Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f4a39fb-6ad0-32ea-a579-344d81cfd7f1.roa
File:                     6f4a39fb-6ad0-32ea-a579-344d81cfd7f1.roa (raw, json)
Hash identifier:          mjdGL47IPngm1iUJ94O+9sbpu3ZXQmJb17RDkS5ZUDc=
Subject key identifier:   CF:3D:D7:E1:C9:8B:61:1E:4C:C2:3B:44:3D:99:C2:EB:74:2C:C0:53
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4F05E62F293056C5C93E1100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f4a39fb-6ad0-32ea-a579-344d81cfd7f1.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     36624
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:e6:2f:29:30:56:c5:c9:3e:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=c017f1a3-8963-4fc2-9da5-e434e8795cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:84:33:9d:13:c0:08:9d:fe:7f:4e:0f:a5:
                    66:12:b9:9f:49:e0:88:96:47:f2:b5:8e:02:47:6e:
                    d2:a7:4e:df:c5:97:7c:f3:cd:4a:1f:88:f3:cb:e6:
                    6c:b5:3c:50:ee:f9:27:e3:72:fb:4b:fa:cb:02:71:
                    73:da:8e:1d:b8:1d:38:9b:b5:ea:05:d9:b3:7c:ba:
                    79:bd:27:2c:d3:5e:fd:38:48:48:83:e9:22:d5:7e:
                    d6:07:d8:d8:88:37:ec:f6:6e:03:47:8c:27:d6:ef:
                    6b:6e:7a:21:25:dd:71:a2:4e:0e:18:49:9f:08:d1:
                    27:0a:d1:98:a9:9b:da:92:c1:ea:dc:34:30:17:8b:
                    5e:9a:43:a1:27:a7:e6:0d:1d:a2:44:5c:a7:0c:a6:
                    38:98:4c:88:7d:3d:5b:d0:93:95:2a:ab:9b:a3:08:
                    ec:db:6b:20:76:d3:f4:3c:ec:32:9a:ee:5e:9a:80:
                    05:7c:b0:6d:5d:8d:8b:84:60:91:1c:a0:50:17:fb:
                    bd:90:e7:6c:b5:35:de:25:42:96:72:ab:58:45:8f:
                    eb:72:33:56:bf:76:4b:30:ed:00:e6:85:81:24:65:
                    58:89:77:dc:8e:5b:70:17:68:97:00:f7:4f:4e:51:
                    29:e3:6b:62:c0:71:21:3f:71:76:8b:09:2d:94:46:
                    64:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3D:D7:E1:C9:8B:61:1E:4C:C2:3B:44:3D:99:C2:EB:74:2C:C0:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6f4a39fb-6ad0-32ea-a579-344d81cfd7f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:a0:ae:02:d5:6f:e5:30:15:04:c1:4e:5d:72:05:89:ad:
         29:b9:6c:7f:99:77:ad:7d:9f:d1:55:08:71:95:99:62:34:95:
         8d:0f:a8:64:97:27:32:47:79:9a:68:54:05:d3:69:a6:5b:6d:
         cb:cc:4e:92:e3:87:19:16:a5:ac:dc:3c:cc:e4:24:fc:23:91:
         12:10:a5:49:34:63:1e:c6:8a:c6:96:6b:fd:19:a7:bf:81:58:
         76:14:b8:f4:10:cf:db:ee:83:64:2f:9c:b2:6c:cd:34:4a:60:
         85:f7:f8:7a:47:ac:d3:8b:da:8d:0b:23:d6:11:16:41:37:31:
         62:81:6c:90:f6:b1:45:79:76:dd:00:3e:73:c8:f0:7c:f1:ce:
         a9:ad:f0:23:8f:de:d7:8e:8a:43:6a:f7:77:d1:67:68:b6:95:
         6e:c3:9c:b0:c0:97:fc:4a:4d:0b:53:33:77:6c:2f:67:4a:cd:
         9a:8b:a3:38:d8:fe:14:e1:70:e0:f6:81:f9:0f:82:d5:53:94:
         0c:f5:65:3c:23:52:11:be:b6:4a:5d:51:37:ea:23:9f:88:30:
         93:24:2f:31:43:b3:96:96:a3:e7:a3:0f:c4:7b:41:06:8a:7f:
         5d:4e:1b:b9:d1:17:d3:8b:bb:97:af:0a:2b:76:8c:b1:b6:fe:
         cb:66:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:53:23 2025 by rpki-client