Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa
File:                     b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa (raw, json)
Hash identifier:          /R37VpJGJYQACURyiW+arp8zgPZv8RQOYQO/jbcy/6o=
Subject key identifier:   E1:51:D5:4D:36:F6:20:E7:10:60:F7:3B:41:DD:36:CF:22:2C:17:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A18955FF2F16C08FA9B8EB780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396544
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:5f:f2:f1:6c:08:fa:9b:8e:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=2359ab00-5f91-4b07-a56d-a4b16be83734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:98:fe:18:9f:2e:30:31:71:bf:44:b1:2f:36:
                    38:f4:34:5d:1c:fd:86:75:73:a9:05:d6:72:6d:bb:
                    0a:19:03:65:08:7c:23:de:bc:2d:f5:39:59:10:3e:
                    83:4b:aa:29:4e:28:06:ae:12:df:c5:22:de:c4:ef:
                    8c:b5:d2:31:77:78:6e:32:ad:60:11:64:f1:07:a2:
                    dc:67:ad:da:40:fc:c7:08:fb:04:c2:0a:04:4c:e5:
                    cd:15:97:18:d6:d8:2a:c2:82:2a:3f:25:35:c5:5c:
                    83:95:4f:e6:c8:47:1d:d1:a2:c9:00:b8:52:79:c9:
                    d3:06:db:7a:32:3f:82:82:6e:00:07:2e:d5:be:49:
                    fe:11:37:f1:86:42:df:28:77:23:fa:09:f4:39:69:
                    70:f3:93:d0:97:09:81:9d:95:7f:7e:59:24:d1:21:
                    b6:30:c9:ae:8b:89:44:aa:e0:93:f3:e7:ec:9b:11:
                    e4:d8:62:8c:1b:5a:ea:3a:09:6d:75:f6:43:a2:3c:
                    f8:1d:00:5c:49:9c:ca:91:e4:3b:c9:cd:f1:ed:35:
                    94:e1:cd:34:e8:67:d7:4d:01:7d:8c:1f:9a:9b:97:
                    a4:7f:52:7f:1c:b2:66:28:05:8b:b9:b8:7b:5a:65:
                    8d:98:81:c3:79:28:c2:ec:00:a0:c0:09:31:16:99:
                    3e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:51:D5:4D:36:F6:20:E7:10:60:F7:3B:41:DD:36:CF:22:2C:17:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9b8d098-aa96-381a-aeea-72fdd3ec78dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:04:8a:37:a9:ef:f4:85:9d:7a:f8:0c:e1:94:fd:85:f0:9a:
         1d:a8:82:f0:99:94:c0:cc:46:2a:9c:91:74:83:e2:26:e9:3a:
         f2:10:a0:3d:5b:56:46:70:75:c0:9f:f6:19:a9:b7:77:1c:85:
         f4:f1:92:e1:b1:35:0d:1f:18:b4:69:d4:a1:0c:cd:85:02:9a:
         76:87:4c:54:b9:08:ec:3a:dd:2d:47:0c:b6:3b:39:83:ab:04:
         6c:09:5d:84:91:e4:ec:2a:7b:fc:22:47:03:d6:bc:d4:50:c3:
         bc:c2:47:37:c6:64:af:f7:43:9e:0a:77:0a:3c:96:55:3b:71:
         d5:3d:b6:9c:a0:50:49:7c:e4:0d:80:50:93:f4:83:75:86:5a:
         8e:dc:41:d7:d7:53:e0:57:21:6d:bc:95:6d:85:d7:d7:ee:b5:
         af:8d:3d:91:8b:1c:2c:52:6b:48:80:3c:ac:2d:82:36:93:36:
         33:b3:84:bd:08:b3:fe:24:ed:b2:5d:57:88:de:21:e4:38:d5:
         88:16:eb:74:c9:7e:0a:f5:4b:37:34:97:73:65:a1:1b:73:4d:
         07:f2:1b:5c:ed:5e:fb:9d:f3:f0:65:0e:5b:6c:9d:d7:50:3f:
         ad:fa:da:f8:de:77:b7:a6:dd:ca:08:78:54:31:db:e1:ae:20:
         94:c3:16:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:02 2025 by rpki-client