Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03921380-683a-39cd-af49-7de2f2d9a773.roa
File:                     03921380-683a-39cd-af49-7de2f2d9a773.roa (raw, json)
Hash identifier:          7qEMlKsolemfhihFedsyaO3PhXQPql5XX3DHnsX4a5c=
Subject key identifier:   49:E3:56:CC:0C:27:62:F7:71:44:A3:70:AF:CD:22:13:30:79:7C:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A3B6F9F43A50E2D2C58C27240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03921380-683a-39cd-af49-7de2f2d9a773.roa
Signing time:             Wed 18 Jun 2025 12:38:22 +0000
ROA not before:           Wed 18 Jun 2025 12:38:22 +0000
ROA not after:            Tue 16 Sep 2025 12:38:22 +0000
asID:                     32651
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:6f:9f:43:a5:0e:2d:2c:58:c2:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 18 12:38:22 2025 GMT
            Not After : Sep 16 12:38:22 2025 GMT
        Subject: CN=072b451f-f367-4d7e-9607-1ef1c9f6a529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:ec:5c:29:06:18:b5:d5:4a:aa:b7:b3:1f:
                    79:c6:bf:5f:2d:7a:6a:ab:da:b3:74:a9:3c:0b:c5:
                    9e:2d:fa:ab:6d:c7:aa:00:79:96:d1:f3:06:72:af:
                    26:84:d5:d9:24:e5:32:8e:81:51:e5:f3:64:7b:25:
                    5b:9d:67:5d:72:fa:a6:83:d3:ef:77:47:c9:61:d6:
                    57:93:0d:fc:ce:63:4e:d2:ca:96:5b:10:97:be:39:
                    17:a3:97:c1:99:9f:e2:1f:26:20:ff:1a:9e:8a:97:
                    76:88:df:28:95:66:fe:db:ac:37:82:60:36:96:2e:
                    f5:a9:12:e2:dd:52:38:95:4c:5e:04:67:68:6d:03:
                    6f:2c:65:a9:1d:7a:6a:a5:6e:1b:88:8a:53:bd:68:
                    91:87:d7:f9:f9:f7:93:27:71:8a:7d:d2:30:dc:fd:
                    67:40:df:21:3f:d8:14:e8:fe:36:9b:7d:d6:07:fd:
                    44:96:af:8d:4b:1c:54:4e:86:0e:00:ad:32:7d:ae:
                    86:a8:16:be:53:3d:b2:51:d1:0c:c5:59:7c:d9:dc:
                    6d:d8:28:6e:21:c3:fa:a8:21:10:77:40:b0:1d:9c:
                    5e:a7:86:4d:d2:a8:57:7f:f3:65:b3:38:77:8a:ab:
                    63:af:30:b6:10:b4:a0:7f:ea:77:e0:a9:57:c2:81:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E3:56:CC:0C:27:62:F7:71:44:A3:70:AF:CD:22:13:30:79:7C:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03921380-683a-39cd-af49-7de2f2d9a773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:43:fd:4c:e6:f4:14:46:39:6f:99:b2:44:d1:91:ca:25:1d:
         ce:4d:93:3c:f3:3a:89:14:e6:4d:a8:b9:10:80:62:fa:6a:a7:
         b1:e6:f1:9b:d8:2e:a8:6c:53:2c:3e:85:9f:24:e3:8d:3e:14:
         be:fc:7d:fb:a7:34:22:78:8c:f3:b1:27:3b:a1:c4:79:29:7e:
         ab:f7:e5:6b:58:80:53:ad:54:82:39:47:57:da:96:32:8d:33:
         f8:08:c9:8c:c0:57:78:13:7d:13:ff:8f:8a:16:e5:e9:8f:41:
         f1:69:76:f5:11:9e:f9:c2:70:22:e8:37:50:e3:24:30:5a:5f:
         1e:6e:30:8e:ed:a6:eb:19:03:b3:17:8f:d8:30:9c:62:82:08:
         e6:0c:14:56:7e:65:81:62:e0:7c:05:25:db:49:ed:15:5f:34:
         4f:36:d9:64:de:2f:01:b5:d5:d1:45:21:fc:43:1d:fe:26:f4:
         8d:81:43:ce:81:5d:c6:c8:03:f0:35:56:cc:c8:aa:d4:6c:14:
         4f:ef:be:0f:4f:c4:ea:7b:d8:d0:5f:9a:aa:ea:c8:05:65:5a:
         ba:10:7e:c0:f6:83:01:fc:f3:d3:3e:df:e9:7f:48:15:b4:d9:
         62:25:b8:cf:ab:b8:50:ea:cc:7b:45:c6:0a:f3:8b:f7:82:60:
         64:eb:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:00:00 2025 by rpki-client