Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/713df5f8-cc19-391d-86d2-83391cbbbf6a.roa
File:                     713df5f8-cc19-391d-86d2-83391cbbbf6a.roa (raw, json)
Hash identifier:          08eocY9efpP7CtKqK03ZIa3qGdnqJPvv0Tv7BAbMl5k=
Subject key identifier:   16:A7:10:85:12:63:CE:17:B5:26:59:70:F4:2C:91:FD:6A:FD:CA:D5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A119AC0730F25085D6E6F2680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/713df5f8-cc19-391d-86d2-83391cbbbf6a.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     396610
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:c0:73:0f:25:08:5d:6e:6f:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=336dd955-90cf-4014-83d6-a32421ff6103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fb:18:50:54:19:94:95:f3:21:1d:95:d1:07:
                    63:47:28:f0:5d:d4:3c:ba:a3:b4:3a:2e:04:00:c8:
                    59:78:6d:48:5e:cf:15:b3:d7:ce:99:6c:c6:84:1c:
                    c9:0a:9f:17:5b:0a:66:6a:fb:5b:b2:63:a8:75:4a:
                    45:8f:49:15:4d:c6:3b:69:c7:87:0b:90:1f:5b:6e:
                    ca:c8:d9:18:86:bc:61:9a:00:97:77:e2:7d:f5:cb:
                    94:c4:cc:39:dd:cb:65:23:2a:df:77:19:5b:fc:a5:
                    2b:1c:46:8b:c5:67:d9:c1:2f:9c:81:ac:ab:3c:f7:
                    ab:76:51:cd:46:2f:b8:0a:17:a1:16:c3:d4:18:76:
                    1b:ba:8d:6e:04:6d:c7:ad:bf:62:50:91:3d:07:b5:
                    87:54:8d:ca:8e:ed:cd:90:dc:58:9f:d5:f9:0d:0c:
                    0b:77:aa:56:9d:31:59:07:28:0e:99:ee:39:dd:60:
                    d2:fa:7d:37:1e:6c:88:61:11:01:99:98:a4:5d:56:
                    8a:27:c5:0e:05:79:73:a7:0b:ba:b2:53:dc:10:08:
                    48:42:99:dc:82:c3:89:51:ae:ca:56:52:f4:05:b8:
                    56:22:c0:ea:8e:3c:23:49:5c:94:d3:9e:ed:30:48:
                    16:b4:87:0b:04:79:ff:ac:86:11:0b:42:bb:f8:7f:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A7:10:85:12:63:CE:17:B5:26:59:70:F4:2C:91:FD:6A:FD:CA:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/713df5f8-cc19-391d-86d2-83391cbbbf6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3e:5b:c0:bf:6f:47:48:bc:85:71:80:4f:3d:98:ad:91:46:
         5f:d1:35:66:0e:de:e7:7a:81:9b:2b:63:fe:6b:59:55:0b:5f:
         61:1e:7c:da:5d:2a:3e:b4:34:01:88:6e:66:5f:89:b2:77:5b:
         25:35:a0:83:71:73:1b:7c:c0:80:08:b6:d1:33:2e:0b:8e:3a:
         b1:4e:58:30:eb:d5:dc:9a:ab:f4:a4:63:f0:b9:42:99:f3:90:
         50:98:9e:90:53:5b:92:04:ab:98:3d:d2:6a:4d:f2:b1:76:64:
         c6:b5:1d:8d:9d:dd:83:2d:78:56:e0:0e:31:ce:c6:c5:f9:d7:
         5d:c9:6d:fc:e7:0e:17:dc:20:b5:b6:a0:a8:63:cd:5f:f0:3d:
         d2:ae:ad:70:f7:47:d3:6b:f6:75:35:b3:08:eb:64:4a:3f:d5:
         ff:d2:47:f0:48:86:8f:67:e9:85:f7:36:bc:0a:d3:fe:c0:bf:
         70:98:ed:c7:ca:82:80:60:00:56:b9:05:0c:05:53:04:05:f1:
         8f:a7:fb:fd:c2:b0:2a:8f:48:7e:96:57:6c:93:3f:e2:4b:1b:
         18:6d:6c:76:07:a6:49:ce:ec:0d:d2:97:70:01:6d:ec:85:d9:
         6a:c2:f1:4d:64:78:31:f3:bb:2e:b3:34:01:fe:dd:71:70:57:
         37:76:4d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:22:47 2025 by rpki-client