Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d87c615-4c7f-3e78-8d57-aa2790461f26.roa
File:                     4d87c615-4c7f-3e78-8d57-aa2790461f26.roa (raw, json)
Hash identifier:          OMMCCqv+DajMUroqrEKC+IjrOxWYdIi9SPK316J/kb0=
Subject key identifier:   C3:53:48:1F:FC:B5:9B:88:DE:AD:16:92:28:71:EA:2A:57:50:05:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E2CBFE1B7061C84DCF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d87c615-4c7f-3e78-8d57-aa2790461f26.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396604
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e2:cb:fe:1b:70:61:c8:4d:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=2338e3d5-7430-46b1-81ce-994af02e3a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a3:cf:88:04:d3:05:aa:bf:4a:b0:d5:75:fc:
                    49:d3:74:b1:b9:b9:e5:66:43:b5:f8:64:2d:c1:96:
                    f7:be:0b:2d:ba:e9:5d:97:6c:93:a9:7f:7e:f2:1b:
                    b8:82:5f:d3:2f:de:22:12:54:91:16:e3:71:01:27:
                    c0:dd:c3:e7:3e:9b:1c:bf:1a:47:2b:56:f3:20:15:
                    2b:c1:d1:f0:cd:d8:9b:9e:85:5d:11:08:93:ff:9a:
                    3a:8e:dd:82:58:15:7f:64:21:bc:3d:16:e1:dc:6d:
                    fe:17:76:39:3c:8d:31:b4:42:35:f5:8e:2b:c7:a3:
                    fa:6f:56:f8:3d:ca:2e:84:1e:39:5b:63:63:4e:76:
                    6e:f8:e0:5e:8a:d3:89:49:97:85:86:f8:b6:ad:b3:
                    b5:03:92:1d:8b:7a:f0:e9:14:d2:27:82:27:df:7a:
                    e6:e0:be:16:04:3a:41:52:e6:20:62:6b:9e:3d:75:
                    e7:07:44:41:1c:f7:b9:58:5d:07:8a:fa:d9:f1:45:
                    c8:0f:56:dc:23:00:68:5b:3e:d0:c5:e0:99:0e:64:
                    df:7e:9b:89:bf:f7:d7:f4:f4:eb:91:c7:78:2d:41:
                    2a:33:ba:be:30:4a:7f:c1:13:8d:21:34:67:60:41:
                    d9:6c:63:cf:68:cc:12:c1:55:87:66:10:d5:e2:d4:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:53:48:1F:FC:B5:9B:88:DE:AD:16:92:28:71:EA:2A:57:50:05:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4d87c615-4c7f-3e78-8d57-aa2790461f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:a2:6e:e8:28:65:b3:b9:97:f9:e8:70:b0:7e:b2:26:c0:27:
         ae:f8:de:df:29:54:04:22:98:8c:9a:6b:2c:48:cf:1e:0c:98:
         97:32:30:2d:ac:c0:ce:6e:9a:a5:e0:f9:ec:56:0c:76:f4:87:
         8f:77:d6:b2:ea:3b:f7:65:7c:a2:c9:db:b9:9e:ed:ec:ac:75:
         96:14:03:19:ea:2e:6e:0f:e9:84:ae:8c:e7:07:6a:0c:eb:9e:
         de:e3:41:51:f5:b4:48:c0:ed:85:eb:a1:49:1a:90:81:3c:d2:
         8c:a8:be:63:74:d1:c8:b1:14:c0:24:d4:84:fc:ab:89:13:0f:
         9b:7b:b8:d0:87:40:5f:cf:7b:ea:c0:f0:8b:be:51:52:9f:7f:
         a6:55:60:57:0b:cf:a7:d0:15:ed:6b:87:25:7b:61:9d:7a:98:
         f1:4e:3e:df:e2:44:4a:a1:5f:55:4a:52:67:89:53:b3:ed:b1:
         34:16:76:6e:ec:5e:b7:2d:3e:52:70:be:53:db:b4:02:8d:29:
         d9:1b:07:aa:81:32:01:78:6b:6c:dc:80:5a:7a:a1:44:37:ac:
         dd:16:97:2a:f8:df:85:de:d2:30:1e:15:2a:58:6a:2e:d1:db:
         ff:15:64:74:ea:fb:58:f4:1b:17:df:12:05:ce:19:70:d0:f2:
         1f:0a:e9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:39:39 2025 by rpki-client