Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8790ea3c-9ab9-308e-9354-f76a73e54f43.roa
File:                     8790ea3c-9ab9-308e-9354-f76a73e54f43.roa (raw, json)
Hash identifier:          3ukHSq5kzruxPzDTm7A2zEeeTOtgDXLUF9Bf6jf2bvc=
Subject key identifier:   AF:46:68:E8:05:19:4A:DA:15:2B:70:9E:B5:E7:DC:79:B4:9F:14:CD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584917DC153AF6C2655869702A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8790ea3c-9ab9-308e-9354-f76a73e54f43.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     396544
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:15:3a:f6:c2:65:58:69:70:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=e1a33c51-cca3-4eab-95a6-7abe2c39578b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:14:c2:86:03:4a:96:4c:74:a8:e2:1f:26:23:
                    62:7e:9b:83:98:63:ad:dd:20:38:c3:58:4f:fa:80:
                    1d:2b:ea:ab:23:3b:d0:db:c0:55:d1:28:53:9f:d4:
                    c0:40:09:36:64:33:7e:45:a0:de:b0:e1:f8:3e:6c:
                    e6:83:60:07:a9:5e:e0:3f:90:58:7c:4f:41:22:6d:
                    8b:bb:f7:e4:33:00:5b:72:1d:04:c9:9d:5b:b1:1d:
                    9b:72:7f:34:b1:44:25:be:aa:92:da:f4:8b:80:89:
                    d7:3b:50:a9:a7:92:d6:9c:54:37:ab:35:c4:6b:27:
                    79:02:3a:2e:dd:36:5a:2f:6f:c0:ca:dc:09:4e:5c:
                    69:d1:0c:d8:a4:03:96:75:2c:82:78:e0:89:5b:d4:
                    2d:d4:c1:dc:15:52:67:27:22:a2:3c:a5:b6:6c:01:
                    b3:f6:c0:55:04:8a:14:f6:ac:fb:74:d0:59:76:60:
                    5f:2c:99:fb:8d:34:c6:79:6e:87:70:29:1d:23:5d:
                    8e:76:c8:1d:95:4a:3d:f4:be:c5:d9:e2:02:aa:3f:
                    cc:11:33:11:be:d8:d1:79:42:9e:13:6c:0b:07:4e:
                    f3:81:04:ae:65:a6:8e:6a:67:af:81:d5:12:bb:2b:
                    c7:04:69:a1:11:ce:c3:5c:da:0e:c3:e5:ea:9a:3b:
                    27:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:46:68:E8:05:19:4A:DA:15:2B:70:9E:B5:E7:DC:79:B4:9F:14:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8790ea3c-9ab9-308e-9354-f76a73e54f43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:c8:24:50:d1:66:4f:85:eb:75:de:27:45:6b:19:84:d1:34:
         7b:0a:9c:6b:95:13:72:02:c7:26:3b:51:42:01:09:db:43:06:
         4e:44:40:8b:d0:bf:e6:c9:d2:0c:8a:da:1b:93:44:fe:67:b5:
         d3:39:15:e0:4d:3f:6c:87:f0:b1:3c:14:ca:86:57:34:eb:91:
         7b:ee:77:60:59:68:1c:3a:61:a8:3e:0d:06:30:af:c1:b2:30:
         c5:9a:b7:26:f4:df:a7:87:7f:44:f5:58:1e:ae:bd:29:29:0e:
         e6:6f:1f:e4:be:89:e9:f4:da:87:e8:1f:be:d2:1e:80:77:6a:
         c5:08:71:1c:94:f8:a2:29:68:3b:29:da:0f:67:01:ef:a8:db:
         a2:42:9c:3d:f1:36:69:ef:c7:bd:1c:66:75:8f:59:ae:52:2f:
         3f:49:fe:db:f6:e0:68:35:52:22:1e:de:9f:51:2f:34:1b:30:
         57:b1:a3:4b:79:65:7a:3a:00:9c:bc:be:34:29:00:90:0e:98:
         25:c6:e8:cf:a3:94:20:10:78:8f:90:c0:da:bb:e5:09:2c:cc:
         9e:d2:7c:3b:2f:c3:64:c7:66:a1:b0:7c:8c:2c:99:b3:c4:c6:
         31:4a:47:ce:c7:d1:7a:ee:18:7a:db:a0:21:e5:8a:62:2e:1c:
         3e:70:d2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:46 2025 by rpki-client