Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74203a77-c811-376a-9971-69a78f1d9b12.roa
File:                     74203a77-c811-376a-9971-69a78f1d9b12.roa (raw, json)
Hash identifier:          FjzZhG4wyxIGJlcq0Lk7Ul1Bk+5EKR1xGKb7ywtVLdg=
Subject key identifier:   CD:95:4A:E8:22:95:36:0D:CE:E2:7C:6D:78:09:83:DD:46:17:DE:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263E0BB2AA52B6107BF300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74203a77-c811-376a-9971-69a78f1d9b12.roa
Signing time:             Thu 05 Jun 2025 12:41:24 +0000
ROA not before:           Thu 05 Jun 2025 12:41:24 +0000
ROA not after:            Wed 03 Sep 2025 12:41:24 +0000
asID:                     20431
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3e:0b:b2:aa:52:b6:10:7b:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:24 2025 GMT
            Not After : Sep  3 12:41:24 2025 GMT
        Subject: CN=bc80965f-b312-4d56-8146-5d9fcad1ed3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:df:6c:fb:bf:19:61:e8:75:34:51:d4:d7:
                    c2:8d:b2:60:b6:d2:9e:a5:6a:54:9f:01:d6:ce:47:
                    36:e1:ec:3c:20:41:b1:46:8b:d0:f6:a9:7f:c3:8b:
                    59:1c:1d:8a:aa:3d:2f:91:7b:06:be:a6:cb:30:d0:
                    8b:4e:d6:bf:20:7d:60:53:f6:1a:96:10:10:cd:1e:
                    e8:ce:97:02:f5:c3:7d:f9:cf:b6:0e:15:2d:05:32:
                    01:e1:8b:29:0e:b2:f3:bd:a8:ce:20:77:42:5f:62:
                    85:e5:d3:df:c9:95:92:3f:9d:70:89:6d:1b:95:43:
                    52:34:a7:fd:ab:99:f5:76:7b:36:53:ab:42:77:97:
                    95:18:da:57:f8:88:4c:27:f8:13:37:24:e1:cc:81:
                    99:2a:7d:fc:2d:5f:11:11:b5:a1:c4:12:e0:51:70:
                    1b:0f:d0:51:8c:97:55:3f:8f:4a:a9:e9:b3:f5:02:
                    ec:45:97:81:50:f2:96:01:80:af:96:0e:ee:1e:c3:
                    99:3f:1b:5e:0e:ca:e4:3b:d3:fc:32:16:a0:0b:26:
                    77:e8:f4:da:be:85:16:a4:a9:1d:c2:cd:01:e1:7c:
                    4e:95:d3:d0:1f:1c:e6:96:2a:b9:55:33:e8:02:06:
                    10:78:d4:32:d9:88:90:da:a4:dd:67:b2:ce:c7:95:
                    41:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:95:4A:E8:22:95:36:0D:CE:E2:7C:6D:78:09:83:DD:46:17:DE:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74203a77-c811-376a-9971-69a78f1d9b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:72:44:1a:a8:67:95:94:56:27:55:73:79:3c:55:9f:cd:d0:
         71:2c:ab:b5:be:54:8b:78:49:38:ba:46:8a:bb:d7:41:a4:ca:
         c0:e2:78:ad:df:47:ae:70:d7:21:0d:11:ce:86:b0:98:52:a3:
         21:27:1f:ea:f9:3d:2d:0c:d2:3c:25:26:2f:c0:b5:c9:6b:a3:
         66:8c:23:30:8c:24:1e:c2:7c:33:5c:ee:b6:e7:63:dd:1d:cb:
         a6:a9:d2:73:c4:7e:ad:c4:61:fc:c9:79:62:1e:36:11:e6:71:
         d7:eb:a5:90:fc:e4:1e:a5:37:3f:50:69:cc:5a:09:f7:ac:9a:
         fe:08:40:cc:40:56:c9:fa:c3:0f:49:8a:d1:de:ca:be:07:3b:
         da:88:db:e0:43:0b:6e:72:0b:c8:f1:49:95:6e:f5:44:c5:d8:
         ca:05:51:1b:10:15:f6:0e:13:54:01:69:3e:e5:6d:ee:95:2b:
         0c:66:34:0a:71:a0:a6:9f:5d:51:89:d4:2e:a9:34:9e:db:31:
         f7:55:55:a2:77:ca:be:41:70:0c:ad:d6:16:af:87:6d:09:95:
         49:43:27:e1:57:f4:1c:78:ff:90:ff:2a:29:6a:e3:32:ca:e7:
         9f:4f:e1:e0:ae:99:ed:54:ef:04:cf:b4:81:2b:f2:63:36:e9:
         f5:11:e8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:03 2025 by rpki-client