Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62c03efd-35a1-3a11-976d-984ea388db08.roa
File:                     62c03efd-35a1-3a11-976d-984ea388db08.roa (raw, json)
Hash identifier:          cO5648+WiaarzrzlJDhPycmamobaWtvOllzJgPwsbSQ=
Subject key identifier:   68:D4:CE:CC:5E:BC:05:E0:06:44:9A:28:9F:81:44:BF:02:7C:3E:01
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AAA6F3165FB03393D0D40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62c03efd-35a1-3a11-976d-984ea388db08.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     36616
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:aa:6f:31:65:fb:03:39:3d:0d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=410ec627-2a65-4be5-b6e9-80c7aaf96e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:90:89:fc:e3:23:ee:9f:3d:cb:db:2a:d8:
                    f4:69:c9:f2:d3:20:c2:e3:e6:a7:a2:e5:17:6f:dc:
                    95:05:de:33:02:68:77:f3:6a:8c:7e:52:b6:b9:8b:
                    1e:99:6b:05:bd:56:3a:b7:04:b5:fc:2d:f0:d7:a5:
                    5d:9f:11:61:30:79:74:c5:36:6e:b9:23:03:d9:cb:
                    24:2b:e5:9f:3e:0a:06:62:86:e2:34:a5:d6:87:b7:
                    d1:8c:bd:8c:96:93:0e:ef:c8:6c:30:30:7e:c7:af:
                    08:3e:3d:5a:1b:e5:4c:d9:29:b3:92:68:ac:08:a8:
                    64:cc:1e:09:57:c9:4c:4c:4f:47:65:cb:e9:cf:b8:
                    62:9a:4b:b6:d5:04:ec:18:ed:49:20:f6:e7:dd:43:
                    9a:c8:cc:71:de:00:ba:e5:a0:63:06:b4:db:c7:9d:
                    f1:34:01:b9:03:de:84:3b:5b:25:c7:ab:be:19:6d:
                    1a:13:f7:36:d9:aa:eb:2d:87:08:d6:be:79:47:46:
                    bc:5e:94:b4:e1:7d:67:f4:d8:9a:5b:41:6d:65:8f:
                    6b:77:1d:9a:e1:c6:ec:90:84:1b:24:31:5a:19:a3:
                    e3:51:0d:d9:38:25:5e:75:e9:dd:e5:91:41:15:d5:
                    95:2f:df:df:ce:d4:b0:2a:32:07:19:89:55:6c:80:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D4:CE:CC:5E:BC:05:E0:06:44:9A:28:9F:81:44:BF:02:7C:3E:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/62c03efd-35a1-3a11-976d-984ea388db08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:50:7c:da:cb:55:f8:12:59:0f:a7:d1:73:0c:9b:b3:f7:cd:
         bc:f3:c7:f5:92:cd:a6:5a:1d:56:0e:3a:fc:43:29:0f:d0:5f:
         e7:c5:c9:69:15:dc:30:ba:3f:52:3f:bb:c3:07:8e:2d:05:1b:
         73:58:de:16:02:85:a6:42:b5:f7:a9:56:db:2c:26:c5:2c:73:
         2f:cd:d3:e3:87:4b:7c:66:ba:01:46:f1:47:1c:33:d0:95:b9:
         a4:8e:7b:61:3b:2d:79:78:d7:72:b5:e7:e9:7d:db:04:71:7d:
         9c:1c:8c:cf:83:58:31:7f:3b:1c:95:c0:13:d6:cd:7a:db:15:
         0b:20:cd:19:90:7f:a6:62:72:54:66:7c:6b:04:59:c4:92:a8:
         66:60:d0:ef:43:68:bd:d5:62:83:2a:bd:0d:02:06:85:fd:4d:
         38:be:73:13:04:f7:35:4f:ae:8d:2e:46:8d:c6:fd:08:fb:78:
         0c:47:ef:d5:ad:ee:3f:80:97:55:34:be:57:2d:b6:6c:b3:f7:
         e6:f2:1d:63:ac:84:31:12:55:81:ab:a5:30:ff:66:72:57:7b:
         c6:ce:c2:cd:be:a0:52:83:e7:24:97:95:da:e6:0a:aa:83:18:
         45:07:e8:44:1e:40:52:8b:88:97:2a:30:e6:55:c4:e7:c8:87:
         09:2d:ad:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:38:14 2025 by rpki-client