Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97933660-633f-32c4-a794-df8b18f0fbe1.roa
File:                     97933660-633f-32c4-a794-df8b18f0fbe1.roa (raw, json)
Hash identifier:          H9mrGIGn01uHSKpQZBjtAT1Kko2i265ImsBtK9R5WYc=
Subject key identifier:   A8:2E:67:D6:95:65:19:6C:CE:16:E1:88:AB:44:9B:60:83:B1:EF:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496FAF00F3B4E7C367504C4E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97933660-633f-32c4-a794-df8b18f0fbe1.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     396541
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:00:f3:b4:e7:c3:67:50:4c:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=7737c4c2-2a1b-4bcc-96fb-80a3972af6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:39:e9:e0:b4:a4:9e:48:36:5f:84:d7:1f:
                    37:11:c0:d4:6a:c0:49:a1:57:05:ba:83:4f:8a:35:
                    d1:ee:3b:a5:d7:4e:f1:e8:61:98:85:8b:44:53:ba:
                    ea:08:79:ac:42:67:19:63:8f:0e:bf:32:7d:b9:75:
                    60:aa:32:9c:6b:bb:0f:02:43:23:3e:a0:15:bd:bf:
                    7c:f5:ce:28:1c:0f:ee:2f:38:ac:8d:d9:40:d4:58:
                    d0:81:73:f7:66:01:39:62:ca:85:45:16:cd:29:53:
                    79:1f:dd:08:1a:42:8c:59:8c:4d:77:48:59:a4:07:
                    91:a8:d1:42:ea:2d:15:fe:3e:93:cb:80:29:ef:87:
                    93:d2:eb:a7:2e:42:20:44:15:ea:4e:35:3c:53:d2:
                    02:4a:4f:58:11:96:38:bd:c4:4a:69:8d:8e:c2:6d:
                    60:69:07:35:e8:9f:eb:95:8a:45:52:7b:03:a9:d8:
                    7f:09:c4:c3:88:3d:36:12:91:8d:b5:12:54:2a:83:
                    c1:2d:e2:c1:f1:47:86:5a:0e:25:d7:65:55:c4:54:
                    0c:45:4d:06:b4:33:35:27:d4:04:28:18:99:bf:5e:
                    b6:09:7f:40:a2:bf:d7:1e:f4:07:e3:16:3d:14:cd:
                    80:b9:b3:fe:19:57:38:92:f4:e5:dd:13:0e:4b:60:
                    32:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:2E:67:D6:95:65:19:6C:CE:16:E1:88:AB:44:9B:60:83:B1:EF:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97933660-633f-32c4-a794-df8b18f0fbe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e9:cf:a6:e5:33:13:8a:c0:61:a2:3f:81:1a:ed:1f:b1:06:
         6a:41:04:de:e9:a0:83:8a:e5:98:28:63:01:b1:63:fc:e0:60:
         3e:38:c3:a2:07:9d:a8:7d:af:0f:66:c1:e0:97:0e:e7:cd:d0:
         70:31:70:1e:2c:d1:73:a5:b7:b5:47:87:25:3a:4a:eb:35:aa:
         d5:4f:eb:d1:35:c0:37:2d:1a:fd:0d:61:51:b4:e5:00:70:7c:
         93:7b:9c:08:18:e4:7b:84:fb:d9:99:3a:9e:37:18:11:7c:bc:
         0f:b2:2e:ed:8d:91:03:9c:5a:a0:e7:c3:eb:5a:ba:a7:1f:43:
         01:3b:2c:49:5b:44:9d:ef:68:24:d1:d9:ee:72:f6:5e:0e:34:
         06:56:01:a7:1b:5a:d6:2f:8c:b6:8d:ae:ef:4c:4c:22:04:0b:
         00:f5:da:92:e1:cc:b7:12:ee:54:18:73:58:85:49:45:7a:c3:
         20:5d:9d:f1:cb:24:84:c0:52:64:89:fe:ba:69:9e:55:e9:a2:
         e3:55:69:41:36:30:15:50:bd:b9:05:33:e1:7e:93:16:6b:7c:
         7a:21:15:cb:08:e9:de:d7:8c:6f:24:e1:ac:43:9a:da:98:74:
         85:03:fe:4b:6d:fa:af:4a:c3:d0:b7:a3:88:0c:90:79:97:f8:
         8e:47:d7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:48 2025 by rpki-client