Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c4b042b-d62d-39c0-9da9-d308d566bd2d.roa
File:                     9c4b042b-d62d-39c0-9da9-d308d566bd2d.roa (raw, json)
Hash identifier:          Lr6x48/lxmGytPtT8wrMpykmqG1WOmd4aUr7FWWbc1M=
Subject key identifier:   FE:DE:D1:4A:B9:84:FB:F4:F1:A4:17:73:75:74:1B:10:E5:97:6E:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD639A47EE2F16AFF9BB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c4b042b-d62d-39c0-9da9-d308d566bd2d.roa
Signing time:             Tue 01 Jul 2025 13:48:38 +0000
ROA not before:           Tue 01 Jul 2025 13:48:38 +0000
ROA not after:            Mon 29 Sep 2025 13:48:38 +0000
asID:                     36631
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:63:9a:47:ee:2f:16:af:f9:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:38 2025 GMT
            Not After : Sep 29 13:48:38 2025 GMT
        Subject: CN=2c96a531-325a-4bcd-a2b2-513cab3b16c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:0b:ec:2a:b2:47:23:92:0c:62:05:cd:44:
                    df:78:74:70:18:95:0f:80:11:72:97:29:33:ef:d1:
                    e1:da:25:d8:0e:c7:c9:13:c8:ac:44:3a:73:07:c2:
                    86:6e:c4:49:b0:71:a1:b7:45:ae:29:0b:1c:3a:42:
                    59:8d:37:fe:68:38:7d:22:58:dd:bc:6a:a4:90:7b:
                    33:c9:eb:64:70:3c:75:ef:c1:83:a3:f6:a4:0d:69:
                    94:bd:55:c8:28:a9:6c:66:b9:de:ed:33:a9:fb:c6:
                    9c:b7:12:97:81:f4:cb:66:a7:b6:bb:10:36:23:0d:
                    7c:6d:05:24:01:c9:39:75:8b:1b:87:2a:8e:5a:1b:
                    3d:dc:bd:e2:96:0d:2c:d0:eb:a8:a4:03:cb:1c:99:
                    7c:11:d1:b6:c8:19:5f:08:db:76:d3:79:95:93:75:
                    9f:1b:b0:3e:6f:6b:68:b1:4a:fe:08:dc:27:d2:68:
                    c2:ea:b0:35:da:52:58:25:f7:30:5c:07:76:e2:3b:
                    2e:a3:13:da:d3:67:f6:3c:d5:50:8c:8b:c3:da:83:
                    3f:f0:b8:a5:d2:f8:f2:67:a7:16:ad:0f:9a:7e:3e:
                    4f:aa:46:82:8f:f1:7d:4d:32:73:b9:87:68:03:28:
                    c4:e6:9f:8f:5b:94:07:e9:b8:2c:08:34:34:b0:6a:
                    b4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DE:D1:4A:B9:84:FB:F4:F1:A4:17:73:75:74:1B:10:E5:97:6E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9c4b042b-d62d-39c0-9da9-d308d566bd2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:3a:a3:9b:20:a9:38:22:aa:a0:50:98:8d:ea:c4:68:6f:7e:
         49:48:f2:34:40:93:b5:33:e4:2f:3f:33:eb:09:1a:0b:d9:46:
         6e:33:55:97:8b:b0:cf:ab:cd:76:64:7e:73:4f:4d:18:ba:2a:
         9c:1a:a2:ab:3a:5f:e1:43:17:b7:ab:3d:36:ee:f8:26:05:02:
         57:99:80:81:72:a4:ba:ee:a1:48:24:f6:a0:c8:0f:bb:a0:d3:
         58:8c:ca:62:0c:c1:a7:65:b8:de:f6:ac:7f:f5:b7:2d:bd:41:
         9d:2b:83:ae:9a:70:5c:af:45:34:c2:61:76:f8:e5:d9:cd:76:
         a9:e7:84:27:33:e6:fd:48:0f:04:c2:c7:27:4b:f5:f2:43:a3:
         a3:52:a2:cf:8e:0e:32:e1:bf:79:ff:cf:80:ab:bd:95:a9:9a:
         f8:99:93:e8:81:7c:1b:b1:c9:58:ff:75:f5:09:92:d0:47:c0:
         e6:6d:b8:82:f7:01:0d:df:56:4e:88:d6:fc:b2:35:e9:2f:09:
         31:ca:65:c7:50:9d:bc:c8:46:90:9e:3a:e9:5a:9e:23:40:16:
         6f:ad:71:10:0f:2a:c8:4c:2b:da:cd:ed:1d:c2:40:cc:f3:37:
         b6:69:07:47:b8:41:28:ca:f2:69:37:b8:35:40:b8:94:b6:3f:
         91:93:08:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:10:14 2025 by rpki-client