Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48594d89-d7e4-35b9-a024-95e6aa347590.roa
File:                     48594d89-d7e4-35b9-a024-95e6aa347590.roa (raw, json)
Hash identifier:          zKU1lvKrSf/8ZZ3IVXxftu5EAmC5hT5gi4FJJGDbL3E=
Subject key identifier:   5D:00:76:11:BA:0C:93:8E:11:83:73:AD:5A:A6:80:CB:02:3C:BC:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119AC1FEC1FBC27D8EC24880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48594d89-d7e4-35b9-a024-95e6aa347590.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     396569
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:c1:fe:c1:fb:c2:7d:8e:c2:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=eefcc14a-164b-45af-992d-51fe34f1d313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:4a:db:2c:b4:2d:e9:44:7f:5e:63:5c:e8:
                    af:7d:eb:86:5f:1b:16:86:dc:ba:21:5a:d9:06:bb:
                    f0:6f:39:9f:25:ef:92:03:00:61:fe:dd:2a:94:a7:
                    ef:48:24:e6:f2:6e:de:af:21:e1:12:80:25:4e:a6:
                    60:5a:38:94:90:e4:f6:6e:a8:41:5f:e5:7e:51:64:
                    13:ed:b7:cf:d9:b8:2b:bc:07:99:11:1e:c3:2f:51:
                    5d:b7:09:c1:6f:42:a3:f0:0d:cf:ec:b2:52:12:7b:
                    8f:11:33:bd:ca:f8:42:68:ca:fd:e6:4f:ce:ef:bb:
                    c6:f9:45:95:2b:22:f8:c9:13:49:fd:7a:88:99:60:
                    84:e9:d4:a9:45:49:6f:d7:a9:13:47:04:a9:78:c3:
                    2a:46:c6:69:4b:a4:de:e6:a0:3e:66:ee:1c:a5:ce:
                    fe:08:5d:a9:4b:cf:03:31:42:9c:e0:f1:bd:e6:68:
                    36:61:4c:9a:3d:27:8c:bb:2d:81:e9:98:b3:18:3b:
                    7c:e3:75:9e:21:73:73:00:b2:14:b3:b2:0e:58:e2:
                    c5:d0:79:8d:98:69:00:4e:4d:31:a2:a1:d9:4a:8d:
                    9c:60:88:35:00:42:02:29:46:5f:0e:02:6d:2a:10:
                    14:b9:f6:96:12:76:0a:6e:82:d9:3d:44:cd:e3:c6:
                    c4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:00:76:11:BA:0C:93:8E:11:83:73:AD:5A:A6:80:CB:02:3C:BC:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48594d89-d7e4-35b9-a024-95e6aa347590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:de:f1:fd:59:14:93:a7:7a:ce:a9:3d:3b:d7:04:f6:49:ed:
         b1:ef:e4:68:26:aa:74:ac:43:51:0e:3d:f8:48:b7:d2:6b:b9:
         74:0e:f4:92:7a:21:34:f7:87:7f:ae:c5:6b:ca:f0:17:19:3d:
         6c:11:d3:1d:b0:86:c9:7b:e8:59:41:99:d9:a5:59:41:91:9e:
         19:ef:f1:73:38:d7:d3:f5:8a:e5:f0:de:cf:13:9c:bc:28:a7:
         d5:e2:ac:8c:f1:69:4a:3a:2a:65:61:2f:9b:5d:c2:fe:8f:e8:
         88:d3:6e:ae:2c:0f:e7:cf:2f:c0:c6:e3:61:6b:ec:5d:9c:2f:
         28:57:d1:4a:72:34:05:8d:7d:1b:76:fe:e8:38:fe:b3:d5:14:
         ef:b7:61:db:62:96:35:91:6d:a6:36:e6:8e:02:fd:e1:c7:cb:
         91:fe:ec:cb:f9:8f:b0:05:f6:73:4c:43:1f:3b:40:85:f8:98:
         77:71:3b:1d:a9:60:46:37:a2:42:fc:17:35:fd:10:46:33:ea:
         47:4b:9a:1c:f2:7b:ec:e7:31:75:45:fe:af:d2:ba:0c:58:9e:
         a9:71:b6:d6:6f:74:0d:51:93:54:dc:ff:31:03:58:de:16:93:
         e3:8a:f6:03:e4:19:ab:62:41:6f:2d:12:f5:b9:ed:16:c0:83:
         4c:e2:6b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:10:45 2025 by rpki-client