Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21766191-7460-3507-9375-dc24116acb53.roa
File:                     21766191-7460-3507-9375-dc24116acb53.roa (raw, json)
Hash identifier:          wtpsMzBBsa837egZ7pll+uxAxkgu0cnZcupb1BIFUK0=
Subject key identifier:   E9:CC:FA:52:7B:85:10:BF:CB:08:58:46:16:05:53:D3:EA:66:9E:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A62909683F81F9FD204D79700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21766191-7460-3507-9375-dc24116acb53.roa
Signing time:             Wed 02 Jul 2025 13:01:04 +0000
ROA not before:           Wed 02 Jul 2025 13:01:04 +0000
ROA not after:            Tue 30 Sep 2025 13:01:04 +0000
asID:                     396616
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:62:90:96:83:f8:1f:9f:d2:04:d7:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  2 13:01:04 2025 GMT
            Not After : Sep 30 13:01:04 2025 GMT
        Subject: CN=b404579e-5605-413c-8409-3c99ffd747d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:14:b5:2d:3d:a8:81:f2:92:06:05:42:cb:41:
                    b9:99:bb:6c:ea:1f:96:b8:50:23:a4:00:d8:17:6b:
                    d0:a4:12:b0:ca:20:ff:4a:2f:c4:a0:a0:2e:de:c3:
                    63:89:c4:11:29:32:37:7e:9e:d8:9c:2b:c9:1a:dd:
                    91:db:b4:f8:bb:72:0c:5c:bb:c0:84:77:30:1a:53:
                    e3:26:b9:dd:ef:ed:c3:42:81:07:6d:c4:d3:30:32:
                    9a:92:00:95:e1:33:80:b8:6c:1d:a0:2f:73:df:22:
                    35:5e:70:1a:a5:2e:ec:1e:2b:8a:6b:f3:af:96:f8:
                    42:f0:5b:54:83:1f:20:89:eb:b8:c5:5d:d5:14:56:
                    bc:e7:48:c6:3f:22:52:7b:01:f0:7a:5f:a1:e4:c4:
                    71:0d:01:35:85:e4:a2:84:67:92:5f:f9:d0:08:95:
                    f5:82:90:15:17:a8:39:95:9b:cd:89:ce:37:ca:a0:
                    f4:66:24:29:f9:48:3f:16:08:1e:2c:05:e6:33:26:
                    98:01:93:b4:06:3e:6f:80:e2:7b:63:38:e8:0c:e0:
                    cc:54:41:6d:66:13:e4:46:fd:ef:7c:5a:7e:ab:f3:
                    f3:26:e8:f6:2e:19:f2:5e:da:7a:6c:f2:9f:f9:d3:
                    16:f0:b2:dd:eb:bc:b2:4b:f1:5b:67:c1:f8:6e:69:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CC:FA:52:7B:85:10:BF:CB:08:58:46:16:05:53:D3:EA:66:9E:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21766191-7460-3507-9375-dc24116acb53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:59:4b:d6:e9:9f:2d:59:fe:e9:05:dd:a4:63:57:76:9b:3b:
         8c:02:f6:6c:09:36:9c:c0:5a:15:13:99:59:96:49:69:fc:4d:
         bb:a9:ee:35:e4:33:0d:a7:c0:3e:02:19:26:0d:f1:d3:29:c1:
         a0:43:2a:82:26:33:19:9c:6c:c6:83:9e:9b:02:fc:a4:60:2d:
         2b:61:5f:7e:fe:74:ae:1d:b3:c7:f8:54:7e:29:10:1d:6f:a9:
         97:bf:4d:33:35:7d:50:4e:58:fd:66:2d:52:ca:dd:b4:d1:28:
         89:32:6f:a6:ae:0f:db:97:a6:b2:66:fb:5f:21:6f:2e:14:5c:
         38:34:7e:48:f5:c4:3e:a0:46:00:fa:97:9a:db:4f:6d:3f:54:
         48:72:82:fa:b9:2e:93:b3:ad:47:1f:c6:5b:21:a3:d9:79:7a:
         d3:96:95:5d:f5:10:b9:b2:ca:4a:77:30:81:a7:37:88:36:d0:
         76:0a:5f:76:d3:c9:3b:2d:5f:32:a1:3a:01:05:69:a2:f2:13:
         ef:6b:70:75:ad:24:9e:1f:8c:7c:88:13:7f:59:68:86:cb:0c:
         22:bd:18:78:cf:12:fd:4e:28:ba:e1:39:76:d5:32:65:c2:39:
         60:a3:57:0d:6c:37:16:48:5f:04:32:58:aa:b7:65:32:16:81:
         54:62:3b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:08:49 2025 by rpki-client