Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8038a86d-8c7e-3cb6-8f48-a3b209c1e3c4.roa
File:                     8038a86d-8c7e-3cb6-8f48-a3b209c1e3c4.roa (raw, json)
Hash identifier:          IU1Ivy2lzuFs21WkaCHBfLYWM/MoS5G6zSXBvE95GuI=
Subject key identifier:   C9:5E:15:EA:22:1E:93:38:5A:CD:C4:27:BD:DA:6A:1B:5C:AB:E7:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A4C3B3D638106B0E8C7CFF380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8038a86d-8c7e-3cb6-8f48-a3b209c1e3c4.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     36632
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:3d:63:81:06:b0:e8:c7:cf:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=e18e66b6-e6ea-48fb-bda7-8c89af58e29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ce:99:cb:7f:69:0c:8f:d5:6f:e2:27:32:84:
                    5b:8b:da:a4:eb:bb:e0:c7:f6:b6:3b:e1:f0:9e:45:
                    93:86:5c:08:ee:55:6c:36:cc:45:9c:f4:ea:4b:24:
                    0b:f8:da:b4:cb:e3:d7:29:60:73:d5:a7:b5:19:d5:
                    9d:dd:8e:b1:bf:18:19:e0:ca:25:c2:eb:de:4c:af:
                    7d:90:f2:4e:c4:47:3f:be:17:dc:50:1d:17:17:68:
                    52:cc:66:55:fa:8a:26:ab:a3:7e:89:38:7d:19:4d:
                    58:92:a1:82:93:37:83:ad:5f:2a:e2:d6:d1:49:6b:
                    f0:dd:29:a6:52:6f:b9:58:4d:c1:49:90:ba:8f:f0:
                    61:85:e7:6c:17:e7:e7:22:1c:de:35:e2:fc:be:57:
                    1b:99:c9:4a:26:28:e7:86:ef:85:0a:ad:35:a0:be:
                    c1:0d:3f:b8:3c:bf:06:d1:19:eb:c1:86:5f:89:96:
                    2c:4d:41:3a:57:68:ca:27:70:bc:a5:19:76:f6:e4:
                    b2:48:60:39:20:3a:77:de:d8:79:da:84:25:d7:ac:
                    cc:ae:ae:3a:23:64:95:4c:b8:92:33:e6:83:23:9d:
                    ed:ae:3d:ef:e3:1d:f8:2a:57:29:da:51:e0:d9:73:
                    7e:43:9c:4b:ec:94:d5:f1:c1:1a:2e:25:41:aa:1f:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:5E:15:EA:22:1E:93:38:5A:CD:C4:27:BD:DA:6A:1B:5C:AB:E7:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8038a86d-8c7e-3cb6-8f48-a3b209c1e3c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a4:aa:44:55:83:da:1c:2f:68:7b:c9:af:28:f0:7a:be:74:
         ff:a6:e8:7f:17:46:8e:5d:78:56:59:91:17:59:bd:37:63:e7:
         e5:f7:36:7b:c1:8e:a6:89:11:db:b0:68:ac:1a:56:81:1c:0f:
         2a:bb:eb:c6:de:29:18:e2:1c:f2:8e:e5:d5:fa:e1:4a:78:44:
         f2:f1:db:5e:ad:44:d3:f8:58:14:7e:5e:d0:0a:4d:47:33:ea:
         83:bc:1a:3f:a0:dc:90:7c:4e:b8:a9:82:fc:42:1f:f7:37:0b:
         43:1e:9a:bc:11:47:df:cd:2f:e5:90:3e:d9:a2:9f:3e:76:41:
         cc:ba:ba:e2:7b:36:a9:4a:d7:4b:4d:44:11:6e:13:1a:0a:79:
         09:1e:d8:d7:e8:51:21:87:1c:30:6c:f1:3b:3e:0f:1c:ea:d7:
         42:e7:84:d9:f8:41:6e:0d:ea:2f:c9:3c:55:2f:1e:36:6d:f4:
         fb:89:13:e2:8d:3e:5a:69:12:07:14:98:05:31:8f:34:7f:fa:
         81:38:08:2a:ea:88:39:ce:76:a4:f5:79:b2:5c:8e:b4:d2:da:
         9a:30:91:7d:d1:76:56:66:e7:ce:2b:c7:50:23:1a:b9:90:f4:
         ba:1b:42:42:b6:20:5f:05:28:5e:b1:8d:17:19:99:d1:e3:7a:
         a2:b9:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 05:29:03 2025 by rpki-client