Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96302011-e437-3371-9648-c0f30ce64e8c.roa
File:                     96302011-e437-3371-9648-c0f30ce64e8c.roa (raw, json)
Hash identifier:          xyZibWv7OpsFMrGaAf3MZuLvCUiAnReKCMXAWiBqfu0=
Subject key identifier:   E7:FD:ED:73:98:A2:85:10:40:F4:EF:75:78:40:2E:D7:1F:71:C5:99
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A03A5675AE27C0EAC7A4A8500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96302011-e437-3371-9648-c0f30ce64e8c.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     396566
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:67:5a:e2:7c:0e:ac:7a:4a:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=7540782a-7a98-4d0c-bc9c-5d12dd5e431d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e5:07:cf:a5:ee:60:5c:58:37:58:12:f6:e4:
                    03:ae:cf:67:52:cc:9d:d6:82:0e:38:8d:5e:87:17:
                    f0:d2:a2:49:ca:33:f8:21:d1:b4:71:73:a9:48:5d:
                    df:cd:b1:24:ff:97:d2:38:cf:92:2f:4b:0d:f0:a6:
                    12:45:64:03:5f:6b:f0:10:f0:38:3d:a9:28:e7:cd:
                    4e:ac:d2:43:59:ed:d0:6a:74:c5:4e:bd:b9:05:e6:
                    9b:48:aa:26:9b:25:6d:09:9a:9f:ea:db:62:13:4b:
                    12:22:22:34:04:10:d0:e4:c8:bf:dc:24:be:af:1d:
                    25:75:7c:18:c5:19:17:27:1b:d1:cb:67:38:24:ba:
                    66:35:69:2a:a7:04:e7:c3:c4:a4:d9:3f:bc:f2:3e:
                    0f:04:19:ef:e1:4c:b6:f1:ad:9e:7a:fd:fb:95:fe:
                    04:dc:c8:fc:fb:d0:64:80:9b:47:c9:8d:40:2e:f1:
                    16:ef:a7:60:61:01:1f:2b:98:b2:1a:23:ce:87:d1:
                    fb:d9:0a:99:e1:d7:64:18:f6:15:32:98:21:e0:70:
                    86:c5:eb:c6:ba:f2:a6:e6:b2:60:67:f2:70:15:a9:
                    94:4f:0f:74:ea:2d:82:64:c5:9b:c1:f7:18:ca:82:
                    d3:9d:b2:00:79:06:af:f2:2c:66:ab:e6:35:5a:4f:
                    19:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FD:ED:73:98:A2:85:10:40:F4:EF:75:78:40:2E:D7:1F:71:C5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96302011-e437-3371-9648-c0f30ce64e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:52:25:4f:ba:dd:08:f5:ad:5d:b7:82:06:38:79:b5:d6:3b:
         fc:d6:58:fd:ed:33:fe:9c:c2:04:3a:4d:83:1b:b6:e8:32:2a:
         d0:75:e9:5d:ec:73:12:d2:cb:75:ce:7c:00:d5:4c:95:05:95:
         66:31:e7:f1:e8:66:12:72:63:59:80:a6:09:55:66:dd:2f:8a:
         d9:fc:a9:b5:34:66:82:c7:60:0f:1c:53:b3:1e:57:c3:16:a7:
         67:78:a9:94:2f:57:4b:08:a8:c0:e2:06:7a:85:f6:1b:fc:a3:
         70:68:4e:e3:10:4c:a2:d4:03:70:9d:af:d3:83:3a:05:ed:e2:
         b7:38:64:6d:f8:aa:13:dc:85:1a:83:ec:51:ef:ac:eb:a1:a9:
         60:9e:36:7d:d3:a8:3f:53:ab:4b:06:bf:9f:82:69:d6:88:80:
         4f:81:3e:7d:ff:b4:a5:61:4f:d0:28:f0:87:99:cc:e0:f0:a9:
         19:82:b9:5a:b7:c9:8e:63:3a:42:fb:85:3b:e9:ab:af:d3:b2:
         1c:0f:b1:eb:1c:e8:68:ca:a0:26:e0:69:66:07:ac:1f:d6:87:
         05:1d:8f:b3:05:d4:b4:fd:91:21:09:fc:b6:1b:a4:54:32:64:
         05:9c:7d:19:0f:ad:6e:da:b4:8b:16:2c:59:35:33:8f:d4:ff:
         38:ce:63:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:11 2025 by rpki-client