Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acc858bb-dfc7-3606-8015-cf8910f3d8cf.roa
File:                     acc858bb-dfc7-3606-8015-cf8910f3d8cf.roa (raw, json)
Hash identifier:          9vlk1MHduuAV0MC3w2Bseq2mHgsjppaWwNvJtgUUZJQ=
Subject key identifier:   19:8F:1F:8F:88:64:25:1C:12:72:27:54:55:9F:F2:7B:C3:3A:47:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858497AD9CBEC7BE3B607D4AA1400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acc858bb-dfc7-3606-8015-cf8910f3d8cf.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     396595
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:cb:ec:7b:e3:b6:07:d4:aa:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=a42e707e-be5b-4979-849b-5e58a971472b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:22:7d:01:2e:a0:e6:5b:74:1b:9f:97:28:
                    0e:7e:a4:d3:bc:4a:73:5d:51:3f:a1:a4:83:96:61:
                    6f:a3:90:f8:2b:3e:6c:29:20:d2:19:d9:24:58:62:
                    ff:cf:b7:e0:62:39:da:c2:7b:74:8b:1a:e0:db:cc:
                    f1:22:06:5a:4b:b2:9e:91:c2:ff:aa:d8:bc:41:8a:
                    63:ac:71:b6:84:7a:0c:36:ca:c3:02:af:b6:5f:72:
                    11:1d:3f:27:2b:71:7b:2e:32:0c:d4:4b:ef:be:45:
                    29:b3:fd:0b:6e:dc:46:ae:f5:73:99:f3:05:96:87:
                    ed:ba:e7:7f:7d:30:a4:af:0e:a8:48:42:73:4f:8e:
                    3f:db:dc:71:34:e5:1a:e1:81:e7:1a:cd:21:aa:3e:
                    50:cb:6e:34:4c:f9:ef:6c:65:b6:54:74:e0:62:1a:
                    2c:bd:7b:a3:19:55:85:33:ec:4b:58:d3:77:85:2f:
                    16:35:0f:09:71:68:e7:1b:14:28:00:24:83:2c:65:
                    0f:24:16:ff:d8:83:31:22:0d:f9:d6:22:15:c2:ea:
                    e9:55:ad:6e:e5:0c:4e:36:dc:67:b4:85:d1:b8:1d:
                    19:d2:1c:60:0f:92:37:67:93:85:13:3d:be:c6:fb:
                    1d:66:4a:69:d9:99:be:ca:72:48:44:c4:fc:ff:2f:
                    19:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:1F:8F:88:64:25:1C:12:72:27:54:55:9F:F2:7B:C3:3A:47:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acc858bb-dfc7-3606-8015-cf8910f3d8cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:b4:1d:36:5f:7d:d1:b4:2d:96:42:fa:78:f1:f0:b4:34:ec:
         6f:b5:ff:61:56:a0:8d:b7:cd:17:29:9d:31:05:d1:56:d5:7d:
         5f:5e:78:dd:b2:6e:01:01:e9:3b:97:1b:77:55:20:6f:f3:d5:
         9f:90:e1:2a:59:ff:75:d4:00:5d:8c:9f:63:50:4d:5f:9c:44:
         12:de:b6:f3:46:2b:89:f7:57:85:5c:eb:05:59:67:0f:bd:ea:
         22:f8:0f:7f:45:48:6e:30:8f:12:3c:76:b5:b1:7a:37:e1:59:
         d0:83:a9:6b:a4:03:d0:e7:77:4f:e5:48:ac:fd:0a:58:07:74:
         ac:4d:4a:87:0d:43:29:9f:4a:f7:70:28:29:70:e6:d6:57:d6:
         0a:83:35:8e:ea:8d:e3:ff:5d:9c:60:57:ba:da:71:48:1a:1f:
         c8:6a:eb:87:9e:3d:d5:2a:a7:29:cb:ad:92:21:53:90:a5:17:
         4b:e1:c2:29:fb:bc:35:d2:d7:a5:e8:4d:32:98:6d:06:c8:dc:
         f1:5f:01:84:a5:c9:5a:c0:78:d8:2c:8b:df:16:a3:bf:51:ce:
         fa:5d:91:c8:28:84:e3:96:61:e2:0f:be:8a:94:8b:ac:87:e8:
         8f:8e:68:58:1d:74:8e:6c:ab:41:49:b0:74:90:05:10:85:39:
         35:b2:8c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:55:35 2025 by rpki-client