Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa
File:                     f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa (raw, json)
Hash identifier:          Q/oHQl6F6s2P5eDqsCM2dD796omI5kHQLoUKDXh2pSI=
Subject key identifier:   CE:27:62:76:01:EE:2F:49:51:B0:05:DE:36:15:6C:86:9C:DF:5B:B4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A18956429C03F4E34CE243E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     36631
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:64:29:c0:3f:4e:34:ce:24:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=4e257bac-7fde-49a0-8f7e-6d8e42981e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a2:62:3e:9b:55:54:11:1f:94:b8:66:14:c7:
                    42:bb:d1:c3:9d:33:b6:a5:c3:a7:d7:d5:1e:50:79:
                    34:bd:8e:cf:73:fd:b2:c5:e5:1d:10:9a:47:dd:d9:
                    c2:e3:2c:0f:59:b2:b5:6b:ce:08:ee:6f:50:00:2a:
                    8b:c8:9d:02:7e:93:60:79:1f:57:a6:aa:a9:e6:57:
                    5a:8e:6d:a4:66:04:f4:23:32:6b:f7:a1:33:b7:f2:
                    ee:80:f4:03:67:51:64:aa:fa:ed:ab:5e:b9:84:88:
                    1e:66:97:7e:6b:b4:fd:0a:eb:19:9a:97:c6:e6:86:
                    0c:55:3d:52:3f:d6:7d:79:59:97:4f:b2:4f:05:6e:
                    ae:b0:a0:e8:a0:79:fe:37:ca:83:06:2e:89:68:3a:
                    e7:6b:49:40:12:2a:c2:85:b3:d9:76:fc:f7:31:1f:
                    c1:a7:34:32:27:a1:27:0a:8a:31:db:dc:06:93:c6:
                    36:da:e7:d1:5e:f2:eb:03:3f:9f:34:9b:3f:01:9b:
                    4a:37:b4:d5:1b:7e:f2:c4:7c:d2:87:bf:70:6a:a8:
                    c1:e8:06:68:83:83:9c:be:99:a6:5e:26:16:43:8d:
                    2b:c2:d7:cb:a6:3f:2d:0b:d1:9c:9f:23:16:5c:8a:
                    60:5d:2e:44:57:36:5b:17:37:2f:31:fe:6d:a3:14:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:27:62:76:01:EE:2F:49:51:B0:05:DE:36:15:6C:86:9C:DF:5B:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04f8e16-3c50-39a2-a3b2-a5359feb88b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:7a:11:64:a0:a7:ef:e9:31:0a:55:e5:ba:35:19:17:d1:0c:
         ce:5f:52:e9:a7:2a:b6:71:af:1c:e1:4e:b2:d9:c9:82:9a:11:
         e1:48:7e:4b:2d:1e:eb:d3:a4:b0:0b:b8:2e:55:c5:62:9f:0c:
         58:42:46:61:f5:62:52:f5:8b:23:d5:a5:fd:bd:5f:f3:a7:8a:
         f5:82:f4:e8:d0:ac:c4:ef:2f:8f:56:86:d9:5e:ff:66:9e:95:
         62:0a:4e:4c:08:99:45:c3:ce:bf:24:3b:e1:5e:1c:14:c9:cc:
         78:78:a8:73:6a:47:ca:27:d3:e2:fa:55:c5:b2:10:00:b9:1f:
         ae:ae:39:b5:de:ee:97:5b:ea:50:da:9f:41:32:fc:73:53:33:
         8b:9c:d3:e2:49:20:3b:f6:08:f5:f8:28:d8:a8:01:57:fc:2d:
         83:0a:36:79:f6:35:5f:57:64:66:d5:ee:a5:4f:35:08:b1:f9:
         02:d0:5d:16:60:29:e4:77:d9:8c:d1:fd:4b:30:56:89:9b:57:
         56:00:8b:59:c6:fd:2f:4e:04:6e:06:2b:1f:f0:5c:50:40:8a:
         da:11:bc:be:6f:33:75:1b:b9:ac:02:03:02:60:e5:0d:17:dd:
         c7:eb:b2:b0:16:b3:09:7b:26:dd:00:36:58:0f:9c:4c:14:26:
         ac:54:d0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:51:01 2025 by rpki-client