Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fca9c37b-51a2-3c95-aad4-12a167391e41.roa
File:                     fca9c37b-51a2-3c95-aad4-12a167391e41.roa (raw, json)
Hash identifier:          TFS5RmdTGhdRQSL37OkYZj5rHh4jGMDGanGDHBhzOqM=
Subject key identifier:   4C:BB:EF:69:0F:86:1C:56:2F:C1:CA:26:90:8C:7B:94:70:53:64:F9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD5FADC614A98681CB8C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fca9c37b-51a2-3c95-aad4-12a167391e41.roa
Signing time:             Tue 01 Jul 2025 13:48:36 +0000
ROA not before:           Tue 01 Jul 2025 13:48:36 +0000
ROA not after:            Mon 29 Sep 2025 13:48:36 +0000
asID:                     396572
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:5f:ad:c6:14:a9:86:81:cb:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:36 2025 GMT
            Not After : Sep 29 13:48:36 2025 GMT
        Subject: CN=09c8b63a-05ef-4bc0-af9f-79acf7e1fc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:16:60:4e:b2:fc:d8:90:0b:03:cc:03:9c:
                    e3:f2:0f:3a:4a:44:84:5c:7e:1c:29:c3:1b:3a:f0:
                    8a:71:93:4b:bd:72:61:47:44:35:e8:4c:3c:c9:f5:
                    53:34:1b:69:ce:85:eb:a7:80:28:ea:a8:fb:d8:5b:
                    42:3d:99:59:ac:34:81:2b:9c:a3:f2:a3:9d:6d:f3:
                    d3:a7:61:87:0e:c7:c5:36:39:33:48:89:3b:ad:62:
                    29:e6:db:5d:ac:ac:e6:31:01:ff:ac:0d:4f:58:26:
                    ca:f7:21:09:38:f2:a7:d1:cc:bd:a6:f3:d5:a2:0c:
                    85:d1:7c:35:a9:70:63:c5:31:ab:4e:91:05:0e:57:
                    c5:68:ab:9e:22:2d:df:52:da:ca:99:71:e2:9a:5d:
                    18:9e:56:2e:a7:00:4e:78:06:55:15:af:39:7a:35:
                    8f:39:bb:94:4a:58:68:7d:14:e2:40:6b:aa:9f:7c:
                    92:6e:a3:e9:58:7f:1b:0a:2b:cd:d5:32:d1:94:a4:
                    23:f6:88:9e:a6:a1:3e:de:dd:53:13:7a:df:7d:a4:
                    84:3c:1c:db:a8:1c:f8:34:d5:44:8a:16:b1:70:ea:
                    0a:56:a5:8a:b6:1e:30:31:db:b6:d4:6d:cc:04:27:
                    e7:93:33:91:ef:49:b5:cd:ea:62:5f:41:42:05:20:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BB:EF:69:0F:86:1C:56:2F:C1:CA:26:90:8C:7B:94:70:53:64:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fca9c37b-51a2-3c95-aad4-12a167391e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:12:6f:67:bb:fa:e4:38:15:09:4e:eb:4b:31:95:d5:84:5b:
         d1:ea:46:18:48:0e:77:32:05:5a:60:7c:19:4b:e6:81:f8:da:
         1f:f5:4b:68:2f:b6:5f:00:62:30:e9:b0:af:ad:79:70:08:01:
         c3:a9:d6:1c:fb:22:b4:65:d8:4a:62:75:0b:45:91:93:75:28:
         b4:42:b7:79:20:1a:4e:d3:11:e4:95:0a:bb:6f:54:a7:c7:a4:
         1b:59:3a:5f:fc:cf:e4:38:71:92:7b:42:6b:0a:15:b8:22:a5:
         b7:b4:55:06:3b:b4:03:49:a8:47:ee:91:30:b6:81:74:22:8d:
         6a:f0:28:12:43:95:83:b5:59:4b:73:8b:dc:d8:dd:d0:fe:9f:
         b2:24:c8:31:7f:29:a3:46:19:12:01:e9:34:2c:ec:b3:c8:ab:
         8d:0d:ff:9e:b5:0b:75:8e:9d:f4:34:9d:20:41:d2:60:87:0a:
         7b:fa:83:22:f4:3a:1d:38:9c:1f:8f:06:96:0a:c1:93:b1:b9:
         80:91:5d:76:49:8b:41:8f:d8:58:22:f2:7e:05:3c:b9:b0:96:
         4b:3a:d7:e4:2d:63:d3:cc:28:31:67:0e:27:64:29:e8:6a:85:
         76:cc:59:b1:b7:84:bc:a5:f7:9a:54:9a:b9:ae:58:6f:b9:f6:
         6d:7f:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 04:30:58 2025 by rpki-client