Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa
File:                     6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa (raw, json)
Hash identifier:          5jkybJs43wT4UFIHl/xFNGZY+rd1gB99W1E5yXs4zcE=
Subject key identifier:   31:6C:2E:C1:2B:2F:72:67:25:1D:CC:97:EE:B2:95:F9:E4:86:9E:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB16BF8BBD0B7F7640EB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396596
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:16:bf:8b:bd:0b:7f:76:40:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=71ce9432-9048-4977-a814-0c9314b9a969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f1:08:21:95:c4:18:e5:ed:cb:bf:9a:81:dc:
                    57:f5:a1:1d:14:df:48:e8:c5:72:cd:b6:bc:0b:1f:
                    3a:e5:ac:19:db:ca:83:ff:e4:eb:b4:b9:bd:4f:8b:
                    ef:62:ac:5a:60:eb:2f:45:7e:95:89:30:5c:44:7a:
                    7e:25:02:f4:e5:5e:80:b5:2f:94:26:59:d5:46:3a:
                    1f:05:97:05:6b:e2:24:f2:b6:fa:fa:0c:d4:de:61:
                    a8:79:b9:7d:2c:b2:b5:11:1d:24:90:cd:9b:55:29:
                    51:ff:9a:0d:33:87:63:ae:70:08:b9:ab:b7:ac:5a:
                    60:7d:c2:a3:3e:de:d7:f4:59:07:10:10:7c:bc:03:
                    d2:b5:54:58:f9:0d:ba:c0:2a:ca:6b:47:3c:f9:ff:
                    3c:94:81:87:c4:e8:6a:af:dd:db:8b:19:73:9a:4f:
                    6a:ca:70:bc:2b:a2:16:27:a1:9f:83:c6:89:65:a2:
                    99:a5:66:11:af:c0:ce:ea:e1:38:20:f9:00:18:76:
                    8a:68:4d:9f:90:1c:0b:9f:da:98:63:d1:a7:5d:05:
                    56:b4:a7:01:a0:23:93:17:80:db:13:80:c6:12:78:
                    d1:4d:e4:96:95:92:88:ac:80:9c:31:a3:be:4e:29:
                    4e:28:ae:d0:cd:a8:2f:aa:34:5a:16:d1:90:83:b2:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6C:2E:C1:2B:2F:72:67:25:1D:CC:97:EE:B2:95:F9:E4:86:9E:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6233dca0-57fe-36a9-aa09-cae92f6b35d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:b9:54:cb:38:be:cf:a9:9b:f8:80:d9:71:e2:b8:29:5b:
         7b:76:05:9f:ba:d7:1e:3d:ba:43:7e:88:3c:bd:78:1d:ca:e0:
         b6:5c:42:33:95:3f:33:84:e9:d2:30:2a:fe:ac:b0:a0:50:32:
         68:91:4a:8c:4c:c4:44:bd:8d:73:7d:c0:00:8e:bc:14:56:28:
         f0:d2:7e:16:fb:15:23:0e:d2:d5:cf:f0:34:5a:d0:80:2e:95:
         b9:3a:a5:ee:45:98:75:f0:2d:6d:78:22:43:23:41:e4:21:fe:
         d5:e4:24:2d:2e:e1:69:f1:e0:dc:32:5d:85:06:92:0a:88:53:
         28:97:ce:27:9e:7e:4c:62:d3:0a:b9:35:23:9c:d6:75:e6:60:
         4c:57:2f:4f:7f:9a:7d:a8:fd:26:ed:b1:39:47:ac:d2:17:d1:
         65:de:df:0d:d3:bb:71:d7:a8:8b:6b:8e:0d:5a:93:f3:db:c5:
         54:71:6e:1a:be:93:e9:87:99:16:02:47:5a:7f:ae:fc:93:5e:
         e7:ad:2f:3e:81:d8:22:49:a1:23:24:43:33:b5:a3:0f:41:60:
         f9:fa:d0:e5:24:5f:09:9f:39:7f:4e:f2:02:32:51:4f:37:cc:
         84:fe:c6:99:bd:de:08:d3:f7:34:f9:ef:23:73:43:e9:32:fc:
         a0:b8:4c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:17:23 2025 by rpki-client