Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa
File:                     bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa (raw, json)
Hash identifier:          9kmoht7l3Kgo9m1Whteb1hoCHxdrRK3chorTfANB2jo=
Subject key identifier:   42:A0:B3:B4:E4:6B:31:58:32:85:F3:B2:B8:7F:36:01:91:88:81:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0AACFC3BB071F78A10B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     40717
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:0a:ac:fc:3b:b0:71:f7:8a:10:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=1c4f26dc-8329-4e20-9b46-6bf773ef106e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:a0:c1:45:21:3c:2f:24:19:bc:a3:fe:ef:
                    cd:6f:66:01:46:a4:83:b8:d4:3f:c8:69:31:6a:30:
                    80:a9:f9:00:3a:3d:1d:42:2b:3d:35:80:50:7f:ed:
                    55:2e:cb:30:b7:e4:7c:c5:d2:ec:d7:3a:d9:13:59:
                    64:dd:62:3e:13:b8:cf:b6:d9:a0:e4:cc:10:26:b8:
                    cf:da:f1:dc:4f:dc:12:96:05:37:a1:29:f7:14:8e:
                    6a:eb:c4:a8:a8:36:dc:a0:80:32:00:4e:f3:96:c3:
                    18:d5:93:74:9f:63:e6:9c:75:e7:03:59:74:84:55:
                    ba:8a:d3:8e:d7:a0:28:24:89:b1:bb:3f:8a:2c:6f:
                    bf:2f:66:ce:10:7d:90:df:aa:72:e8:93:88:53:23:
                    5e:f7:53:96:51:94:23:09:a2:22:ae:69:ce:05:af:
                    a5:d1:0d:30:95:4b:bd:32:e7:e4:9f:85:f0:f8:b3:
                    c6:a0:76:99:f9:b6:ad:79:5f:d7:3f:f4:75:61:03:
                    1b:f0:fe:36:a2:db:14:a6:b1:c4:4b:f1:92:2a:9f:
                    73:c5:06:e8:85:b8:71:66:b1:95:e4:a2:3b:8c:f7:
                    9a:46:cf:dd:0d:b8:1c:93:8d:8d:43:e1:fa:6b:21:
                    fc:9f:a3:dc:86:aa:fc:2a:c4:b9:18:a3:9f:fc:fa:
                    6b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A0:B3:B4:E4:6B:31:58:32:85:F3:B2:B8:7F:36:01:91:88:81:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd7d11a3-79a0-3022-bbbf-0ac6dba9fb28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f3:63:c6:5a:44:3a:14:6d:e2:0b:dd:a6:9c:cd:ec:ae:b9:
         52:43:ee:aa:9c:22:b6:8d:72:4d:95:9f:25:cd:1d:e2:d4:1b:
         a1:6c:7a:d5:31:8b:6e:41:38:b1:f5:05:83:c0:b0:09:3e:a8:
         e9:06:36:a8:a0:5e:0c:fd:a8:54:88:19:1c:91:e0:17:d5:be:
         04:44:87:34:a6:e8:80:6b:49:3a:3a:8f:43:ba:ba:71:dc:06:
         3d:97:e1:53:82:7e:24:b1:10:4d:b1:9b:8b:fd:d9:2b:44:52:
         17:c3:7c:e4:f7:71:93:21:be:fa:0c:68:d9:0d:f3:55:e4:74:
         f2:e7:26:f5:2f:c1:56:e7:c9:fe:2d:91:b1:0a:37:4e:1a:31:
         78:fa:bb:f7:30:a4:83:18:24:c5:c5:2c:b7:8d:d2:b7:bd:06:
         62:7e:ea:0c:e4:c6:03:ae:63:ac:a4:03:88:e6:00:14:c9:86:
         f0:d9:e6:ca:74:1c:2b:59:31:b3:b5:5a:40:0f:b2:d4:18:92:
         6b:50:d6:8e:88:87:58:11:6a:33:28:ac:73:8a:7b:ef:c0:6b:
         3d:da:bb:79:06:c3:e6:56:3a:eb:8a:13:7f:e1:3b:57:43:01:
         cf:47:66:98:38:d9:a9:94:5d:90:4b:5f:c3:bb:30:ee:92:b0:
         00:d2:34:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:20:50 2025 by rpki-client