Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/732b033c-c9e5-3342-8909-f25fca4ed936.roa
File:                     732b033c-c9e5-3342-8909-f25fca4ed936.roa (raw, json)
Hash identifier:          /mMUUv7GcmXCO/rcuztIVDxYgepRf5UqANuuHkiaYjo=
Subject key identifier:   24:D4:08:A7:93:DE:42:D4:70:E1:30:63:D2:14:C3:CB:86:4E:B3:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD60C835B381CFCA785A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/732b033c-c9e5-3342-8909-f25fca4ed936.roa
Signing time:             Tue 01 Jul 2025 13:48:36 +0000
ROA not before:           Tue 01 Jul 2025 13:48:36 +0000
ROA not after:            Mon 29 Sep 2025 13:48:36 +0000
asID:                     396570
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:60:c8:35:b3:81:cf:ca:78:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:36 2025 GMT
            Not After : Sep 29 13:48:36 2025 GMT
        Subject: CN=f745fb55-2d6c-4224-9119-559a4aff888b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:54:2f:77:c0:f6:2e:9c:44:20:a0:86:48:09:
                    18:0e:77:fe:3d:0c:3b:d3:4b:b8:68:7a:d8:00:93:
                    d6:b0:72:c5:8c:27:2e:5e:ad:e0:17:88:3f:c5:5a:
                    a5:86:22:82:91:51:28:86:ab:a7:ca:f8:dd:35:fc:
                    ef:72:2b:16:12:c9:7e:7b:20:e6:f7:46:10:58:0c:
                    42:b8:2c:1a:c8:6e:64:cd:dd:9e:4c:8b:33:ca:34:
                    bd:b5:9b:8e:d9:56:25:b0:67:a2:7c:83:92:d1:b9:
                    82:82:13:82:de:82:50:15:2c:a1:2d:34:d5:e0:44:
                    27:74:09:93:11:40:9e:87:02:38:54:d3:d6:fa:64:
                    52:4f:d6:03:b0:79:63:3b:5b:41:62:13:75:11:62:
                    18:cb:92:f4:25:60:4a:37:b5:dd:a2:d4:33:16:d6:
                    59:90:a0:4f:18:ab:34:06:89:54:77:b8:51:ad:aa:
                    71:a6:78:75:45:a4:41:58:a2:5d:10:30:8f:1e:07:
                    b0:ca:38:77:31:39:7e:66:4b:43:46:dc:41:42:85:
                    05:22:64:68:c9:b0:c5:2c:4b:4e:e9:0f:b8:00:df:
                    3c:b3:ac:dc:20:d2:93:07:68:79:b3:71:e9:b5:59:
                    a8:87:9a:f7:4d:28:86:46:fa:66:5c:56:14:87:b2:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D4:08:A7:93:DE:42:D4:70:E1:30:63:D2:14:C3:CB:86:4E:B3:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/732b033c-c9e5-3342-8909-f25fca4ed936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:13:04:71:c2:38:cb:5e:45:95:f4:d2:f7:40:f0:36:7b:1d:
         6a:89:5f:ee:ea:e2:95:67:a9:41:51:2a:b6:74:5a:73:ae:a4:
         d1:06:30:39:6e:b7:5a:e1:4b:fb:68:90:59:77:d4:f5:e2:cf:
         7a:94:4f:a4:0a:55:33:59:5f:ef:54:28:83:14:62:5e:17:2f:
         d9:1f:33:e9:26:db:b3:d7:f8:fb:69:63:df:9c:15:82:63:b0:
         10:80:16:04:57:0b:cd:31:41:2d:cf:9f:b1:02:26:70:10:df:
         64:a1:c2:30:af:cc:1f:05:39:3e:71:72:d4:0a:68:f0:95:69:
         97:3d:d6:b6:38:0b:77:5a:ab:53:99:fe:95:46:a8:a0:c7:13:
         e0:53:71:fc:12:ed:02:9a:7b:23:45:fe:c4:0c:2a:c0:9e:a1:
         1e:72:11:eb:d2:0b:36:d3:2a:09:27:57:79:13:b1:c5:46:53:
         ad:ce:26:9f:65:3c:79:49:01:b3:a2:19:b3:49:04:d6:40:3a:
         f1:c9:c7:d5:1c:6c:3f:51:0a:22:3f:6b:e9:35:de:cb:65:c2:
         6f:7a:61:5a:56:82:e4:bf:72:fd:e2:88:1b:6b:c0:81:52:2e:
         3a:64:c3:f5:15:cd:99:de:a8:de:6d:21:63:c0:48:27:de:a9:
         8b:79:88:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 11:34:38 2025 by rpki-client