Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a489ef6-5ed9-38ad-bb99-3bf81a02355e.roa
File:                     5a489ef6-5ed9-38ad-bb99-3bf81a02355e.roa (raw, json)
Hash identifier:          Rh7ffvdwesiXKr7BCNWYxencO2X/G8caoxRu+xG9BrE=
Subject key identifier:   C9:9C:6D:D0:A8:B4:FC:D9:08:01:04:65:A0:CA:22:3C:D0:8A:B3:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497DA467FFBFC0BFC36D31E640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a489ef6-5ed9-38ad-bb99-3bf81a02355e.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     396569
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:67:ff:bf:c0:bf:c3:6d:31:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=3dfeefa7-299b-44c8-9f60-e8713aea606e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:f3:1a:6c:be:e6:68:da:36:72:ed:1d:27:
                    c0:e6:bd:4a:2a:bd:e3:9b:8a:81:36:5f:5d:c2:12:
                    dc:ad:dd:8c:8f:e0:6b:ef:47:ff:b6:99:41:45:dd:
                    c8:a2:f1:3e:42:4d:2c:e7:ce:ac:14:8e:87:77:3b:
                    4f:11:45:d9:0f:f6:43:dc:d0:1e:54:e4:0d:0f:33:
                    28:ae:4c:ed:a3:74:23:10:39:30:94:a1:74:18:ba:
                    bd:73:d4:ea:56:e7:d3:20:86:e7:bb:3b:28:cd:d6:
                    d6:0f:bc:80:60:b6:ed:be:c7:58:5b:1f:05:f7:7c:
                    0a:96:ac:a5:f7:17:bb:97:bc:35:cb:5f:3b:2f:93:
                    23:14:b9:e1:05:54:05:23:1b:ce:45:fc:97:95:55:
                    b9:65:6b:0a:51:a4:2c:6a:3a:53:f7:4a:e4:5b:01:
                    ef:65:73:d5:eb:96:96:fa:7d:e1:2e:4b:73:03:37:
                    e8:e1:50:e8:b6:96:d2:26:00:07:20:51:8d:4f:d5:
                    bf:47:bd:e3:ae:d6:0d:9a:af:1c:13:2c:42:ed:0c:
                    4b:13:b2:51:ba:2b:bc:be:61:16:f4:99:bc:d0:13:
                    63:84:a3:c4:dc:b4:ea:0a:04:d0:a7:36:75:f4:8d:
                    76:ac:45:0c:db:08:b3:72:2b:14:96:1e:33:76:56:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9C:6D:D0:A8:B4:FC:D9:08:01:04:65:A0:CA:22:3C:D0:8A:B3:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a489ef6-5ed9-38ad-bb99-3bf81a02355e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:9d:05:6e:a6:ba:b7:5f:bc:c4:5c:87:29:31:53:e8:4a:fa:
         1c:57:bc:b5:55:91:a2:a6:a3:20:1d:ab:50:1e:20:b2:d8:ad:
         b4:ab:b9:67:ce:77:7a:20:ee:50:db:db:a3:be:2e:e1:a5:19:
         63:98:4a:1a:e1:88:27:94:64:be:42:7a:33:e9:5e:5c:b3:43:
         86:24:46:2d:c7:61:0d:77:06:25:02:39:2f:58:90:8c:23:41:
         9f:f6:26:fe:45:b5:eb:b6:fd:85:1c:21:38:8e:2a:f2:3f:ac:
         90:92:54:d7:d4:2d:da:cb:b2:7d:6c:2a:5e:69:b9:00:af:46:
         8d:8e:b7:74:a1:ab:d1:14:98:fb:03:97:9d:2a:c3:40:7e:ce:
         33:f5:9d:ba:12:e9:cc:da:73:99:a3:17:29:e0:f3:4d:33:d2:
         b5:8f:96:d7:d3:28:e0:73:85:b5:26:39:1b:3a:b2:21:8a:2b:
         7c:c0:b4:b3:a9:2f:14:d1:02:ac:ab:a8:9b:d9:7a:74:ae:a5:
         7d:15:dc:ad:87:4a:7d:c1:9f:2d:ca:30:cc:b2:02:44:a3:22:
         03:9e:35:fd:2f:fa:4e:51:23:3d:44:9a:3b:86:f0:79:98:7e:
         84:ba:bc:0d:7a:0f:95:8b:b1:2a:55:7e:9d:6d:e3:cc:cb:6f:
         26:dd:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:03:41 2025 by rpki-client