Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bb70d0b-f496-348d-8a11-129704246803.roa
File:                     9bb70d0b-f496-348d-8a11-129704246803.roa (raw, json)
Hash identifier:          j50Ea7dHJtzibLOEcZSf6UuZffy9Gu61a3Kaj8RJTnQ=
Subject key identifier:   25:E9:9A:42:34:DF:78:E5:7D:67:66:DE:5F:38:8C:A4:F6:23:0B:77
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183C539835715147ACEC380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bb70d0b-f496-348d-8a11-129704246803.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     397211
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:c5:39:83:57:15:14:7a:ce:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=c7c766ae-385f-41b4-8c7e-f4d0d083a641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6e:59:fb:88:2d:da:c1:57:ea:44:e4:e7:ba:
                    84:58:9a:43:75:e2:d4:a8:0a:39:0c:b6:e8:7b:14:
                    cb:56:79:00:bf:98:8a:33:8b:85:a2:60:8b:67:99:
                    2b:5f:96:79:2d:ab:11:b4:32:b3:59:a6:b2:63:bb:
                    de:42:ba:ed:08:db:c6:b5:c2:b6:6c:6c:e4:df:49:
                    fe:c8:e5:10:06:ab:a9:35:06:04:77:c3:c1:bb:62:
                    12:bc:3e:53:da:32:33:fa:21:1a:8d:fd:9e:1d:79:
                    49:50:67:d7:d3:7b:13:23:30:d6:03:38:f5:f6:b8:
                    95:6a:be:4a:d7:d4:ff:5a:73:5b:c8:a5:5d:52:0a:
                    ac:00:db:f5:01:bf:fa:b6:af:a2:22:3d:98:1f:90:
                    57:f4:fc:c2:95:76:b5:2e:ad:b0:9e:08:7b:e8:fe:
                    8c:aa:60:0c:88:9f:39:48:78:1d:7d:4e:00:15:07:
                    f1:2d:3b:71:d9:e8:16:07:ba:0c:ea:7a:36:53:47:
                    7f:db:43:c7:56:28:74:04:c9:d1:c5:5f:50:d2:f1:
                    c8:f8:41:f8:3c:a0:24:07:15:6d:c7:e8:a5:cc:ca:
                    0f:62:de:88:5b:23:ab:36:91:ee:7b:95:c3:e2:31:
                    a5:04:2d:1c:22:6f:41:8a:b8:77:63:b9:b6:be:a4:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E9:9A:42:34:DF:78:E5:7D:67:66:DE:5F:38:8C:A4:F6:23:0B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bb70d0b-f496-348d-8a11-129704246803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e7:28:79:cc:d4:4c:7f:88:09:99:22:d0:de:42:7b:40:db:
         69:8e:48:ee:8b:5f:63:d6:1a:9e:ba:c0:d2:79:ab:33:1a:80:
         f6:08:30:b4:7a:a5:55:f0:17:d9:7b:6f:fb:88:2f:ac:51:1d:
         ad:fa:a1:ae:5c:90:be:26:68:89:13:54:ad:ca:6f:a6:94:45:
         8b:d9:16:06:f2:5a:57:91:79:19:bf:cc:74:27:37:ef:00:47:
         48:ca:5f:52:fa:88:20:d3:b8:eb:c3:1b:d3:b0:05:82:a7:5f:
         c0:5d:b7:c8:31:96:9f:fc:61:75:59:96:6f:4a:d8:71:9f:6f:
         07:b8:e3:0a:47:b0:d5:40:89:8b:0f:41:ad:9b:f9:be:fa:56:
         7d:5c:8f:2f:0a:c1:c4:9a:a1:1e:cd:b6:c3:da:df:8e:db:ad:
         0c:bb:0c:bc:c6:c8:61:f0:0c:c0:40:b6:2a:cb:4f:ff:2c:6f:
         00:82:d1:35:98:b4:5a:5f:47:19:90:04:8d:b0:64:c4:cd:70:
         8d:e6:30:02:80:91:8f:36:b7:d9:69:e7:be:d1:f8:cc:6a:f4:
         49:5b:0e:62:da:da:a6:9f:15:51:4c:d4:7d:f7:4f:46:04:65:
         f4:92:0d:ea:12:b4:90:0d:ba:8e:1e:0d:66:da:f6:96:77:35:
         d0:97:67:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:46 2025 by rpki-client