Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea64d86-d63c-37ea-bd3f-1c1e121eb439.roa
File:                     6ea64d86-d63c-37ea-bd3f-1c1e121eb439.roa (raw, json)
Hash identifier:          bui3c1jSMQ6Y/8d/xMnxQV13l5UGrsr9zOJ8lOAnP4I=
Subject key identifier:   3F:68:69:FF:7D:8D:83:A3:56:A0:04:44:79:80:0B:0E:5C:F4:10:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05E44CAED742B3090A5CA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea64d86-d63c-37ea-bd3f-1c1e121eb439.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     396609
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:e4:4c:ae:d7:42:b3:09:0a:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=24dc5bd9-fc49-4e51-b020-b117a56f6e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bf:29:eb:31:ec:33:c4:10:aa:49:6a:72:70:
                    2d:a6:42:1c:79:61:8d:79:87:ca:0d:6e:5a:9a:9e:
                    99:2a:3c:34:39:d5:2b:31:d9:38:db:f7:68:04:3f:
                    84:32:66:e1:57:e1:0e:27:07:af:38:4e:43:2c:dc:
                    a5:94:8c:01:40:6a:ab:6b:42:6e:f6:d4:8c:11:40:
                    42:1e:89:e0:0e:dd:15:88:17:2f:70:d8:35:90:47:
                    6f:eb:2c:3a:d5:ba:11:1f:53:25:60:ae:75:2f:b7:
                    b2:f2:d9:c8:9f:cd:ae:db:c8:5f:62:ee:9d:8f:b6:
                    c0:ce:59:fe:47:de:12:66:aa:f0:5e:cf:ae:c8:ac:
                    bf:1e:42:68:a5:b8:1d:62:a2:a2:46:e5:a0:f1:43:
                    ed:be:c2:ea:6b:27:06:ec:4a:65:36:45:19:58:2e:
                    31:b4:e2:30:2e:c0:76:15:a1:a8:d3:81:39:65:8c:
                    8d:e8:36:0e:0f:98:66:e2:85:1e:d7:05:17:1a:85:
                    2e:42:61:f2:de:e2:a8:ae:01:1c:b9:2f:9a:15:a8:
                    7e:b5:88:3f:df:f1:10:12:41:8a:9a:a3:54:c2:0c:
                    94:ce:2e:19:2e:9f:1a:42:e4:0f:7b:dc:7e:d6:78:
                    d7:7f:ba:03:ca:48:69:4a:1a:a1:87:25:08:55:a9:
                    f9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:68:69:FF:7D:8D:83:A3:56:A0:04:44:79:80:0B:0E:5C:F4:10:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ea64d86-d63c-37ea-bd3f-1c1e121eb439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:59:b7:a0:c4:60:74:f7:c1:84:d6:47:c9:a5:18:0e:45:d5:
         21:47:69:af:b7:1c:a7:37:be:52:42:b8:bc:a4:7f:d8:30:ec:
         98:18:f0:42:86:ce:97:f6:56:12:07:12:7b:66:e9:83:a9:bd:
         82:29:6f:d2:1c:e5:29:6f:0a:ab:ee:af:23:fa:1c:89:59:23:
         64:46:c0:c2:8e:a8:df:56:c8:e5:20:26:d5:4b:19:84:aa:c9:
         0b:b5:6c:33:e9:d7:b2:dc:eb:6a:d7:c5:d3:2b:fd:c9:44:be:
         98:16:e8:fd:d6:80:df:aa:c2:86:49:a9:89:78:14:f6:a1:13:
         ff:b9:ba:9f:3e:c1:7a:52:f2:40:70:8d:43:3a:c0:07:83:b3:
         61:16:5a:c8:7c:5e:58:0b:b1:45:ac:c3:96:52:39:d0:76:9c:
         83:4a:c7:f0:91:3f:a0:21:8b:ef:f8:a3:f2:84:2c:fa:7f:06:
         e7:0e:b8:e2:f8:01:44:83:54:1b:20:ce:53:a1:90:e4:c2:ef:
         27:8c:28:0d:33:9b:2a:43:7d:79:5f:fd:1b:87:d4:64:70:06:
         f7:18:dc:81:1f:01:ce:64:12:2e:92:a4:32:ec:a2:55:50:2f:
         75:02:cc:b2:2e:36:3b:99:70:ec:4e:43:88:04:e1:92:0e:1c:
         00:7d:f2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:01:02 2025 by rpki-client