Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04fca5f-8ee0-3427-b56c-2094d28ded37.roa
File:                     f04fca5f-8ee0-3427-b56c-2094d28ded37.roa (raw, json)
Hash identifier:          E7S20nXhaOYOr8Wsj5VSYPVLxsW9qM0gXQZW40WNQQ8=
Subject key identifier:   26:4F:42:4B:43:31:DB:11:FD:3B:95:04:C3:BB:DB:C6:F2:0E:95:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F432858492183E11A4B2FC446C977F480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04fca5f-8ee0-3427-b56c-2094d28ded37.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     396608
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:e1:1a:4b:2f:c4:46:c9:77:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=7d398762-4210-4ce3-9e9e-7db90dba71b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1e:ff:2f:ab:62:21:c3:1f:68:31:74:5f:71:
                    99:7d:bc:3c:b8:bf:db:a4:e3:69:b0:40:eb:cf:8c:
                    6d:6b:c4:64:e9:9b:d2:df:0f:3f:c0:42:98:de:17:
                    95:c6:91:81:7b:d0:68:9f:7c:d1:2a:23:34:a6:d2:
                    bc:12:c0:46:a3:5f:ee:ca:5c:25:9d:7a:b3:05:6d:
                    29:2a:b6:a3:0b:4f:b6:06:21:1c:7b:97:d5:2f:27:
                    d1:70:b3:ee:53:e0:12:6d:3a:0c:0d:18:ed:a0:d6:
                    8f:2b:d3:84:6c:30:17:7a:2c:1a:f2:64:a9:cf:e1:
                    17:ac:d0:fe:cb:61:2d:c9:b2:0f:f2:0a:c9:07:0b:
                    1e:bf:2f:d8:44:c4:57:cb:25:4a:3f:bf:c0:99:bd:
                    4d:71:d2:67:3a:44:56:7e:55:fe:a6:9f:40:02:39:
                    06:9a:95:bf:1f:c0:e1:9d:d5:0b:91:b0:d1:ac:aa:
                    8b:d8:48:02:3b:a3:31:85:27:42:99:14:aa:ff:dd:
                    e9:1b:68:6e:ad:59:c5:1b:d9:69:b6:2a:6d:9d:52:
                    1c:4c:07:50:ac:46:bf:76:16:36:1b:e6:5c:46:5d:
                    dd:14:3e:89:7b:cd:27:d1:fb:c4:2b:dd:f4:7f:ae:
                    a2:1a:e2:b6:3e:f9:46:6e:0f:1d:ed:4f:fb:7e:8b:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4F:42:4B:43:31:DB:11:FD:3B:95:04:C3:BB:DB:C6:F2:0E:95:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f04fca5f-8ee0-3427-b56c-2094d28ded37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:f9:23:35:0b:e2:28:fa:d6:da:28:6a:e6:e6:6c:ed:34:70:
         f8:25:ba:06:f3:63:4a:1b:fc:5f:8a:36:f6:2b:26:e9:ed:d2:
         90:96:e4:14:ca:d5:b5:25:73:01:23:11:f0:ee:7b:36:74:72:
         f9:72:78:ee:21:c1:3c:56:d6:d8:dc:15:3d:05:f8:aa:f9:d5:
         e4:87:4a:bf:be:27:f0:ba:49:02:b0:16:ea:12:f0:5d:51:9a:
         57:41:0b:44:a9:58:df:1a:48:27:43:1b:b7:80:6d:05:46:f0:
         07:1b:24:d0:f8:dc:6b:d6:fa:73:0c:f6:69:95:b0:e8:60:31:
         8f:c9:57:98:72:b6:51:06:b7:f0:be:09:76:15:76:dd:98:8b:
         6e:39:40:c4:1f:54:f3:6e:6a:9b:0c:2c:51:f1:e8:c5:e3:5d:
         92:2b:5f:e7:0c:7a:9e:89:ca:7e:cf:c4:c1:7d:41:33:64:a4:
         63:d6:ab:af:50:27:a9:bf:25:30:76:0f:71:95:9c:e1:fc:cf:
         87:88:c9:d3:a8:4a:5b:e3:78:f9:46:8c:0b:6e:8a:ff:5f:4c:
         0b:5e:2e:5b:c7:8b:ac:f6:63:09:67:f5:6a:65:ff:42:2e:d7:
         d6:b0:c5:d5:8d:d4:6b:26:06:38:3b:12:8b:d6:ae:a7:22:9c:
         24:08:6e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:58:44 2025 by rpki-client