Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fab5826-d877-38ab-9210-10546662cd55.roa
File:                     2fab5826-d877-38ab-9210-10546662cd55.roa (raw, json)
Hash identifier:          yVlDG62A3C7ksczU1I3wm1/9l6qaRlrVgvJUk/nq67c=
Subject key identifier:   D2:3D:5C:4A:C3:52:E6:EB:62:8D:0D:B9:F0:23:96:37:0D:E3:4E:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05BB223F5FD26526003440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fab5826-d877-38ab-9210-10546662cd55.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     396572
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:bb:22:3f:5f:d2:65:26:00:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=94301ea0-8027-44ba-ae5a-d42025aaf1d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:18:ae:95:93:52:62:4b:e5:b0:d0:d3:09:d9:
                    40:7c:c4:a4:f2:67:8c:7d:d1:63:fe:d9:90:df:6d:
                    85:0b:5a:8e:99:a9:92:19:89:c4:48:89:c1:d2:56:
                    ad:6b:5e:0b:0e:29:80:88:13:96:c7:29:94:c4:38:
                    41:d2:fa:e5:d6:c6:75:1e:44:b2:ab:81:eb:fc:72:
                    82:48:f0:c3:ff:9d:30:06:0c:49:a6:6b:b9:3d:1a:
                    de:63:73:d5:56:3e:94:7d:60:f7:e7:fa:0e:5d:f6:
                    7e:5d:73:2e:81:38:de:79:e1:ec:e8:4f:4c:94:9e:
                    af:a0:b9:53:1a:e1:46:45:00:b8:bb:3e:ab:79:cf:
                    fe:1d:ec:e9:4a:93:eb:05:dc:81:3e:bb:d8:13:f5:
                    1d:31:e2:7c:36:eb:7f:39:4b:58:21:c7:e9:02:6a:
                    d1:6a:e3:f9:9b:94:30:18:51:c1:d9:51:35:b0:9b:
                    4c:f6:aa:52:5c:57:d3:5b:4c:53:ed:24:8f:8c:70:
                    f7:85:f9:52:f3:be:2d:8c:1f:e0:ef:a8:89:41:48:
                    7a:1c:db:e5:a4:b7:97:63:e2:df:18:5e:8e:07:03:
                    f9:3a:02:c0:91:72:2b:44:4e:5f:ed:e8:e0:8e:d9:
                    fb:51:bd:b7:8b:ac:31:53:15:1f:2a:38:9e:6a:e4:
                    47:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3D:5C:4A:C3:52:E6:EB:62:8D:0D:B9:F0:23:96:37:0D:E3:4E:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fab5826-d877-38ab-9210-10546662cd55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:6d:11:5e:da:0a:f8:20:06:73:39:82:18:56:40:d2:ab:40:
         e7:5e:d8:ec:ed:c3:35:b3:2a:85:ac:1c:03:03:43:65:3c:42:
         e2:d0:7f:aa:7b:be:69:1d:50:ee:15:95:60:a9:1e:8f:71:aa:
         17:51:00:78:33:07:cf:31:a1:7b:09:44:d9:42:62:87:bf:7a:
         3a:e4:c6:e0:b8:09:c0:98:b7:14:28:c2:8d:a6:a2:83:11:c4:
         23:43:4c:f4:f2:65:75:a0:6e:42:7b:70:ef:d4:7d:51:2f:a4:
         de:77:c9:7c:44:a5:09:6d:f5:e0:01:8b:c9:4e:2d:fe:b0:5b:
         c8:0c:b1:a7:52:41:94:18:8a:2b:fa:6f:a2:3e:74:4d:7c:b0:
         8a:c1:a7:c1:fb:2d:88:9b:58:7b:ae:4e:1f:8e:d7:fa:bb:13:
         c7:e6:29:57:27:7f:56:f1:6b:83:0d:64:35:a5:b8:be:57:62:
         c9:79:04:14:e2:f2:bb:dc:0e:b9:45:34:5c:1a:db:f6:ee:3b:
         db:ce:03:f8:31:06:4f:dd:7f:6e:16:01:54:89:38:df:ba:e4:
         99:d6:fa:4e:a0:4b:ed:65:bf:c5:61:8a:66:50:c0:a4:c0:61:
         e0:6e:95:41:13:75:ed:54:3a:8b:2f:37:fd:d8:56:18:df:ca:
         99:73:3e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 19:55:05 2025 by rpki-client