Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efc1b563-a90e-304a-9c3f-42dd8ba403eb.roa
File:                     efc1b563-a90e-304a-9c3f-42dd8ba403eb.roa (raw, json)
Hash identifier:          e6abJ2Wf2lGWP8IDR64g2cqHVq9js8W6KVcMCCcnoxQ=
Subject key identifier:   1E:A2:0E:AB:90:25:F5:46:C4:D0:B6:74:04:E2:0E:1B:8B:F9:40:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849403982593CDB5D9EDF1F9180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efc1b563-a90e-304a-9c3f-42dd8ba403eb.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     396569
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:82:59:3c:db:5d:9e:df:1f:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=1528b178-5f5b-435b-bab6-33a1c03103f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:7b:bd:23:f8:fb:f8:57:0a:8c:d0:75:12:
                    76:41:c2:15:b9:f7:58:45:c4:c0:b1:05:19:bf:33:
                    2d:08:d4:d3:40:7e:41:14:57:bc:18:7f:7c:06:f2:
                    55:99:bb:c0:84:aa:ec:40:16:23:42:0a:6e:b9:4d:
                    31:77:a4:b8:a9:2d:a7:29:1d:86:92:5f:2b:bc:dc:
                    14:e9:4a:50:12:0a:70:c2:dd:b1:22:5d:34:9c:da:
                    b8:a1:21:34:2a:04:46:a2:43:1d:41:5d:53:78:49:
                    d4:3f:c6:83:ad:d2:34:81:f6:c2:42:e6:fe:36:e1:
                    ab:0b:a2:87:db:37:9a:c7:e5:de:71:71:b3:95:9f:
                    86:f1:d3:6c:25:c2:30:e5:23:11:5b:b9:31:5c:73:
                    59:e5:e3:56:af:6f:33:04:0f:57:dc:1f:9c:39:a4:
                    5f:a4:85:7b:f3:41:ec:9f:90:35:49:58:ea:56:d7:
                    19:1c:81:ac:b6:13:36:e8:00:60:13:ff:3e:d5:0b:
                    55:37:13:fd:e5:f6:c9:d5:15:7a:60:69:bc:c3:f3:
                    f0:6a:8e:2c:51:0a:c1:a5:71:b1:c9:2a:7e:b2:52:
                    7a:6f:93:b5:73:00:27:3b:47:8f:cc:5a:c6:a8:31:
                    5e:28:d9:7e:c2:6f:21:ef:17:7c:25:41:8d:37:89:
                    f7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A2:0E:AB:90:25:F5:46:C4:D0:B6:74:04:E2:0E:1B:8B:F9:40:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efc1b563-a90e-304a-9c3f-42dd8ba403eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fb:8d:5d:cb:5c:68:5f:65:97:17:42:d6:e9:27:7c:ea:dd:
         ec:b1:62:e7:8c:0e:8c:83:e5:38:c1:b5:6a:26:b6:10:e6:cd:
         cf:2c:6b:f8:91:05:2f:f7:4d:a8:6a:8a:67:e0:fd:25:4e:7a:
         ff:78:3f:fc:81:ed:15:c4:29:65:87:0d:d7:c4:2d:94:17:d4:
         0b:88:ee:fe:b2:81:4b:49:4f:9f:d0:eb:46:8a:29:1c:53:9e:
         fe:af:24:61:5f:34:64:b2:1d:b5:60:c3:7d:51:cb:1b:d9:cf:
         ec:ba:38:44:68:16:6c:d4:eb:17:93:36:2f:23:ed:ac:ae:f7:
         41:15:6c:06:8d:e4:7a:9c:3a:25:dd:6e:51:3a:93:fa:ad:1b:
         0e:70:26:01:f1:4b:db:2b:fd:5d:1a:74:b5:15:c8:8e:45:8d:
         79:72:49:85:3a:13:07:db:42:c3:4b:ad:4e:92:0b:80:95:c0:
         1b:dd:8b:3b:ad:01:41:28:2a:bf:4d:7c:8a:ea:b9:71:c3:60:
         9b:46:5b:e1:cc:c6:ec:ae:06:d1:59:4a:e4:fd:f3:18:9d:af:
         4d:9b:52:2c:a2:b7:ad:08:70:73:c9:7d:19:e8:ce:d9:a9:bc:
         2e:fb:2b:cd:d2:8a:28:32:79:39:fd:d7:01:0e:85:31:30:f8:
         5d:50:69:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:43:54 2025 by rpki-client