Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46f1dce7-676e-3633-a094-3aa33e67c4cb.roa
File:                     46f1dce7-676e-3633-a094-3aa33e67c4cb.roa (raw, json)
Hash identifier:          YNiPhOXQ7JrEJW18MbEF+jiUAyOUNhiLhNIj7n7L4GQ=
Subject key identifier:   06:F6:5B:EF:DC:60:E2:CC:25:9B:B5:95:23:C0:26:C7:F4:E1:FD:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD5BED32B79804F928F900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46f1dce7-676e-3633-a094-3aa33e67c4cb.roa
Signing time:             Tue 01 Jul 2025 13:48:34 +0000
ROA not before:           Tue 01 Jul 2025 13:48:34 +0000
ROA not after:            Mon 29 Sep 2025 13:48:34 +0000
asID:                     396576
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:5b:ed:32:b7:98:04:f9:28:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:34 2025 GMT
            Not After : Sep 29 13:48:34 2025 GMT
        Subject: CN=7ba1b237-a48a-4bf0-8ef9-62886c134cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:cc:b3:ea:79:a7:c0:79:6b:37:d4:c0:6a:
                    03:bf:38:79:cd:e1:70:40:34:2b:22:55:0d:0e:ea:
                    e3:99:ef:e0:b8:50:e8:ba:01:a5:9f:f0:3c:bf:08:
                    f3:ae:2f:a1:ba:29:a7:b2:58:58:7a:0b:1e:d5:d6:
                    66:79:e6:bf:0e:13:35:57:60:34:d3:bc:8a:70:41:
                    49:93:b0:02:02:33:23:18:39:da:3f:10:9f:75:ce:
                    43:48:14:24:58:a2:41:01:0d:f1:34:c3:11:c3:6e:
                    06:33:13:16:48:40:3b:82:53:b0:6d:34:51:73:58:
                    96:80:ab:ea:26:6d:17:ca:82:c9:50:9b:f1:ca:50:
                    1b:e0:b2:e0:08:f7:66:92:4f:e0:62:02:2c:7e:32:
                    b2:37:8d:eb:03:da:88:de:20:51:33:f9:8b:7a:b6:
                    90:02:1d:51:fa:1b:c1:e9:ad:09:f2:c8:fd:c8:5c:
                    5f:ae:28:29:cc:d1:d6:56:06:8c:24:39:6f:d0:06:
                    52:55:5a:68:00:d0:9f:03:42:65:b5:25:d4:36:c8:
                    28:94:d4:7e:83:04:bf:ca:36:21:bd:01:fd:51:56:
                    4c:60:62:63:87:03:24:12:ed:d3:72:d8:14:de:84:
                    1d:b3:f8:24:e6:95:d9:a3:93:ab:1a:1b:ba:ea:44:
                    67:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:5B:EF:DC:60:E2:CC:25:9B:B5:95:23:C0:26:C7:F4:E1:FD:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/46f1dce7-676e-3633-a094-3aa33e67c4cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:5b:58:6d:4f:ba:fe:f5:9a:c6:5c:e3:be:47:01:44:89:e9:
         ab:b3:a6:f7:b9:31:31:1b:57:75:a2:c4:36:f6:ad:16:b4:0b:
         66:bf:ad:e9:42:25:23:18:67:83:a7:cd:be:b6:c1:3d:76:05:
         bc:c6:f6:b6:91:1c:f9:b4:ee:50:4b:2a:00:0f:76:b9:c5:86:
         7a:a0:f1:3a:cd:24:87:b7:5c:58:73:14:46:38:6e:08:ea:f3:
         89:88:68:4c:2b:cb:6e:fb:4c:72:ff:a8:2c:61:51:e3:86:9f:
         5e:cc:0b:1d:6e:78:db:ae:cd:2e:99:13:6e:82:2d:69:f4:3f:
         f5:aa:01:16:03:43:a9:62:4f:3e:a2:d6:c3:56:5f:06:5f:01:
         4c:c7:4e:8e:57:1c:ce:dd:72:8c:85:c6:9c:78:44:62:ad:83:
         03:92:66:92:e4:f3:4f:b8:20:70:72:40:b4:f4:1f:6e:91:0c:
         a1:18:a3:4f:11:d8:a2:ba:cc:05:fb:33:0a:2a:e2:29:7b:0f:
         56:50:0c:cc:76:26:98:d7:63:b2:28:83:02:3c:d6:66:25:fb:
         e4:b3:ba:69:b1:3f:b4:1b:14:3b:d8:9c:70:cf:64:59:12:55:
         40:8f:40:2c:8f:c8:48:5e:93:fa:e6:ca:3e:8c:9d:12:e3:5f:
         65:5f:f8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:22:41 2025 by rpki-client