Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13b8ad8d-76a2-3c1a-96ea-567e852bdabd.roa
File:                     13b8ad8d-76a2-3c1a-96ea-567e852bdabd.roa (raw, json)
Hash identifier:          iTq7B+6+xSqmexiKToCpsmZ+MQHJyZcvGHtzcm8fBBE=
Subject key identifier:   AE:50:EE:94:AF:1B:13:56:30:0C:ED:1F:95:D4:6D:68:E7:0B:54:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A3B6FA1FA9F3D0AE9B54C2480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13b8ad8d-76a2-3c1a-96ea-567e852bdabd.roa
Signing time:             Wed 18 Jun 2025 12:38:23 +0000
ROA not before:           Wed 18 Jun 2025 12:38:23 +0000
ROA not after:            Tue 16 Sep 2025 12:38:23 +0000
asID:                     396553
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:6f:a1:fa:9f:3d:0a:e9:b5:4c:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 18 12:38:23 2025 GMT
            Not After : Sep 16 12:38:23 2025 GMT
        Subject: CN=0d02d25f-e1f7-458f-84b5-330ae434dc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:36:68:0a:c7:22:19:b4:77:fd:77:8c:d1:
                    b6:d7:97:bd:04:28:0a:66:ca:db:6d:00:83:70:51:
                    2f:11:dc:3d:50:41:8c:d8:49:5a:21:dd:04:12:fa:
                    50:10:d3:b3:e0:56:c6:ec:29:93:3b:0c:28:a1:ab:
                    33:3e:c2:46:24:fb:e5:ab:a7:fd:1e:c5:15:50:92:
                    88:41:0c:de:61:4f:7c:b0:ca:48:93:bc:84:7b:e2:
                    1c:d3:0c:4d:f8:ec:21:33:c2:7a:e5:17:3e:50:94:
                    33:ac:bd:b1:7c:d9:d5:c7:98:df:21:ff:b9:00:5d:
                    da:16:de:27:db:e5:9c:f7:99:a3:12:d4:24:6f:3e:
                    b5:65:f2:5a:95:cb:bd:bc:f2:1f:5a:10:2e:58:80:
                    7e:f9:c2:b0:ee:e8:dd:90:22:d4:0c:47:dc:03:cb:
                    a9:5d:5d:b5:79:37:55:e5:97:b4:7e:46:b5:de:72:
                    d5:ee:4f:f5:8d:33:90:45:3d:f0:77:60:bc:a7:0a:
                    4b:81:f3:1d:00:0d:22:5f:5f:cd:83:84:16:9b:bf:
                    ae:f5:9b:07:7e:03:b1:57:37:dc:2f:dd:aa:0e:32:
                    0e:58:b4:f5:8a:0b:73:cb:ec:57:be:45:4c:95:f4:
                    a0:a4:c1:8e:2f:5e:0a:1d:69:b2:12:c9:68:bf:94:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:50:EE:94:AF:1B:13:56:30:0C:ED:1F:95:D4:6D:68:E7:0B:54:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13b8ad8d-76a2-3c1a-96ea-567e852bdabd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:bd:5c:e8:aa:26:e8:c3:49:58:1f:ff:ac:23:ce:48:bf:db:
         c8:bf:41:d8:1e:31:ce:7f:98:6d:04:6e:5b:6c:9e:a8:65:16:
         f1:52:01:eb:90:3d:d7:86:ae:41:db:ca:9a:b6:60:64:6a:09:
         3a:5d:30:65:d3:85:36:42:e7:46:bb:f6:e6:2c:20:0e:2b:ef:
         ed:6e:ef:17:86:f6:ab:be:13:58:a4:e4:3d:16:90:8a:d8:46:
         de:5a:cc:34:9b:20:b5:04:2a:e9:53:b6:cc:64:af:7f:f0:3e:
         30:23:5b:5b:cd:e4:0d:75:dd:88:ef:14:0b:bb:d6:02:70:a6:
         24:31:77:f1:ae:35:ee:35:01:be:d8:9b:ef:2c:22:61:bc:fa:
         c6:9a:83:dc:c1:bb:e5:d6:bc:7a:4e:b9:c7:78:b6:a7:4a:50:
         63:b9:dd:f9:00:88:e7:ae:0e:d8:d4:74:02:1d:64:ba:82:a0:
         ff:2d:3e:7d:78:b9:8d:03:45:91:85:da:5e:f7:58:23:7a:16:
         f6:3d:10:6c:37:62:63:11:bf:c0:36:22:cb:99:f9:9d:ef:5a:
         be:71:f1:07:1b:2a:50:bf:17:0f:ea:66:42:eb:e9:a7:86:ab:
         86:c0:94:37:aa:bc:dc:76:5f:0b:83:b4:3e:35:f7:f8:71:c5:
         54:e2:fd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:46:08 2025 by rpki-client