Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c9077f-38e1-311f-b88c-25d59dcc96c6.roa
File:                     a3c9077f-38e1-311f-b88c-25d59dcc96c6.roa (raw, json)
Hash identifier:          wRcSY3ampbq4mC1+nC4QQ3Dt7V6IL3l29AlZo7t7Eos=
Subject key identifier:   7B:63:BD:0F:8D:08:E0:E7:97:12:40:25:E6:80:49:D4:A7:20:89:48
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA503F25641CA36A1B2E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c9077f-38e1-311f-b88c-25d59dcc96c6.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     397210
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a5:03:f2:56:41:ca:36:a1:b2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=f4cbcc09-82ad-43a0-82a0-aa12d981144f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0c:c2:ae:e0:c0:1b:33:62:db:ef:85:85:38:
                    d3:98:9f:59:3d:14:c0:24:c5:a9:0b:b4:2a:2b:ef:
                    6a:3a:be:a7:99:96:77:76:10:e3:dd:53:64:d2:69:
                    89:6e:d0:ad:d2:52:81:e8:65:05:eb:1d:eb:66:59:
                    7a:d4:82:28:c9:e3:12:fc:1f:f4:8c:07:83:0f:39:
                    72:a5:3b:fa:e0:fb:e1:30:60:0e:bd:97:df:60:3b:
                    d0:2e:eb:0b:87:a3:1b:83:76:27:c7:a4:d1:f8:49:
                    25:54:4a:e4:d3:66:16:9b:f9:33:d0:3b:21:7a:1e:
                    b9:ff:f7:33:27:8c:82:1f:78:72:c4:cd:95:53:88:
                    45:53:a5:af:ba:15:57:09:f0:56:38:23:1d:11:fd:
                    02:ae:e3:bd:1b:4f:d6:0b:03:9a:c5:a6:ee:fa:60:
                    81:5d:90:46:66:bd:fd:ed:92:cf:f5:fd:f1:50:03:
                    13:a2:8a:99:86:3b:ec:ca:c6:f9:da:b7:e7:80:6e:
                    73:f7:7f:b2:ef:05:79:c4:57:66:fe:eb:e4:73:9d:
                    3c:44:c0:23:5b:f2:7f:cb:43:c1:1f:fc:4a:56:46:
                    65:58:40:af:c3:ce:e6:84:f8:43:b7:fd:a7:cb:fe:
                    94:8b:3f:69:9d:48:c0:dd:2a:61:13:42:4a:49:3e:
                    17:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:63:BD:0F:8D:08:E0:E7:97:12:40:25:E6:80:49:D4:A7:20:89:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c9077f-38e1-311f-b88c-25d59dcc96c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:b3:9d:80:03:8a:35:47:92:67:00:95:a8:94:f8:fd:fc:
         92:38:7e:a9:99:c1:a0:84:b7:b8:e9:a3:f9:e8:f0:29:e8:2c:
         e5:00:8c:2e:a4:67:b1:17:20:51:5d:55:41:dd:ba:2a:a6:c8:
         c8:8e:48:1d:6e:ef:7d:a9:23:08:db:0f:8d:90:61:8e:92:f2:
         5e:77:05:4e:84:b3:d7:7e:7f:a7:f3:1b:70:a6:7d:30:0c:75:
         38:3c:cd:f9:a3:09:37:a9:1c:9d:8f:33:52:09:48:d6:1e:5a:
         3a:dc:c2:b8:40:ed:23:30:42:59:e1:b6:08:53:5a:ae:3f:31:
         41:68:ec:bf:ae:09:a4:f5:ac:1a:a2:b6:ee:e6:21:e0:2e:cc:
         b8:37:56:73:2c:92:1f:57:22:4b:4d:8a:72:0c:a9:30:2b:a5:
         6d:e8:0d:b6:65:6e:20:02:4a:28:32:d4:ee:08:e9:ec:64:a4:
         37:28:fb:43:c0:0e:de:15:e0:25:1d:f1:37:a6:70:7e:f1:69:
         7d:95:7c:a6:0f:1b:c1:ce:14:68:1d:66:79:89:1a:6c:fd:2d:
         3a:65:02:5e:ea:97:ef:ce:e5:55:04:7f:8a:41:5e:92:37:75:
         76:88:69:aa:6b:3b:f6:01:ae:7b:2d:bd:f7:6f:5c:b4:fc:ce:
         dc:f5:72:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:22:06 2025 by rpki-client