Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505f44a6-7c87-3dda-9cc5-9238b86db84d.roa
File:                     505f44a6-7c87-3dda-9cc5-9238b86db84d.roa (raw, json)
Hash identifier:          6E8ADyOx1wv2PpinzvmMcwJpzCkNSZsdS7CvrVmM2GE=
Subject key identifier:   94:C0:90:31:E5:7B:1C:8B:AD:A6:AB:B1:9A:F8:53:E5:3B:29:28:9E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A17263B3B45CBF4B1EE46B700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505f44a6-7c87-3dda-9cc5-9238b86db84d.roa
Signing time:             Thu 05 Jun 2025 12:41:23 +0000
ROA not before:           Thu 05 Jun 2025 12:41:23 +0000
ROA not after:            Wed 03 Sep 2025 12:41:23 +0000
asID:                     36625
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:3b:3b:45:cb:f4:b1:ee:46:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:23 2025 GMT
            Not After : Sep  3 12:41:23 2025 GMT
        Subject: CN=82e70088-4682-43c4-a67f-9f48718860f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:54:05:cd:38:82:d4:98:00:df:6b:d1:5a:53:
                    f2:b1:f9:4e:c7:6c:31:33:a0:8b:71:c1:cd:5d:62:
                    a9:15:2a:fc:84:3f:36:56:cf:bd:9a:78:97:60:86:
                    8a:25:4f:76:11:9b:ba:2c:84:1a:be:79:e7:c1:e0:
                    bf:96:09:64:de:70:7a:a9:7c:83:6c:7d:60:8e:09:
                    ce:97:11:e1:eb:de:d9:85:1a:99:90:15:de:9e:18:
                    50:35:5c:39:ab:f0:fb:17:4a:d9:e7:19:c5:32:fd:
                    a1:3f:21:b2:fd:81:0d:28:5f:19:9e:48:d9:29:4c:
                    f9:db:88:15:ec:11:7e:67:70:d6:21:41:5b:dc:24:
                    22:d0:31:9d:0d:88:51:6a:07:f7:33:1e:c2:df:8f:
                    6a:57:16:22:76:b6:ce:4f:0c:fb:51:a6:08:f7:aa:
                    cd:17:e0:83:26:2a:df:d8:d4:a6:5b:54:43:6e:f2:
                    42:f5:1d:27:93:8c:e3:d3:d0:fa:87:a2:8f:d2:95:
                    ab:f9:df:af:0a:e2:b6:f1:34:29:3e:df:64:f9:6e:
                    b7:21:97:97:33:da:64:de:a1:e6:9e:e5:ce:9b:51:
                    55:32:78:96:12:5a:39:5a:06:f4:47:05:bb:78:fe:
                    31:df:c6:71:59:d6:b3:26:04:cd:6a:b1:4d:90:fa:
                    d8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C0:90:31:E5:7B:1C:8B:AD:A6:AB:B1:9A:F8:53:E5:3B:29:28:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/505f44a6-7c87-3dda-9cc5-9238b86db84d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:34:91:09:b9:1f:1c:b2:fc:a5:9b:32:79:ba:43:b5:a1:87:
         97:da:b6:c3:09:a6:44:5d:2b:cf:24:5a:85:25:c7:a4:2d:4f:
         d7:63:05:54:64:f5:e7:fd:27:ee:69:e0:82:3d:bb:58:fd:30:
         5f:44:8c:01:db:56:5a:9d:ac:df:d1:d8:09:00:f5:d7:99:f8:
         22:f9:29:38:3c:e8:5c:38:a9:70:7e:99:ba:cd:3c:b5:aa:1b:
         99:df:de:2d:34:c5:41:0f:c1:ab:66:8d:83:6e:95:0b:f1:5f:
         53:22:9a:2b:50:4b:56:d0:e8:db:a6:04:25:3b:43:8d:8e:ca:
         4c:81:14:e7:30:d6:9a:d8:61:a4:7d:62:e4:7e:bd:16:1a:d2:
         c5:10:a1:42:ca:b8:d9:19:6f:f7:54:55:e5:8c:f2:ee:bd:b9:
         d7:0c:29:2b:d0:e6:0b:a6:1f:f7:26:2b:8b:8f:3a:e1:f6:30:
         bc:47:57:4b:86:a0:0e:5a:81:3f:02:a2:c9:22:35:1c:0f:63:
         f4:67:af:0c:d2:35:b6:3e:36:f5:8b:f1:d1:54:c4:c1:88:48:
         ce:2d:e6:ac:e1:60:b2:66:57:97:ef:88:23:96:ad:47:d3:81:
         a4:a8:9a:cf:a0:04:0c:2f:e8:77:5d:9d:c1:70:58:1d:82:1a:
         37:97:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:53:22 2025 by rpki-client