Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0072c733-5742-36f2-842a-a086272db9f8.roa
File:                     0072c733-5742-36f2-842a-a086272db9f8.roa (raw, json)
Hash identifier:          zxUgsCfJKQp+T2W3PJ6/DaNXTY1YJRvgPH89Dt1LNO4=
Subject key identifier:   A5:E6:83:73:E4:59:C4:EB:18:AD:51:C2:60:BB:5C:B7:B5:59:24:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C3669114AFA3FD7C50B69300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0072c733-5742-36f2-842a-a086272db9f8.roa
Signing time:             Tue 06 May 2025 12:43:07 +0000
ROA not before:           Tue 06 May 2025 12:43:07 +0000
ROA not after:            Mon 04 Aug 2025 12:43:07 +0000
asID:                     396597
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:91:14:af:a3:fd:7c:50:b6:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:07 2025 GMT
            Not After : Aug  4 12:43:07 2025 GMT
        Subject: CN=14a9a9c9-6175-48df-8023-c7d915c4e991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f2:16:49:d7:72:9c:25:b3:54:ce:94:5a:3b:
                    da:04:12:12:b4:6a:79:4b:20:15:97:c6:8c:b0:0d:
                    54:35:dc:fb:6d:53:12:7b:7e:0d:87:67:aa:73:6f:
                    42:6b:39:5a:1c:32:8a:4c:93:31:cd:f8:24:d1:a3:
                    2f:7d:b9:32:0b:cc:d3:c5:d7:a7:77:5b:cd:a4:b6:
                    2f:8f:07:1c:fb:20:23:0d:4f:e7:20:2d:e0:61:56:
                    c3:d8:d5:3e:53:92:4e:e6:37:cd:4d:da:32:f9:42:
                    69:ca:cc:db:85:c1:9e:a1:99:59:72:65:98:93:ba:
                    36:26:44:53:14:36:e4:f6:e8:70:2d:5c:64:60:29:
                    7f:c8:e1:9f:c1:04:b1:69:a4:ba:b1:95:95:88:f6:
                    b6:f3:79:2e:75:f2:d1:60:ae:67:2c:c7:7a:3a:6a:
                    31:c0:1c:0c:2f:3a:54:25:2d:db:16:75:62:d9:21:
                    2e:7e:70:77:a5:7c:db:98:58:8b:cc:64:e0:e5:10:
                    5e:ff:7f:4b:cc:60:4a:b2:77:f5:a7:aa:d2:ab:19:
                    64:29:7f:69:b5:e1:fd:20:43:67:4b:c2:0f:6c:3b:
                    57:65:3e:f6:bb:f4:89:c1:49:d2:b6:bf:f3:4f:a0:
                    76:59:01:dd:79:4e:25:62:31:05:d1:85:f0:22:d3:
                    ff:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E6:83:73:E4:59:C4:EB:18:AD:51:C2:60:BB:5C:B7:B5:59:24:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0072c733-5742-36f2-842a-a086272db9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:cb:c6:85:06:38:6e:5a:43:f0:ed:6e:ca:7c:34:b8:bd:ac:
         4d:6d:eb:47:3e:4c:d5:c8:bc:4c:32:73:20:7b:19:e9:c0:80:
         17:91:0a:01:d4:2e:d8:fe:fc:16:25:c5:9b:75:d7:78:e8:02:
         af:a8:9a:2c:9f:14:f8:97:74:95:89:1a:65:14:c0:3c:8f:80:
         32:5b:8e:9f:84:5c:24:32:7a:1c:50:d8:7f:c5:f7:10:08:50:
         0e:a0:fc:f7:73:20:9a:2c:d4:b3:1c:53:e6:c7:2d:75:76:e7:
         ce:13:bf:4c:da:e7:cd:46:44:ae:53:1d:80:90:66:19:14:0c:
         61:52:d4:91:46:cb:85:42:97:3e:e7:0d:14:76:95:73:51:9e:
         85:57:22:7e:9f:aa:94:5e:45:70:21:72:e5:78:74:b2:f2:9a:
         ea:21:a6:c5:df:36:cf:43:cb:5a:2c:4d:42:20:34:c6:b7:6b:
         92:74:2c:9f:c8:1c:27:0f:99:b6:59:b4:99:89:ae:ee:ff:e2:
         d7:1d:96:78:d5:f3:e6:e0:e9:c8:46:83:20:9e:b1:27:2d:a2:
         36:cd:29:ef:38:bc:eb:d5:2a:f4:4b:24:03:be:66:e7:c3:4d:
         c8:cb:2b:3d:de:a9:91:f9:45:0e:f9:4f:5e:52:7d:ec:ba:eb:
         6a:a9:29:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:27:23 2025 by rpki-client