Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/849af91e-337a-385f-ae57-33509d551e84.roa
File:                     849af91e-337a-385f-ae57-33509d551e84.roa (raw, json)
Hash identifier:          wj/J+zUJnHqjV7NvgWl1fWlg9AwEmLLoC9i9XP3l4jw=
Subject key identifier:   D5:B2:CC:28:FD:82:80:22:EF:DF:B5:6C:6C:68:4E:EE:E3:B5:0E:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263F2FE3E63EFC09AC94C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/849af91e-337a-385f-ae57-33509d551e84.roa
Signing time:             Thu 05 Jun 2025 12:41:25 +0000
ROA not before:           Thu 05 Jun 2025 12:41:25 +0000
ROA not after:            Wed 03 Sep 2025 12:41:25 +0000
asID:                     396595
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3f:2f:e3:e6:3e:fc:09:ac:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:25 2025 GMT
            Not After : Sep  3 12:41:25 2025 GMT
        Subject: CN=06e555b5-7509-48fa-a483-0928a45b698f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:2d:39:44:fe:d5:68:c9:48:4a:ac:bf:54:
                    f0:65:e8:81:48:b8:fa:55:86:7b:3b:38:10:13:9f:
                    b3:ef:48:0e:7a:23:08:4d:c0:9d:63:aa:2c:3c:7c:
                    a8:85:ca:16:36:78:d5:59:11:35:92:c0:7e:ea:bc:
                    68:b9:09:5e:70:a3:c6:0a:a5:74:65:67:01:26:cd:
                    ac:a9:fd:e3:47:26:6e:d5:3e:a6:c4:4b:c5:1f:86:
                    df:9c:e5:c4:0b:b8:98:be:09:75:21:fb:3a:60:ec:
                    a6:30:7b:dd:8d:7d:f0:7a:7e:e3:6b:d0:87:29:40:
                    83:c7:f4:4f:5e:4f:c9:73:41:c9:e3:8b:40:ee:2e:
                    8f:fb:85:a1:33:05:1a:70:17:ac:a5:0a:36:3e:a8:
                    db:37:8b:f7:0f:a9:66:b5:1f:5f:f9:79:35:b4:42:
                    77:ff:92:c4:ec:f7:eb:8c:e4:09:52:a9:c9:97:94:
                    19:c3:7d:cf:fc:4c:5a:25:48:1c:f1:5f:52:48:14:
                    eb:fd:6d:85:e4:19:59:93:28:0b:92:98:2d:5d:64:
                    55:c0:8e:e8:5d:a4:44:62:fe:80:0e:b8:bd:4b:0b:
                    30:f3:02:f7:6f:7d:62:0f:95:51:d9:c8:46:3f:88:
                    84:05:9b:73:eb:e2:c6:cd:8e:cc:b8:63:49:4b:6d:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:CC:28:FD:82:80:22:EF:DF:B5:6C:6C:68:4E:EE:E3:B5:0E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/849af91e-337a-385f-ae57-33509d551e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:74:9d:74:19:2e:ae:30:2a:d9:26:3c:e4:4c:0b:bd:5f:4e:
         52:f7:04:6c:75:9c:9a:4d:da:58:26:07:f3:07:87:a8:eb:99:
         f6:09:0a:fd:36:4a:69:55:39:ad:dd:9e:92:1e:25:31:68:8b:
         f0:82:ca:48:67:f9:1a:0e:30:e2:58:9c:fb:c9:96:19:94:05:
         a5:7f:42:1f:d7:7a:08:70:d1:c2:61:e1:92:ac:b5:6c:4c:74:
         d8:a0:d6:76:f0:66:aa:39:b9:8e:0a:55:b4:b3:89:35:0b:07:
         65:0b:45:7f:76:0c:a9:70:2c:5e:ef:ae:03:20:bb:c5:b4:f6:
         77:1e:74:ce:87:72:14:b2:e5:fa:45:1e:f6:14:d0:a8:81:9f:
         6c:5c:dd:3e:46:6d:e6:69:c9:a3:eb:98:90:89:21:4f:66:0e:
         1b:99:32:69:a2:3b:39:a4:fa:fd:b9:3c:0b:aa:4c:1e:58:93:
         9a:47:50:67:6a:26:5e:5c:de:5d:eb:91:ea:30:61:0f:fc:bc:
         6b:c2:68:db:13:9c:cd:1a:b6:25:eb:95:ce:84:7a:2f:0e:07:
         aa:d4:02:91:bd:38:fe:77:62:e9:c9:a3:14:d4:26:ae:96:28:
         19:f6:37:d4:0b:13:3b:84:ab:17:36:af:d1:ef:e7:ff:ec:5b:
         7d:04:3e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:25:42 2025 by rpki-client