Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40aebdc5-9aa4-36bd-83da-2551c3bf28fb.roa
File:                     40aebdc5-9aa4-36bd-83da-2551c3bf28fb.roa (raw, json)
Hash identifier:          gRp/IFnnlNbMDsyRqeBcr6sLjfTfSkesppkZOlKX6Og=
Subject key identifier:   E3:E4:DC:7B:13:82:4B:83:5A:8D:AD:79:F4:50:80:BF:D8:36:E5:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A3B6F9E7E4B4E6A5B3F5544BC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40aebdc5-9aa4-36bd-83da-2551c3bf28fb.roa
Signing time:             Wed 18 Jun 2025 12:38:21 +0000
ROA not before:           Wed 18 Jun 2025 12:38:21 +0000
ROA not after:            Tue 16 Sep 2025 12:38:21 +0000
asID:                     396592
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:6f:9e:7e:4b:4e:6a:5b:3f:55:44:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 18 12:38:21 2025 GMT
            Not After : Sep 16 12:38:21 2025 GMT
        Subject: CN=5f1827e4-8229-4f5d-9966-dd70dd5fb9b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:02:11:56:25:fb:6a:e9:dc:58:d6:06:27:45:
                    34:59:01:de:4b:92:ce:a9:f0:22:00:47:0a:01:e8:
                    ab:eb:a4:8e:79:13:07:46:64:95:f4:7b:57:e6:f2:
                    72:76:f0:5c:67:b4:0e:6c:b0:0b:c1:bd:bd:7b:24:
                    2e:c3:9d:be:57:a5:af:ae:a4:bb:98:14:f5:d5:72:
                    bc:cf:57:51:aa:41:e0:4b:6d:b0:1b:12:ee:13:40:
                    c9:ec:e0:2b:ec:b3:be:47:50:64:b4:91:65:86:6d:
                    b4:c2:42:7f:92:3f:23:b6:5e:33:30:30:4c:45:0a:
                    8e:3a:81:d6:3c:f0:5a:ba:23:a1:d9:af:58:4d:8d:
                    5e:76:fc:36:2c:23:75:9d:73:72:06:43:20:bc:01:
                    cb:11:6d:7c:b9:5a:05:c2:a4:cd:02:3a:ab:45:05:
                    32:25:f7:7d:74:0a:4c:16:66:c3:6d:0a:58:d0:d5:
                    d1:62:d2:c4:52:e2:a5:53:48:a2:fe:7a:41:83:50:
                    de:81:5c:4b:8c:a9:fc:58:2a:cb:9d:8d:cd:1d:31:
                    52:91:85:46:45:bf:3c:ae:26:dd:b4:6a:17:9e:05:
                    e0:94:4f:2f:10:59:61:7e:c5:c2:d1:dc:06:aa:9c:
                    14:6c:a5:2d:8b:9c:d1:62:42:0d:7f:62:98:5e:5c:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E4:DC:7B:13:82:4B:83:5A:8D:AD:79:F4:50:80:BF:D8:36:E5:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40aebdc5-9aa4-36bd-83da-2551c3bf28fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ba:7d:69:af:55:e7:de:eb:3d:88:33:a0:64:46:7b:f2:15:
         07:3d:4a:72:af:cf:36:fd:aa:6b:ca:e0:42:75:b6:8d:ea:d4:
         d9:78:13:46:a8:7c:25:40:fb:33:49:14:41:65:a1:aa:6c:57:
         cb:51:23:4c:fd:4b:e0:8c:3e:a7:a0:61:c7:89:2b:82:4e:47:
         9d:56:b4:91:5d:bd:cc:7d:ba:ed:e1:7f:4d:96:bb:af:28:b6:
         5f:32:af:a0:49:6e:32:ed:32:a6:44:0b:21:fe:c4:e7:50:9f:
         88:b1:c2:86:06:42:cc:52:3d:b0:d6:f4:d8:0b:e9:57:3d:4f:
         5d:ba:8e:dd:25:b7:fc:09:4f:e4:28:3f:c3:f4:83:b7:1a:92:
         55:95:92:5a:3e:ea:69:e9:1f:05:36:71:44:5c:d5:e2:d8:a1:
         80:3f:f6:92:db:d3:f1:9b:3a:e3:61:65:fb:38:79:0c:7f:0f:
         fe:43:bf:ba:fa:5c:9f:44:50:23:c4:6b:fb:6a:71:c8:90:40:
         d2:86:1f:10:9d:ec:78:9e:d3:20:88:e7:33:d1:98:06:01:5f:
         6b:eb:fc:9a:3e:59:8e:89:b6:19:8b:ce:fe:03:8b:14:01:46:
         3b:83:55:21:ea:aa:6a:59:6f:2c:a1:7f:4f:b4:c4:73:d5:34:
         2c:bf:bf:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 00:44:26 2025 by rpki-client