Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cca95cbd-6ae2-310f-bae1-5ee24fb95075.roa
File:                     cca95cbd-6ae2-310f-bae1-5ee24fb95075.roa (raw, json)
Hash identifier:          FLgSoPdDeTeAoHtE0/ebogtK60DxZeXVy74+bVM2ysI=
Subject key identifier:   FA:A9:22:FE:2D:56:4E:84:6F:AE:E5:03:AC:F1:97:94:AB:AE:68:0B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858490CB15A3D69A9B8927BA80980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cca95cbd-6ae2-310f-bae1-5ee24fb95075.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     396590
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:5a:3d:69:a9:b8:92:7b:a8:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=875e0c80-eb2f-4a50-9d02-e02e22e19ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:ed:62:16:5b:75:92:af:c8:21:f1:f3:2c:
                    7a:6c:dd:d2:cf:cb:bb:7c:3d:fc:b4:36:14:43:50:
                    70:a6:fe:ba:d0:c1:27:e3:03:73:ca:53:4c:bf:05:
                    27:bb:ea:a3:d2:8e:ee:3a:a6:9f:6c:8a:f2:37:29:
                    08:e1:6e:64:ba:e3:c8:f0:21:fb:dc:da:48:82:a8:
                    a5:8f:d2:8e:76:50:04:55:25:22:57:23:2b:ea:23:
                    a6:e2:b1:bc:a7:28:9d:88:71:19:a0:02:5c:58:a8:
                    fb:be:75:00:3e:b5:44:28:0d:d6:81:94:68:0b:99:
                    74:31:78:ed:b5:6a:4a:52:b6:94:37:89:48:d4:7c:
                    0e:96:9b:ab:d4:c7:b4:2b:e3:31:ed:47:f3:65:c7:
                    53:cb:86:e0:f9:e8:7e:12:61:59:70:b5:f4:3b:7c:
                    af:ae:06:c5:d7:ba:3a:06:66:9c:47:61:79:18:6f:
                    92:dd:02:b3:e2:ae:e1:9b:b3:d5:c9:ec:11:a4:95:
                    e4:7e:ee:9c:1d:b5:37:1b:10:8a:f8:99:cc:c7:ab:
                    fc:ee:7f:06:a1:ed:69:1e:da:58:66:ed:55:27:5f:
                    90:48:fd:2f:53:2f:a3:de:68:7d:07:26:25:7b:24:
                    74:8b:12:67:51:ee:31:ae:8a:9c:c5:42:b6:50:66:
                    af:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A9:22:FE:2D:56:4E:84:6F:AE:E5:03:AC:F1:97:94:AB:AE:68:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cca95cbd-6ae2-310f-bae1-5ee24fb95075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2b:97:25:63:37:cf:57:39:b5:6c:ff:de:a0:bd:2c:5e:36:
         28:c3:77:88:85:98:11:07:5b:b2:49:25:93:f6:61:7d:7e:f1:
         af:8d:8b:0c:27:18:1a:0d:df:15:de:ff:74:04:df:f8:06:f9:
         98:96:f0:ff:84:4f:e1:6b:64:38:ad:73:b1:8f:e9:95:dc:e0:
         e2:20:34:b5:c1:bd:92:a7:cc:ad:3a:f8:5f:ca:ce:90:6b:1a:
         b6:d9:eb:23:82:81:83:44:ea:3a:a6:eb:de:62:65:bc:5d:45:
         06:b8:42:45:d2:f4:69:66:a7:e5:59:67:cb:f1:c0:a9:41:8d:
         3c:45:4e:ae:7d:ee:4b:aa:07:33:ec:8a:81:1b:90:57:85:d5:
         63:ad:78:06:5d:b7:f3:b5:9e:a1:08:79:98:75:d6:89:69:39:
         bd:2c:a1:fb:3e:73:c4:4b:1e:d9:ee:93:8d:99:29:05:3c:93:
         f0:5e:61:b5:fb:a5:0a:0a:56:5b:2a:df:b3:0d:91:11:ba:49:
         e5:a8:e5:26:25:12:47:0e:4a:eb:b6:12:1c:61:3d:7b:68:59:
         0d:4e:8e:73:37:c2:14:71:95:b3:d9:81:5f:a6:a4:e7:d5:19:
         e7:0c:e9:d4:07:d3:4c:27:5f:71:c8:df:f2:15:f0:68:0c:ed:
         1d:c5:f0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:59:10 2025 by rpki-client