Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3e5160e-ff25-3c26-9d3a-974c80c142ed.roa
File:                     a3e5160e-ff25-3c26-9d3a-974c80c142ed.roa (raw, json)
Hash identifier:          J/7CgsK3E3IDCqYfUSG+5xZOJiN7no+EoBwsYmBkAv4=
Subject key identifier:   81:0A:D5:1E:DB:B1:BE:DE:F1:AC:81:23:83:DE:11:4A:2A:9E:25:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AAAAB63039A0BA5B63580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3e5160e-ff25-3c26-9d3a-974c80c142ed.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     40717
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:aa:ab:63:03:9a:0b:a5:b6:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=5bee4bf1-8b3a-4878-bccf-fca6c34f5cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:90:c4:bb:45:f6:62:89:fb:9f:51:6f:57:48:
                    46:ce:43:bb:b8:9e:5e:ee:ec:04:57:1b:c7:51:e3:
                    3e:ad:b4:b0:fa:e3:86:75:2d:bb:04:89:e6:15:94:
                    5a:a6:24:bd:9a:81:f0:59:10:18:8a:4b:e6:3f:7f:
                    61:8a:71:6e:af:b1:c5:c9:15:c7:b7:6e:12:af:9b:
                    be:e4:91:ec:6e:28:89:8c:1b:5f:87:69:64:c6:eb:
                    b4:3c:de:df:6a:bf:4f:0a:ce:dd:a4:a5:08:87:08:
                    2a:8c:d5:57:4b:8d:5a:8e:a2:70:47:40:d4:93:c6:
                    2a:89:e6:9d:1d:bd:5e:c0:e2:09:14:43:32:cc:89:
                    2f:ae:f0:a3:39:57:f2:c4:ed:73:bd:6c:4c:9f:79:
                    d1:ff:62:bf:ed:56:ba:f8:36:75:fd:5e:07:72:64:
                    33:70:f6:84:2f:f0:ab:f0:65:83:d6:17:8f:c1:96:
                    df:fc:4e:35:0f:ab:7c:5c:a7:a7:1d:9f:cb:b2:56:
                    c1:5f:9b:d2:7d:00:42:13:26:0e:d7:f5:b3:b8:bf:
                    dd:01:8a:bf:bc:88:28:76:2a:00:b6:5f:a4:16:34:
                    46:76:86:c4:c2:ff:0a:7b:c8:ed:95:6f:9f:f4:c5:
                    0e:22:d1:7c:f5:bd:62:ca:86:8f:94:07:3b:1b:cd:
                    75:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0A:D5:1E:DB:B1:BE:DE:F1:AC:81:23:83:DE:11:4A:2A:9E:25:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3e5160e-ff25-3c26-9d3a-974c80c142ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c1:fe:0d:49:f3:40:e4:42:15:74:46:e1:50:92:f3:e7:05:
         48:00:d0:74:12:31:e1:66:6f:6b:99:12:d9:ed:2f:f5:d0:4b:
         2e:0d:6b:12:bc:78:fe:0f:eb:88:0f:04:48:18:f7:bd:ab:bb:
         a6:c5:d8:8e:ad:06:eb:4c:aa:43:3b:5a:73:98:c8:f8:43:1e:
         da:61:c9:3b:03:28:be:81:ff:1b:b5:de:a3:6f:66:7b:cf:11:
         6f:a2:41:f5:05:c5:73:92:14:f9:17:bc:01:6b:47:0c:dc:90:
         ca:a5:5b:94:57:a0:d8:2b:3c:81:3c:a6:6d:06:4c:e9:b7:94:
         a0:e9:51:17:db:b9:dc:c7:7c:1c:21:30:61:49:0b:3c:6b:94:
         b1:1d:11:7c:9c:ce:18:a3:85:6a:be:22:c7:6b:55:5f:e9:04:
         15:d8:98:76:88:ee:53:5d:59:36:59:de:07:c5:64:e9:1e:c5:
         41:e4:0e:d1:ba:6a:20:90:56:6d:be:61:cd:c1:ce:66:25:ba:
         2e:e1:ef:b0:a0:1a:f2:ba:2f:aa:9e:6b:f8:bd:cc:56:ae:73:
         10:04:fe:49:23:34:48:02:2c:a6:24:68:b7:ca:ab:16:5f:11:
         d4:3a:a8:45:a2:68:b4:93:27:18:fc:d8:dc:15:a0:ba:18:a2:
         a9:e8:d8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:51:02 2025 by rpki-client