Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/698ea4db-5007-31a1-b2b0-aed11e9384e1.roa
File:                     698ea4db-5007-31a1-b2b0-aed11e9384e1.roa (raw, json)
Hash identifier:          YXk2vXZpwK7+RLvd+wCvhIGVAGw4nI+jBvB2Ec5ML1U=
Subject key identifier:   27:36:2D:3B:E0:1E:5D:01:B0:50:82:53:1B:88:EF:A5:76:C9:01:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183DC39CF457CDBB5CCA9C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/698ea4db-5007-31a1-b2b0-aed11e9384e1.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396604
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:dc:39:cf:45:7c:db:b5:cc:a9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=efc23e0b-8d4a-4123-a9c3-e81fd28e74d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:23:64:fe:17:37:19:5a:3c:8b:0f:d7:9e:c4:
                    1c:f4:74:29:68:16:2f:13:cb:13:e9:c6:9f:de:e0:
                    b0:8b:5b:37:7a:90:d3:6d:26:e2:86:a9:50:4b:13:
                    9e:3f:7c:03:a0:44:ec:30:2f:80:6b:0a:b6:0f:1a:
                    cb:e1:ba:45:2d:d5:0b:b9:a0:1f:72:51:31:b3:7d:
                    16:77:a9:f9:a3:d2:b9:41:02:a6:55:73:5a:f2:da:
                    fc:5b:25:ab:26:96:b0:fe:f3:71:6e:09:c0:40:05:
                    14:23:a3:fd:25:a6:16:a1:25:07:6b:c6:eb:45:eb:
                    32:b7:2b:2f:ca:7f:7f:6e:bb:79:76:49:e0:26:64:
                    72:d7:ee:28:53:0c:13:17:88:5d:4a:ba:3f:a2:a5:
                    d3:d8:f7:2f:7c:74:ba:35:65:cb:fa:73:17:6e:19:
                    b0:43:91:9d:5a:5f:f7:dd:64:f9:46:7f:23:09:af:
                    69:c7:ca:5f:f5:8b:09:fe:55:1e:8f:aa:2d:fb:58:
                    3c:4b:13:6d:e2:52:c1:4d:d5:fb:68:37:09:6b:ba:
                    5e:8b:89:54:0d:a1:e1:b3:11:54:4b:be:36:80:9a:
                    75:cb:e5:f3:9f:63:80:8b:ff:15:5f:d9:34:d1:8f:
                    18:af:57:9d:9b:41:3f:0e:3c:a6:a6:4b:7f:59:e6:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:2D:3B:E0:1E:5D:01:B0:50:82:53:1B:88:EF:A5:76:C9:01:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/698ea4db-5007-31a1-b2b0-aed11e9384e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:33:d5:08:ca:6f:e6:12:c1:95:de:d1:92:70:ae:ba:54:1b:
         de:ac:80:c3:29:40:49:db:66:30:66:4e:92:05:a6:2e:0b:dd:
         4c:6b:24:7b:dd:66:99:93:f4:ee:a1:3c:82:cc:67:38:2d:9d:
         3c:f2:07:f0:f7:39:a2:e9:ec:ec:13:fe:77:f2:9c:44:9a:93:
         fd:a8:57:04:50:da:e0:ce:69:45:89:75:ae:61:e2:8b:8e:4b:
         07:ba:37:14:32:9e:72:d7:05:43:f9:e0:2f:ec:9e:0e:3f:21:
         58:7a:4c:6e:ab:77:81:03:14:53:49:51:d4:a9:5e:4f:ad:b0:
         3e:43:f0:11:6d:7b:b9:cd:38:ff:9e:ae:be:a6:49:e8:6c:a7:
         b1:17:48:80:d0:b9:a2:c1:12:c0:f6:df:1f:b9:69:f1:8c:85:
         29:13:30:48:6b:5b:f1:31:06:50:8e:7c:80:cb:69:31:f9:42:
         99:75:ad:2f:0b:1b:b5:73:1e:09:31:42:78:43:31:52:c7:29:
         1b:48:b1:8b:80:2e:20:5a:70:16:15:f6:b0:cd:f0:fe:d2:2b:
         2d:aa:39:47:da:c8:aa:72:d2:97:36:fa:33:67:6f:e6:1f:87:
         c9:f5:79:a6:0f:17:a3:46:23:fa:9e:e7:12:d8:ad:f5:51:97:
         84:ec:f5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:24:15 2025 by rpki-client