Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f61dceaf-baeb-3178-952c-936a27a354ed.roa
File:                     f61dceaf-baeb-3178-952c-936a27a354ed.roa (raw, json)
Hash identifier:          MAzZiCaG4xLpT6WUZcFUSpwt3sFViCILqiEhEXMTFYs=
Subject key identifier:   42:20:70:2F:01:A1:B3:ED:6E:06:48:58:D8:04:47:F2:64:FE:58:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584929E3D3B52031710258BEAD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f61dceaf-baeb-3178-952c-936a27a354ed.roa
Signing time:             Wed 12 Mar 2025 13:00:53 +0000
ROA not before:           Wed 12 Mar 2025 13:00:53 +0000
ROA not after:            Tue 10 Jun 2025 13:00:53 +0000
asID:                     396577
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:e3:d3:b5:20:31:71:02:58:be:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 12 13:00:53 2025 GMT
            Not After : Jun 10 13:00:53 2025 GMT
        Subject: CN=e6918c35-b59a-4f8a-adfd-7b7a889948b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:d5:ed:6e:26:61:53:0d:a1:3a:f7:a4:67:
                    c2:f1:4e:30:9e:15:22:80:a8:5a:b3:3d:d3:47:dc:
                    92:c2:86:d0:83:0e:c3:a3:aa:de:ee:0e:8e:b7:71:
                    ec:5a:ad:00:ea:4e:2f:46:f5:b9:6e:e6:b6:45:19:
                    cb:aa:63:49:59:5c:91:84:85:93:cf:60:a1:ee:6c:
                    a0:ed:a5:58:f7:32:1a:5d:49:91:9f:ba:11:1c:6d:
                    86:ee:e8:b3:27:bb:90:c7:7f:64:90:0f:db:f8:73:
                    e3:59:a3:35:78:93:4e:ac:ec:7b:a9:c5:f5:95:fe:
                    38:24:5a:e8:b2:b7:02:95:8c:db:0c:6f:e4:6f:85:
                    3c:a7:0b:dd:00:24:b2:d2:f8:3b:2a:43:7b:84:2e:
                    0d:03:04:54:de:65:be:fb:31:54:8a:cb:99:3e:61:
                    68:40:6e:98:7e:91:23:8a:cd:45:1f:38:c1:29:50:
                    3a:2f:2b:20:46:f3:7e:64:c6:76:90:0e:6e:60:5e:
                    03:d7:4b:0c:e8:53:54:06:9a:b4:c2:5c:b2:16:53:
                    26:f2:e7:ee:62:ca:39:cf:5a:09:5a:5f:a3:a4:47:
                    f1:8d:80:97:5d:2d:44:33:10:15:98:f0:74:67:6d:
                    f4:eb:80:42:15:71:ca:93:0f:80:f2:15:9d:86:ca:
                    8c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:20:70:2F:01:A1:B3:ED:6E:06:48:58:D8:04:47:F2:64:FE:58:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f61dceaf-baeb-3178-952c-936a27a354ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:cd:14:8b:5c:2d:70:ac:a3:ab:1f:d8:4f:37:ba:8c:48:13:
         44:c7:ab:f1:6c:3f:6a:fe:18:50:e4:cd:2f:4b:00:85:88:3e:
         00:c2:24:e3:e5:c2:24:7d:e6:d5:34:1b:85:96:92:cf:be:c7:
         9d:b9:7a:75:c7:5d:ff:a5:13:db:c1:97:02:e3:da:a2:fb:9d:
         95:dc:f4:8d:8e:eb:34:83:ee:5f:4d:8e:f5:d8:32:99:bc:e7:
         1a:2c:82:8c:ba:d5:e0:d3:bf:fe:b2:71:a2:72:50:61:e2:3b:
         5a:74:b0:b2:55:9c:c4:49:f9:49:16:64:12:b9:37:b6:62:d6:
         a0:c7:ea:30:17:f7:2e:aa:3f:4c:3a:fa:93:78:c1:9a:4d:4c:
         0e:50:da:62:17:bd:8e:e4:2e:fb:1d:b3:73:0c:26:8c:ac:a4:
         bc:71:1e:c1:39:62:b1:dc:0e:ba:2c:14:24:1c:20:18:3e:2e:
         0c:82:06:98:ba:d6:74:c7:d8:81:13:fa:62:5e:59:fb:53:f0:
         bc:dd:59:de:8d:45:d8:2f:a7:b0:0a:83:82:f0:a2:74:61:a1:
         a9:97:f9:bd:2a:5d:f4:37:25:03:ad:6c:4f:57:5c:fd:16:5a:
         80:ab:db:8b:6a:47:fc:76:42:01:ed:cb:b7:8c:48:e5:5f:18:
         5c:32:fd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:22:24 2025 by rpki-client