Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56b74a42-8ed0-3142-8878-748ad2745f16.roa
File:                     56b74a42-8ed0-3142-8878-748ad2745f16.roa (raw, json)
Hash identifier:          QcbmBp25Hn8so1pgiqNAKFy7rXUiyPkvDNj2/gkE8gw=
Subject key identifier:   51:7E:58:BC:D5:C1:B3:9C:8F:3C:94:C7:2D:92:0B:6D:62:0F:BF:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB015176F7F89BCE2B8240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56b74a42-8ed0-3142-8878-748ad2745f16.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397200
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:01:51:76:f7:f8:9b:ce:2b:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=efd18d46-1985-409f-b0cd-43c4c33bcaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:b3:37:2e:fe:f9:58:de:8e:3d:0c:69:ed:
                    1d:66:fd:2c:86:bf:b6:83:c8:f5:cd:6a:69:4d:38:
                    cb:63:2e:50:34:cf:6c:8d:a6:20:9d:e9:38:ca:e2:
                    38:14:22:88:13:e9:d3:58:53:28:90:08:eb:e6:f7:
                    ae:68:03:03:6a:94:12:2b:b9:fb:92:f4:3f:e7:dd:
                    4d:e0:c5:e4:a6:89:a5:6b:60:4a:5b:a6:f6:04:aa:
                    4e:8c:94:cc:29:9e:07:f3:99:70:90:d7:28:28:73:
                    ee:47:72:83:a0:55:b6:2e:cf:e3:65:8c:43:15:5c:
                    f2:27:7d:38:d7:4e:dc:2d:54:6b:bf:b2:ae:e5:c8:
                    3a:c5:6f:4b:f3:cc:11:14:56:ce:43:84:df:78:b1:
                    86:06:d7:43:0a:48:a6:ce:00:83:16:f5:57:f4:ec:
                    90:6c:01:13:2c:eb:67:11:94:ef:39:92:25:b8:95:
                    80:f4:d5:6d:23:0d:40:96:3d:6a:bd:75:b5:4a:4a:
                    97:57:44:99:70:8b:59:e2:fc:89:ab:25:9f:fa:8d:
                    7b:66:01:63:b3:30:3d:07:80:35:1e:68:f7:85:76:
                    05:f1:d1:73:1a:a5:a2:f0:bf:19:df:45:b6:cf:28:
                    9b:0e:4d:b3:85:cb:0c:ec:f6:c9:59:70:b5:fc:0e:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7E:58:BC:D5:C1:B3:9C:8F:3C:94:C7:2D:92:0B:6D:62:0F:BF:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56b74a42-8ed0-3142-8878-748ad2745f16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5e:81:5d:a5:5b:b9:aa:ea:c9:81:61:59:3b:92:41:44:d2:
         ca:21:1a:12:13:28:bb:bd:83:dd:51:6b:07:d5:bd:96:d1:b6:
         8a:00:6d:2e:0d:2d:1f:42:86:8c:1e:39:52:3a:c7:f7:40:3d:
         11:bb:69:d4:61:a4:32:8a:79:d4:65:68:6d:f0:0c:93:25:83:
         ed:fd:18:88:1c:a5:1d:3e:45:c5:9b:8a:22:b8:19:d8:de:a5:
         d2:24:4f:e3:b4:de:06:0d:5f:99:16:a9:a3:41:ca:05:de:37:
         23:45:a5:42:24:ac:8a:74:06:28:5b:01:45:24:21:70:bb:87:
         fd:fc:cb:83:90:a5:46:2a:de:b6:8e:2b:46:8d:d3:96:8b:25:
         ef:30:db:4b:f6:bf:93:33:52:eb:24:38:af:64:a1:69:c4:3a:
         b2:12:4b:22:3c:39:08:ff:b1:7f:a5:46:16:ba:61:69:9e:7f:
         3c:dd:89:ab:00:8b:b4:91:58:c4:4d:89:2f:85:d8:6a:65:26:
         88:34:e2:17:3f:68:84:f4:a4:8a:fa:7c:52:40:01:76:ce:dd:
         0d:e0:6b:db:6b:32:7a:cf:d4:ee:3f:a8:98:69:7f:25:92:0c:
         fa:51:0b:3d:ed:53:f6:90:0f:c4:5a:5b:b7:34:55:ed:08:85:
         c9:04:0e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:49:42 2025 by rpki-client