Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64eb6736-dcc3-3942-91d4-e74ecc0a5465.roa
File:                     64eb6736-dcc3-3942-91d4-e74ecc0a5465.roa (raw, json)
Hash identifier:          PUQ90fLrnqTE31h0mumNvCALY71FDw8LMd+LywEVxT8=
Subject key identifier:   08:82:9C:F6:A8:6F:D6:0E:76:2E:CD:EF:D3:84:0C:BB:B4:CE:53:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E9FE00BE4C7028AF0820
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64eb6736-dcc3-3942-91d4-e74ecc0a5465.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396557
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e9:fe:00:be:4c:70:28:af:08:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=c23e3bac-e5ef-47ac-af23-8c61e88cc503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:fa:6a:8e:32:86:02:19:85:fc:b9:f2:bb:
                    ab:34:6c:64:8a:10:86:c0:f8:f5:22:6f:cc:d9:cc:
                    3f:f8:c0:bc:c4:b4:e1:16:73:8a:d5:42:2f:e8:0c:
                    bc:cc:0e:0b:b4:be:2a:3d:09:eb:63:dd:f6:ca:b9:
                    16:04:b6:f0:7a:7b:f4:e3:cd:eb:48:c9:3d:1b:09:
                    35:2c:83:4d:be:47:36:b5:88:bc:ac:20:dc:06:0d:
                    b1:0d:9a:1f:94:ae:a3:0c:0d:58:9f:dc:67:90:d7:
                    70:92:36:7a:d3:be:d2:36:c3:1e:b4:35:14:d4:e3:
                    15:0d:5d:08:e1:55:40:de:5e:38:b6:4d:ee:41:78:
                    4a:04:5d:8d:e7:fe:af:b3:c9:44:30:81:2d:20:e3:
                    d5:60:e0:8b:bc:5c:c7:49:64:9c:f7:eb:4b:83:86:
                    ae:3f:7a:42:d5:1b:19:ef:2c:95:cc:7f:1c:af:e6:
                    d0:52:1f:4c:a1:f2:ca:92:f9:42:c8:15:57:ae:a2:
                    65:c3:73:ba:3e:5d:0c:24:ad:c3:65:75:f8:62:97:
                    0d:4f:f0:62:79:83:ea:81:6b:78:33:34:29:e5:2e:
                    24:61:6c:bf:4d:8e:ba:85:68:88:88:ba:22:6e:2a:
                    62:d1:0a:6c:5b:bf:f4:c1:e0:60:6a:50:dc:1d:8d:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:82:9C:F6:A8:6F:D6:0E:76:2E:CD:EF:D3:84:0C:BB:B4:CE:53:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/64eb6736-dcc3-3942-91d4-e74ecc0a5465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:eb:e4:0a:e6:15:11:13:b0:5c:a0:f4:9a:94:fd:26:1d:80:
         09:6d:ff:b2:c8:e8:3b:66:30:3f:83:69:62:9f:fc:be:58:8a:
         51:8c:d3:6d:a7:37:04:6d:47:33:08:8f:a0:d9:ed:f5:71:e0:
         70:85:02:70:71:f5:c7:09:b2:f5:1c:58:e6:41:69:a9:a8:00:
         91:80:c7:c3:99:10:54:de:0c:97:a9:dc:9c:61:3e:2a:ca:c9:
         f1:a3:d1:73:f0:df:de:d6:05:a7:e8:d1:26:38:79:b4:b4:6c:
         fd:d1:5f:43:72:92:2f:08:57:4a:fa:83:20:17:54:df:e2:0c:
         5f:b3:2e:76:f1:93:e9:d3:fb:91:71:65:ad:ea:fe:72:ad:e4:
         7b:45:9a:3e:3b:a3:29:69:03:9f:3b:2f:b1:f5:9d:09:28:1f:
         18:1c:71:e1:5b:97:d9:01:bb:2f:cc:c6:6b:99:54:06:f2:8c:
         15:06:ea:10:96:88:8f:00:82:43:1f:90:6e:a0:1b:6b:4b:44:
         1a:31:4c:22:38:b5:f1:9c:83:36:1b:c8:b6:db:8f:f8:65:19:
         b4:27:63:96:0a:6d:94:a2:b8:91:16:df:6a:c2:16:3c:cb:a9:
         c1:f1:cb:97:ee:1e:b7:91:c6:68:33:77:89:b3:c0:52:f2:38:
         de:54:b9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:57:48 2025 by rpki-client