Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1662ecb-d323-304d-82e6-0bc4c082d5d6.roa
File:                     c1662ecb-d323-304d-82e6-0bc4c082d5d6.roa (raw, json)
Hash identifier:          LaprohbvIy8DFarLqc5zR3PMnY5hhBa8k08o2/ZYleI=
Subject key identifier:   92:39:88:29:AB:AA:7A:40:A5:21:B1:D8:38:C4:08:AE:81:4B:87:92
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849F7153EBC08114F4D57381F70
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1662ecb-d323-304d-82e6-0bc4c082d5d6.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     396614
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:3e:bc:08:11:4f:4d:57:38:1f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=fee1b8ed-6b71-4da3-95dc-693d369fb7bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:48:d6:7a:c4:35:51:38:94:65:97:9c:50:2d:
                    24:de:87:2e:4e:02:3a:24:2f:bc:fb:54:5b:23:68:
                    e5:a5:73:ed:1d:ad:b6:41:4d:9f:82:87:3e:46:19:
                    3c:e2:ad:24:d1:15:ea:0e:8d:de:84:cc:fa:62:68:
                    fb:c8:ef:55:46:49:a8:4b:31:2c:09:e1:1e:0f:4e:
                    8e:07:90:8a:2d:18:f8:14:c6:44:1e:c8:96:94:09:
                    fb:6c:fa:d5:cd:e9:68:86:ed:c6:7e:d5:e0:73:0c:
                    18:c8:e4:b4:9e:cc:32:66:6d:e5:2a:bf:f6:00:37:
                    7f:61:60:9e:f0:68:35:87:05:31:9d:4c:9b:7d:c0:
                    84:a8:bd:3b:87:26:aa:3f:42:bf:4f:35:99:ef:be:
                    ef:f8:14:36:0a:10:5a:17:7f:be:81:ef:45:1d:48:
                    bf:04:a4:00:be:68:8c:7a:12:4b:57:9a:6a:f6:cc:
                    86:e6:97:75:c6:7e:78:af:66:66:1c:ce:32:d0:10:
                    72:e3:f5:aa:08:58:02:fb:eb:42:f1:d7:7c:52:8e:
                    4e:0c:6c:5d:54:0c:68:8f:6b:d7:63:14:d7:4a:38:
                    3a:08:bc:8a:31:14:77:a3:cd:e9:da:1e:1c:dc:c3:
                    f5:25:96:95:49:36:54:87:1c:c9:1c:45:6f:25:06:
                    7d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:39:88:29:AB:AA:7A:40:A5:21:B1:D8:38:C4:08:AE:81:4B:87:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1662ecb-d323-304d-82e6-0bc4c082d5d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b8:d8:05:90:6d:79:3e:f4:db:5b:f8:6f:5b:d0:2a:0c:7d:
         b5:a3:43:bc:d0:31:87:2c:54:f8:a3:e1:f4:a1:31:1f:e7:c3:
         81:d1:69:45:e7:55:30:e6:a2:30:80:2c:35:c7:61:2d:96:cf:
         4e:b8:4f:32:f6:2d:ba:82:99:37:eb:d7:50:52:43:f3:75:49:
         71:a7:04:d6:05:96:f2:92:b6:21:b4:b9:6b:f9:27:bf:c6:29:
         59:d5:0a:a0:44:5f:c2:1e:87:ef:64:6d:d8:fb:8e:89:dd:75:
         ee:39:32:26:1c:b7:95:62:1d:c5:aa:37:c3:73:5b:6c:d8:28:
         08:d8:69:e1:65:b8:bf:0d:32:8e:83:0e:2b:a5:2b:ab:63:82:
         e7:e6:40:19:45:dc:0a:89:78:7c:6b:77:5b:e0:69:d2:d3:40:
         31:5e:6b:f9:a8:c5:a9:e5:13:c6:04:1d:10:19:c1:33:22:bc:
         21:15:d2:56:1e:24:57:73:c7:a6:78:e1:bc:89:d2:8a:58:65:
         fb:e3:ee:c9:d4:d0:74:99:52:e2:24:29:5a:3c:b0:3d:0b:6f:
         e0:7e:6b:06:a6:b7:d1:8d:98:84:e1:34:78:6e:4f:74:bf:7b:
         80:ca:0a:80:5e:38:b1:c7:96:38:4c:82:74:46:5c:f1:16:32:
         ff:0f:a4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:39:59 2025 by rpki-client