Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa
File:                     1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa (raw, json)
Hash identifier:          mZgq0BXNgw4SpmZ9PzPDi9TUhK1cRQZxSY3Xzf84X4Y=
Subject key identifier:   C9:B0:75:A8:C2:4C:2D:C6:9B:61:73:9E:E3:80:19:1C:3A:B1:C8:D1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1F9054FB6DEF7BD447FC6A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     396610
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:54:fb:6d:ef:7b:d4:47:fc:6a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=0a7f6183-4f7d-4a46-ab6c-c25bbadacaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:c7:d8:64:7c:a4:1b:24:ed:22:51:af:b1:
                    10:fb:24:90:bd:18:0a:08:e5:30:1c:10:3e:fd:12:
                    02:5a:bb:f0:1d:e1:7d:e7:f6:79:b8:f5:b5:68:3e:
                    d5:9b:db:9b:21:e8:ca:12:8f:4a:7f:a5:40:64:1a:
                    03:c2:fe:f5:5a:82:4b:63:96:11:62:46:b7:d3:ec:
                    5e:82:c4:b5:2d:40:db:e5:f1:33:8a:aa:1c:29:31:
                    f1:d0:7b:29:44:5a:d5:e6:d2:04:60:7b:e9:ca:22:
                    d6:0e:4d:a0:d6:68:51:a3:5f:d4:0c:bb:27:9f:14:
                    1c:f6:0b:7a:20:95:99:75:d8:47:2c:a8:37:08:27:
                    13:16:1f:ce:8e:4f:01:bb:b9:af:ef:ae:89:cf:2d:
                    05:70:03:de:ec:5e:19:15:b7:12:70:e2:db:ce:10:
                    54:64:be:8f:91:fa:a7:d3:4e:32:08:41:99:bd:bf:
                    24:a6:18:cb:61:88:8e:ff:43:31:81:00:f0:8c:31:
                    86:d1:81:a8:f5:e7:44:20:36:30:84:26:99:f7:79:
                    66:b3:55:96:80:d8:1c:9b:65:cf:71:68:e8:e1:91:
                    90:76:d6:17:51:62:75:9d:c7:cf:30:50:f8:4f:65:
                    43:3d:4c:b2:1e:dc:c8:6e:74:66:0d:54:54:84:32:
                    61:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:B0:75:A8:C2:4C:2D:C6:9B:61:73:9E:E3:80:19:1C:3A:B1:C8:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1e7b2e49-6dad-32de-84f5-64e01ca2ea78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c9:68:a6:39:fe:e0:e1:66:06:a1:97:c3:f9:f3:ff:95:39:
         df:ea:c2:d4:a8:54:ba:da:31:a4:50:61:a9:10:8a:72:88:8d:
         d1:6f:e8:24:b8:c8:9e:8f:b0:fe:63:bd:47:6b:cb:fe:14:94:
         91:7e:38:31:a2:24:1b:12:57:00:8e:34:e5:53:9c:7a:9a:02:
         29:a2:10:aa:2d:33:c6:5f:72:b0:4f:6d:d1:de:09:ea:8a:c3:
         10:f1:9a:71:8a:05:df:21:38:f8:4f:cf:4c:c5:7c:93:09:e4:
         c5:39:46:61:8f:a7:bf:44:3d:8f:e0:f8:05:2e:c7:fd:d7:69:
         5f:19:6d:c1:04:3a:e9:01:44:08:8c:83:86:64:15:a9:06:d6:
         b9:35:eb:d9:3f:ec:a9:3f:ba:72:2f:6c:a5:59:75:cf:9c:43:
         47:cf:86:b5:be:d7:48:0f:16:ed:fd:d5:bc:f5:a2:1e:03:cf:
         70:5a:7f:bc:3d:d4:14:c8:fa:1d:08:1c:6b:b9:5b:90:b9:35:
         9a:7b:dd:b7:17:45:02:d5:c2:d3:bb:81:b8:42:5a:c3:89:93:
         77:7b:9c:2d:b3:a6:94:42:19:8f:a5:15:b5:43:de:0e:be:3d:
         92:d6:cd:3b:3b:ce:9b:1e:94:9c:f0:7b:a4:44:eb:d4:7b:b9:
         8c:6f:b5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:36:52 2025 by rpki-client