Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1554525-6cad-3231-b961-1ed88f555aec.roa
File:                     c1554525-6cad-3231-b961-1ed88f555aec.roa (raw, json)
Hash identifier:          0Z780yT+JiAIIJW0JA+l4/jzos+g1hOHin0sVISk7tI=
Subject key identifier:   86:FE:02:48:3E:31:C9:5A:9F:4F:1C:73:F8:BE:E2:E3:C0:91:23:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD615A0C5AE7F64B7C0F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1554525-6cad-3231-b961-1ed88f555aec.roa
Signing time:             Tue 01 Jul 2025 13:48:37 +0000
ROA not before:           Tue 01 Jul 2025 13:48:37 +0000
ROA not after:            Mon 29 Sep 2025 13:48:37 +0000
asID:                     396563
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:61:5a:0c:5a:e7:f6:4b:7c:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:37 2025 GMT
            Not After : Sep 29 13:48:37 2025 GMT
        Subject: CN=c6e02cb6-5721-4388-887e-5f0da7805658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:cc:64:fe:12:01:72:25:49:b0:fb:82:04:
                    66:aa:fe:31:08:38:8e:72:17:eb:0f:58:0a:b1:ef:
                    5f:74:0f:12:63:0d:8c:dd:05:f8:e0:bd:86:b3:28:
                    85:89:40:8f:3e:84:ca:42:ad:79:cd:1f:4a:e5:6d:
                    b6:c8:e4:60:57:84:18:58:42:c9:3a:fc:d7:e5:05:
                    52:d9:bb:c1:23:a7:f2:e6:45:39:9e:9d:c7:33:ff:
                    4d:16:aa:51:41:67:49:22:3a:b4:45:20:3a:34:7a:
                    ba:06:fb:96:4f:3d:1b:42:e1:84:3b:69:df:17:65:
                    3f:80:16:46:71:1d:5e:0e:9e:60:c9:5b:5f:db:c9:
                    a4:cb:9f:81:5c:4e:6c:a7:ce:20:a3:a3:7b:65:0f:
                    87:1e:cf:0f:2a:40:02:17:f8:bb:94:72:9b:d2:cc:
                    0c:cf:28:90:9d:97:1c:f4:c3:c4:32:f0:68:99:bc:
                    9f:51:1d:ff:80:c0:c8:60:42:05:dd:8c:71:39:3e:
                    1f:8f:80:94:38:4e:5e:b0:ad:27:b0:3e:5d:1c:12:
                    27:9e:0f:aa:14:51:a8:c4:f8:ba:cc:a1:6d:87:61:
                    3d:52:a0:f2:91:e5:af:61:6d:1b:1b:52:17:46:b5:
                    62:9e:80:cb:c8:a2:19:55:84:8a:b7:35:44:2e:c9:
                    71:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FE:02:48:3E:31:C9:5A:9F:4F:1C:73:F8:BE:E2:E3:C0:91:23:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1554525-6cad-3231-b961-1ed88f555aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:6f:07:ab:e2:71:25:e1:7e:01:d9:16:12:fe:e9:94:37:c5:
         71:f5:8f:4f:a1:b8:72:0c:a6:e1:cb:0f:bc:c1:aa:38:ae:a7:
         35:3f:0b:80:f3:48:8a:12:62:4a:9f:48:80:88:b0:6f:20:a2:
         3a:e4:50:67:73:c7:46:17:9d:86:ef:71:f4:a7:99:73:00:4c:
         58:f0:6b:0f:50:37:20:cb:f0:02:ea:17:d0:3c:38:f7:ff:1d:
         10:ed:14:65:23:6a:21:82:19:63:26:02:86:a5:aa:40:3e:71:
         11:9d:72:af:cd:3f:5f:b2:b1:7b:f1:54:31:94:8d:a4:39:95:
         d1:a7:2b:21:70:4d:bd:29:d8:71:06:7a:c6:b4:f9:08:68:49:
         06:6d:23:db:f0:40:de:a9:57:29:fc:f1:4a:fa:51:c2:f3:cb:
         79:a0:7a:08:15:d4:1f:20:46:87:42:ab:da:8d:df:1b:52:f9:
         a0:3f:84:70:35:bb:6d:a5:9e:0f:b4:13:31:88:39:f3:e1:cb:
         13:df:5b:87:1c:49:a9:3a:d1:7a:73:bb:ed:89:d8:da:d3:fc:
         2e:d8:8a:11:9e:69:5f:a3:bd:fe:df:c7:65:a8:e2:2d:48:79:
         a8:a8:82:30:12:58:7f:48:da:35:58:2a:ed:cb:0a:0a:ec:82:
         f9:2a:5b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 12:53:47 2025 by rpki-client