Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3c42c18-2020-316b-90db-02ef0fa7fed1.roa
File:                     e3c42c18-2020-316b-90db-02ef0fa7fed1.roa (raw, json)
Hash identifier:          Wyd04Yedrkdxg1I3dGYAJ7SHNCcn1Z55F8Jb2L5jWBY=
Subject key identifier:   0B:5C:81:6A:43:CC:3C:0E:04:E0:5F:22:33:D0:0A:DC:DA:C1:AD:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AA830977FCF617C236100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3c42c18-2020-316b-90db-02ef0fa7fed1.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     36628
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:a8:30:97:7f:cf:61:7c:23:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=4fa1c74d-c713-42d1-a632-fe21f695013b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:81:be:94:ac:1c:e9:e8:55:ee:58:54:05:
                    7d:44:15:10:3e:2d:a2:a3:c3:05:3c:64:00:c3:73:
                    75:2a:24:0b:77:f2:73:5e:f0:18:14:f4:43:08:61:
                    c0:34:3d:92:1a:9c:50:11:23:42:35:6e:04:e6:25:
                    74:76:12:42:38:29:91:aa:5d:27:3b:17:60:76:b6:
                    92:41:85:91:cf:d4:c2:1d:1c:ab:2f:c9:25:bd:3e:
                    d4:87:9b:55:2a:13:84:aa:7a:13:b4:12:9f:98:fa:
                    93:87:d3:a8:74:27:bf:27:21:32:54:25:4f:af:b7:
                    15:8d:d5:e1:9c:5f:e8:3c:47:ed:f9:be:5f:a5:9e:
                    cd:5c:97:ac:15:e1:c4:73:2e:a7:35:9c:fd:76:d4:
                    45:1b:fa:6b:84:37:fa:c6:11:25:1f:b2:5f:a6:5e:
                    f1:fb:7b:43:6b:72:ed:e0:0b:28:d2:92:82:d4:cc:
                    b4:d8:b8:d5:e5:9c:b7:75:b9:be:61:01:3a:c9:7d:
                    79:c4:ec:e5:aa:3a:3a:43:a6:cb:4d:ae:d3:55:fe:
                    1a:9a:58:4e:92:1f:67:6c:be:61:2b:b9:6e:3c:d3:
                    44:0c:6d:20:12:14:c8:f9:43:b8:30:20:c6:c2:f3:
                    89:42:95:ed:da:35:59:09:72:00:80:21:4f:05:92:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5C:81:6A:43:CC:3C:0E:04:E0:5F:22:33:D0:0A:DC:DA:C1:AD:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3c42c18-2020-316b-90db-02ef0fa7fed1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:26:71:57:47:d9:19:69:18:28:90:3d:b8:33:d6:00:9a:ad:
         13:5a:2f:cd:4f:7b:8f:48:3b:58:4e:87:4f:30:f6:a3:9b:2e:
         b8:41:45:c1:ce:57:ef:d0:fc:e1:45:87:22:54:85:5e:46:ef:
         b8:63:72:60:74:7c:d4:dd:c3:47:3e:87:4d:bc:34:3b:f1:7b:
         8a:b9:11:a1:c9:c6:24:ed:a1:92:03:37:bc:55:e9:45:e1:41:
         d2:7c:80:81:8f:91:2b:80:31:e8:5a:21:d0:5f:9f:f5:ab:0a:
         93:56:79:fc:92:3a:3d:11:0d:01:d5:bd:3e:c1:fa:d5:72:60:
         d9:32:b2:c9:ff:61:af:e8:1c:4f:84:8a:22:bf:f9:5c:de:29:
         1c:ce:f5:a9:b6:53:36:cd:3d:1f:15:6a:92:7b:09:0e:88:ca:
         fa:75:ed:54:c7:20:8d:12:6b:6d:d9:5a:0c:13:5b:14:cd:5d:
         f1:20:5e:71:e5:db:fc:4b:c8:ce:8a:8a:ea:0e:3e:37:9b:64:
         cd:55:90:e1:da:6a:57:d2:14:e2:5b:aa:53:05:6e:0a:82:64:
         76:40:24:30:cb:fa:f8:dc:98:49:70:b0:b6:3c:25:63:18:83:
         aa:ba:12:94:68:9e:9a:c3:34:bc:83:c1:14:48:1c:ae:a7:43:
         89:ae:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:48 2025 by rpki-client