Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395070d7-7c1d-31e6-86b7-6c9e71756816.roa
File:                     395070d7-7c1d-31e6-86b7-6c9e71756816.roa (raw, json)
Hash identifier:          KiLgE1/l7vQ+3ZB4Oy/u+Hq8AFYlKLECczBML+7Pj/w=
Subject key identifier:   94:FC:6C:DE:2E:54:7C:82:B8:E5:C8:78:AF:C2:39:B7:EF:DD:04:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5CFB315736C005D17A51EDDC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395070d7-7c1d-31e6-86b7-6c9e71756816.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     396544
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:31:57:36:c0:05:d1:7a:51:ed:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=d42ddc46-4cc8-4707-a02c-d572b716ef0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3b:4a:c9:44:f2:5d:9d:1d:d8:b2:ee:36:50:
                    94:ab:78:dc:9a:3b:02:5c:43:92:e1:5d:13:b6:17:
                    7c:98:11:af:8b:e2:8b:05:82:12:95:e4:cb:33:42:
                    b6:73:3d:0e:06:72:1f:a3:5d:c5:eb:05:f8:05:57:
                    97:83:f7:1d:37:68:8b:cc:60:1d:c0:ce:c9:ea:21:
                    ee:83:81:f3:99:ef:7c:27:f0:a1:3f:5a:38:eb:d1:
                    28:d3:77:8b:52:28:64:59:31:25:0f:cc:91:bf:32:
                    7a:9b:0a:7d:7a:a6:ab:cc:2e:5c:ef:33:a7:3f:87:
                    8f:5c:1d:a0:04:3e:e6:02:35:22:59:ff:37:cf:76:
                    c4:28:8c:2f:ea:d5:b1:e3:6c:35:54:68:0b:01:fd:
                    98:5d:bd:83:65:66:0a:96:e3:d0:dc:7f:66:3c:35:
                    4d:83:17:61:2a:cf:70:da:49:60:72:2d:74:48:15:
                    ad:ff:c6:62:2e:31:91:c9:42:f4:72:6f:02:57:f6:
                    02:03:c4:13:97:cb:d7:42:69:2f:39:39:2c:5a:06:
                    03:c0:07:b5:d4:14:50:d9:6c:37:08:99:10:80:de:
                    e8:6b:56:ca:32:e5:e3:af:82:9e:c2:7d:a7:81:e8:
                    53:f2:b0:93:08:00:c7:e0:82:b9:b1:1f:f6:e2:4c:
                    d5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FC:6C:DE:2E:54:7C:82:B8:E5:C8:78:AF:C2:39:B7:EF:DD:04:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/395070d7-7c1d-31e6-86b7-6c9e71756816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bd:e8:3e:87:db:fa:aa:7b:26:7a:a9:db:d9:70:a3:fc:ca:
         60:94:31:9f:ae:fa:65:fe:11:c9:1c:b1:44:6f:e0:d0:37:98:
         15:27:d3:89:d7:bf:b2:03:a4:a3:e0:c6:47:51:c4:b0:bf:37:
         ff:61:27:58:b4:23:26:43:2f:58:60:2d:51:be:8c:bf:09:e6:
         2f:b1:4a:6d:10:a7:e0:84:17:ad:09:74:0d:41:82:79:92:f5:
         d1:e5:cd:82:5a:03:95:ee:ef:ea:0a:5f:31:af:36:81:0d:2d:
         23:ce:be:03:34:8d:1d:eb:ad:e3:51:00:58:88:59:b0:89:34:
         7a:cf:bf:24:d7:fd:4c:a8:f9:9c:9b:f2:07:5f:16:35:21:ce:
         c1:d5:03:98:d5:6e:62:93:80:dc:f0:24:e4:79:2b:e6:64:c5:
         f4:b2:87:5a:d6:7b:20:66:46:a9:26:ce:50:aa:b2:a1:58:d3:
         a6:40:13:3b:0d:72:e6:53:63:3b:37:a6:fb:99:a7:69:bc:26:
         b2:ba:bc:90:da:87:85:d8:29:05:e4:08:10:f3:d3:60:f3:30:
         58:19:b3:12:68:5f:ca:1d:a8:86:c4:fd:bf:81:9e:77:3d:a0:
         96:e1:a1:5e:72:1e:c5:ab:4f:8b:a4:1d:4b:d5:e1:d1:43:21:
         99:fc:63:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:22:50 2025 by rpki-client