Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a7704ff-ccc8-3c7c-a624-9f85a879455d.roa
File:                     3a7704ff-ccc8-3c7c-a624-9f85a879455d.roa (raw, json)
Hash identifier:          f6LgufPIh2LegMUtWidVRkBBdx1AOaef9+Rx+//KDCk=
Subject key identifier:   8A:D7:C6:92:20:4E:61:38:4E:AE:FA:98:5E:A7:C8:46:DA:FC:37:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307BF3AB2BADDECEB3AA20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a7704ff-ccc8-3c7c-a624-9f85a879455d.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     397200
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7b:f3:ab:2b:ad:de:ce:b3:aa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=c55ab622-440b-4376-beb7-1180067a63b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:86:ae:07:55:95:22:9a:33:5b:be:c3:44:85:
                    72:a0:44:a2:21:94:cc:03:ec:b2:4a:8c:f9:0f:fa:
                    27:a9:2f:b6:6a:7c:94:b0:c9:5e:08:70:0a:da:ce:
                    21:f5:38:4f:2a:b8:df:a7:8e:cb:95:28:45:ec:48:
                    21:8a:c5:4d:fb:15:e2:3e:60:be:ff:f2:19:66:0c:
                    1d:4b:54:39:10:ce:78:b4:69:8d:ca:40:45:87:e9:
                    ad:80:be:8e:cd:99:dc:2e:ef:22:d1:e9:46:f6:43:
                    19:3a:e9:55:e9:da:3f:a4:b6:14:9d:a7:27:dd:a8:
                    ba:c0:8a:a3:45:84:6e:eb:4d:f7:c6:bf:13:99:34:
                    c4:59:c2:0b:af:cd:f9:c2:fc:f2:92:a6:6d:6a:48:
                    cf:a9:04:10:e9:57:c3:22:32:93:6e:cf:01:c0:99:
                    11:77:01:c0:80:86:e7:c8:dd:d6:6b:65:14:8e:8c:
                    a5:64:de:6a:97:48:9f:86:6f:a0:ce:ab:b6:29:d3:
                    48:93:04:07:33:28:19:fe:19:b4:6d:b3:6d:fd:aa:
                    3f:d6:fb:d2:73:54:ac:12:23:fb:02:ab:ff:03:65:
                    9f:39:23:74:31:d9:07:25:fc:0b:80:39:e2:96:45:
                    90:f7:40:81:05:27:d3:48:f1:c6:da:04:19:e3:76:
                    50:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D7:C6:92:20:4E:61:38:4E:AE:FA:98:5E:A7:C8:46:DA:FC:37:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a7704ff-ccc8-3c7c-a624-9f85a879455d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0e:af:fc:84:b8:6d:e1:4c:d7:cf:16:b9:ae:61:45:2a:22:
         e7:68:a7:13:a9:40:55:69:21:47:6c:00:5f:1f:fd:2b:0a:dd:
         de:24:45:26:7d:53:87:fe:03:d1:b8:1f:d8:59:c0:34:5b:59:
         70:61:0e:79:69:7f:d2:de:d6:28:17:4a:2f:61:fb:72:2b:57:
         58:b4:bf:8b:9a:d5:be:ca:51:ee:8b:08:25:97:35:8f:73:71:
         50:f7:59:8a:dd:36:4f:0b:0b:6b:43:b4:7b:70:00:92:03:b7:
         e8:a0:d9:62:ae:dc:94:45:d9:14:6f:58:57:2b:71:90:0b:e2:
         70:27:d6:9a:c1:9d:66:ba:d6:50:82:6d:a8:8d:60:eb:ed:65:
         99:5c:17:32:c0:87:dd:37:68:6e:44:95:89:ba:56:1b:1a:ea:
         b0:f7:9f:46:20:66:fb:24:61:ea:d6:ae:b9:28:17:98:31:26:
         54:54:42:62:8a:94:7e:74:49:0e:e1:41:a9:bb:e2:00:1d:10:
         17:16:c7:09:e7:f1:63:68:a9:39:d3:43:14:fa:f2:13:9f:cd:
         03:2a:95:43:be:a3:41:d8:c5:90:26:a8:64:58:1a:90:a5:6f:
         24:28:4b:e1:b4:12:d2:e6:88:c6:03:a2:fd:67:9c:28:7a:15:
         18:dc:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:38:46 2025 by rpki-client