab:78:67:ce:6a:9e:7d:62:f1:b3:65:a1:dd:9d:11:57:
         ff:44:f1:14:a9:d8:ce:67:76:80:61:46:29:00:34:d1:10:d1:
         38:80:b5:76:56:93:7a:09:d4:97:54:43:78:52:d2:1d:89:82:
         16:95:83:9e:81:aa:5d:19:8e:42:cc:ca:26:a0:df:ed:1b:fe:
         35:29:1d:d2:7e:c2:e8:28:0f:87:54:64:77:57:90:65:4c:a9:
         6a:91:7c:4c:dc:72:01:7f:5f:6b:7f:cd:20:3d:a3:2d:d5:23:
         47:41:27:0e:d1:6d:8a:8d:11:43:3f:f6:16:7d:5d:04:e1:88:
         79:08:7f:6a:06:4a:c2:98:26:ac:02:61:41:d9:67:91:8c:96:
         a7:63:48:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:00:59 2025 by rpki-client