Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa
File:                     a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa (raw, json)
Hash identifier:          dAQhAjNBa/PCXr7QT0Gsg5vgyE06To++yFt4ZaUGlmE=
Subject key identifier:   7C:40:45:94:88:BD:15:1C:57:9D:F2:26:0F:A8:8E:2C:03:FD:1D:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A189561CF79EE16800DF98380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396599
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:61:cf:79:ee:16:80:0d:f9:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=7cca92ce-4555-4417-8ece-d9b4c505e2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:12:55:11:46:33:d0:ec:d8:a7:7b:9d:5d:
                    2b:23:52:cb:24:77:c9:2d:d8:60:65:34:cd:cc:ba:
                    42:18:32:f6:3d:43:fd:33:ee:5a:ac:19:e7:45:d7:
                    db:15:18:bb:69:0f:35:d9:f5:42:48:0d:fa:f7:d8:
                    d0:3b:9d:9f:a8:77:ff:0b:1a:5f:be:9d:a7:04:e7:
                    ec:fa:e7:6e:8b:81:4b:9b:8b:7d:19:1d:80:95:a5:
                    78:cc:fa:cb:68:de:ad:82:2e:a3:58:7f:81:83:27:
                    91:de:ff:35:a8:7a:75:f2:2b:3b:f0:74:a9:f9:d0:
                    6f:83:ab:05:1a:22:88:ba:b2:b9:fb:73:d7:ff:af:
                    c9:1b:34:e1:70:11:b6:23:32:ca:9c:87:01:d9:06:
                    cd:35:e9:64:c7:bd:e2:3b:f0:a9:be:8d:93:ff:2c:
                    f9:6b:2b:ce:b7:b7:0a:f7:24:5e:11:3c:96:8f:4c:
                    6d:bf:a6:5e:57:01:56:25:5d:eb:ad:d4:b3:0b:14:
                    c1:70:39:a1:89:2b:17:8d:f7:a0:77:17:5a:9d:b4:
                    0e:69:15:9a:a6:55:ef:7a:0c:d1:89:48:e5:47:9f:
                    c8:ee:29:40:82:b4:6c:4e:d4:ff:22:c7:99:86:d5:
                    7f:44:1c:e0:20:6b:e4:fc:00:c3:75:24:13:6d:33:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:40:45:94:88:BD:15:1C:57:9D:F2:26:0F:A8:8E:2C:03:FD:1D:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8c3cb88-2bb9-3ce3-ba8b-904421920258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:55:c0:51:6d:1c:ed:d9:ae:6b:47:0d:ad:a4:42:1c:a1:80:
         d3:e5:a1:f1:78:bf:d3:46:a3:2a:c8:fd:b7:2a:1a:7a:e8:5f:
         86:45:c9:a1:bb:8c:7f:4e:d8:db:09:5c:04:78:9e:0d:46:4c:
         3c:67:41:8c:4d:f1:aa:87:d9:65:d7:8c:bc:9e:e5:bb:04:8c:
         7a:c1:1f:03:f5:a9:68:05:cd:82:9c:4b:62:75:f9:a5:db:b2:
         d3:b1:ff:2f:8d:18:b0:c5:87:61:bc:4c:99:88:aa:6e:99:bd:
         10:9f:df:fe:64:07:b5:da:fb:5a:b9:d0:fc:a6:97:53:9e:30:
         04:e9:45:cb:55:81:74:19:90:a5:7b:b2:00:93:71:2b:c0:fd:
         be:3a:f9:92:f4:dc:d6:98:43:5e:98:76:74:19:63:29:a9:6d:
         2c:98:95:09:c3:f3:63:4d:ff:5f:ce:37:f8:46:15:29:f0:66:
         43:7d:a1:7c:8a:bd:c4:ab:76:d4:58:2c:63:c8:8d:df:82:4a:
         5b:f2:26:22:2f:54:5a:81:50:a7:b9:6f:06:86:0c:ce:b0:f3:
         ea:0c:c5:a7:fd:60:90:7b:af:62:af:8d:87:5e:b9:a8:a0:71:
         33:f3:6b:75:22:8c:1f:56:f1:22:a9:a1:bd:b9:97:2c:53:cb:
         62:a3:6b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:45:55 2025 by rpki-client