Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eabaa379-d2f4-3516-bb66-ca7f1fe6ef62.roa
File:                     eabaa379-d2f4-3516-bb66-ca7f1fe6ef62.roa (raw, json)
Hash identifier:          W9m00kwIA1j8rnwVWMkFadau9JJwEZASOrAwTVA/uj8=
Subject key identifier:   49:B6:D6:D8:43:5F:3F:88:BB:9C:84:93:8E:FC:76:F6:7A:89:83:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858496FAEFDE715EC4518FF2DBC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eabaa379-d2f4-3516-bb66-ca7f1fe6ef62.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     396593
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:ae:fd:e7:15:ec:45:18:ff:2d:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=e9800d6d-8bf2-4aeb-adda-48324d38ab6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:d5:5d:86:09:8d:42:ae:a1:6e:d4:ef:37:
                    1c:0a:27:44:64:a4:92:ac:e3:aa:55:d9:bb:65:b9:
                    81:a6:56:11:59:ec:dd:d7:a9:b5:73:72:24:e2:9c:
                    42:d7:68:30:4b:1f:5e:99:4f:1f:12:7f:6e:78:bf:
                    c9:47:b7:be:5e:7a:59:1f:c3:7a:6b:21:03:31:05:
                    0d:0d:5c:a4:6c:ad:a1:f6:99:6d:5d:5c:39:46:15:
                    f1:7b:f1:96:35:56:f2:eb:6b:c6:33:b6:6a:cf:38:
                    2b:16:1d:fa:d0:20:7d:ad:80:27:b3:5b:78:58:ce:
                    01:07:cc:d9:81:55:41:84:bd:f4:56:a9:1b:76:a2:
                    a9:cc:be:8d:eb:8f:46:07:74:68:e9:62:b7:d4:9b:
                    3f:8b:21:a5:89:ec:65:42:84:e2:b8:3f:ab:fe:88:
                    ff:eb:10:4f:bd:38:12:ab:f0:84:e6:4f:e0:47:e3:
                    2b:34:d3:d0:c0:41:02:d9:69:4a:ea:81:49:57:dc:
                    a4:4c:a5:bd:75:fe:75:c5:21:4e:b2:4e:33:71:fd:
                    c0:e8:36:5b:d7:37:73:da:ca:2c:6d:06:75:ec:94:
                    cc:4e:a2:3f:36:72:3a:5f:b8:94:e8:c6:de:c5:68:
                    38:52:0e:85:3c:21:6a:a9:b3:63:35:a4:67:f3:a7:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B6:D6:D8:43:5F:3F:88:BB:9C:84:93:8E:FC:76:F6:7A:89:83:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eabaa379-d2f4-3516-bb66-ca7f1fe6ef62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:67:bb:07:0f:4a:90:22:b7:78:e0:69:e4:f6:f3:97:a0:f4:
         6f:6c:3a:a4:46:17:31:00:69:e5:24:e7:3f:26:10:cb:d7:f7:
         c1:09:31:b6:d7:fc:c8:c4:7e:e6:9e:c5:8e:b5:4f:78:1a:76:
         d6:54:fa:09:a2:22:65:d5:5e:79:76:ff:6c:44:2b:df:aa:12:
         24:a0:a4:f7:d3:9d:79:eb:f3:d8:7a:a2:7f:bf:87:13:f2:02:
         9b:e2:2b:06:85:7c:0e:6e:dc:eb:db:f1:bd:0c:74:21:96:d9:
         2b:c2:b6:ea:7a:ff:36:0c:46:b6:76:42:ec:ed:4d:88:04:92:
         37:49:b8:82:91:1c:c7:73:a2:e4:b6:16:10:6c:62:8c:9f:4f:
         89:8f:48:5d:aa:cb:4d:30:76:d2:19:5a:d2:3d:91:06:16:92:
         b4:f0:a7:2e:16:e0:df:e3:66:6a:59:03:7f:20:6f:d7:12:d1:
         24:8b:13:4f:81:4d:a7:30:3d:19:cb:3c:d2:b6:81:dc:f2:fc:
         c0:4c:b1:07:ce:7e:13:8b:cd:02:57:6d:c4:b1:9b:5d:fb:6e:
         5b:6f:89:a5:f2:56:ef:9b:e3:88:0d:1a:7b:3f:80:43:52:30:
         88:3a:36:13:83:49:ee:92:15:ea:3c:e8:a6:2b:dc:88:40:8d:
         ab:21:b2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:35 2025 by rpki-client