Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa
File:                     ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa (raw, json)
Hash identifier:          lCgONMMbMEQ63NKmGY+lhTdV6pWvBUrGMxhpDdlxu3w=
Subject key identifier:   3D:69:72:E5:7E:BE:3D:93:81:71:10:EB:6C:9F:20:D3:7C:7E:53:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1726429A475B318F0F9D92B0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa
Signing time:             Thu 05 Jun 2025 12:41:27 +0000
ROA not before:           Thu 05 Jun 2025 12:41:27 +0000
ROA not after:            Wed 03 Sep 2025 12:41:27 +0000
asID:                     396576
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:42:9a:47:5b:31:8f:0f:9d:92:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:27 2025 GMT
            Not After : Sep  3 12:41:27 2025 GMT
        Subject: CN=e2d9cfbc-c213-4f8c-a8dd-78856766826e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c3:1d:85:df:98:f3:c5:f6:ae:80:29:8f:38:
                    97:fc:76:90:3b:e7:62:de:7a:89:d8:7c:5c:6d:a8:
                    3e:ef:f9:a4:1b:9d:8d:87:e8:09:f5:1a:da:18:d0:
                    3c:63:d4:0f:d3:7f:73:ff:c3:15:69:28:b4:fe:50:
                    d2:14:a3:71:1b:4f:1c:8e:b7:0e:34:df:13:8a:07:
                    cf:f8:a5:6c:0f:47:02:2a:1f:de:99:d2:94:fe:6e:
                    47:b3:e5:d3:ca:1f:08:f0:b2:07:2a:f3:8b:fd:a2:
                    8d:e3:49:e9:ea:fb:c9:54:c2:6f:07:76:82:fa:b1:
                    06:1f:ba:98:6b:b3:0e:af:fe:58:da:d4:b9:1d:68:
                    90:3a:78:ef:be:4d:0d:de:64:dd:fd:b4:f0:d6:65:
                    30:78:c0:04:71:3d:b1:ec:df:34:bd:ef:88:ea:0d:
                    ab:5e:bb:a2:c3:7f:79:0e:05:e2:c3:b6:3e:55:8a:
                    d8:b5:15:f8:fc:0a:fe:5e:94:6a:67:fa:84:f5:f8:
                    a2:d7:8e:1d:f0:6a:79:ae:23:ed:8b:9d:a2:e7:6f:
                    5b:71:57:26:5b:cd:66:cf:ab:dd:5b:78:28:fe:d4:
                    de:dc:79:3e:52:39:be:13:8c:35:2d:3c:6b:8c:c4:
                    6d:9b:12:b4:41:ce:10:73:aa:a4:76:cd:b3:1f:d8:
                    89:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:69:72:E5:7E:BE:3D:93:81:71:10:EB:6C:9F:20:D3:7C:7E:53:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec944fdd-3352-3009-99b8-e2c7ec10cae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:02:5c:22:1d:af:9e:fe:a2:7a:b3:51:f5:e1:ba:5c:84:9f:
         33:a5:c6:98:d4:bb:7b:9f:c7:74:43:18:87:fe:d5:9b:e8:19:
         b6:8a:d0:19:83:c5:ba:61:93:d3:d6:34:ea:e6:5a:fa:44:b0:
         62:c2:d3:c9:6e:0b:78:65:a3:aa:eb:e5:ae:b6:b6:2b:27:bc:
         e9:2e:5d:bd:b0:9f:30:c0:09:6c:b8:d5:b6:ac:47:62:54:12:
         18:66:62:f2:1f:d8:35:3d:86:70:18:28:58:fd:68:49:fc:4b:
         ba:7e:5c:3b:d7:e5:c5:a8:ac:86:60:ad:02:b2:60:54:17:2c:
         2e:e8:d3:87:41:37:da:7e:2a:86:fd:ca:09:ab:48:6e:df:ae:
         7c:bd:c3:03:cd:4a:88:f6:16:f5:2b:a6:9f:4f:49:65:5a:09:
         f2:8a:58:9b:fd:8e:91:27:9a:f9:fa:fb:4f:91:f9:2c:68:01:
         b4:63:e0:c0:f9:d5:d5:bf:af:cc:56:ca:fb:dc:3b:01:86:a7:
         a1:9c:31:22:34:ce:b1:bb:51:cd:9f:9f:aa:78:60:9f:9b:5a:
         64:41:e9:fb:07:1c:2c:b3:27:3d:49:b5:04:9c:81:1d:7f:07:
         ab:91:a0:98:36:f0:11:c3:e1:e3:c0:cc:37:aa:f9:e2:5b:e5:
         cd:5f:84:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:31:41 2025 by rpki-client