Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa
File:                     9f57b5fe-9a49-347f-99a9-78749563a00a.roa (raw, json)
Hash identifier:          2VVmMEUrtpsdyHGGGmamFgnQwIE/I+F0ezzmOzuGpz0=
Subject key identifier:   B5:2A:95:B9:2B:B6:E6:3A:68:09:8F:9E:68:60:76:CA:59:B2:8F:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A308158F90BAAF1F7F36E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     396611
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:81:58:f9:0b:aa:f1:f7:f3:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=5a4f5193-be9a-45c2-bdde-5082d2a8ace2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:62:97:d6:0b:c4:de:9f:28:b0:ae:59:d9:
                    2b:41:bd:43:fc:c6:1d:6c:59:78:fc:8b:1d:5e:4e:
                    c1:2e:24:7f:e3:c1:2b:ac:32:25:a7:0e:5a:b6:cd:
                    66:bb:c6:3a:08:7a:1c:c7:23:24:d7:d4:67:47:84:
                    64:37:5e:c1:2d:74:c6:14:22:f5:53:35:74:16:6d:
                    d8:5f:a6:be:3b:db:94:c0:9c:38:da:5b:ba:85:81:
                    ea:02:15:72:40:25:1c:c1:96:d5:7c:5f:27:a9:8a:
                    5d:ba:19:fc:83:e2:70:54:ab:d4:8a:03:ba:91:7e:
                    bf:16:36:0f:a6:4d:7a:33:af:3e:ae:4e:21:8b:52:
                    9e:d0:ae:87:5c:4a:ef:60:ce:39:09:87:e5:30:c8:
                    17:d5:4d:0d:cf:11:b9:ad:db:03:5b:cc:35:d8:db:
                    8b:6b:76:5e:55:26:ea:66:8f:56:50:7e:de:e3:a1:
                    d3:6d:55:f4:47:84:9a:fd:8f:d1:cc:5d:ca:52:29:
                    50:bd:75:ce:f7:99:ec:fe:3a:b5:a8:c3:16:60:66:
                    00:72:02:25:86:19:d1:ae:e6:4b:b2:88:64:0c:55:
                    d5:98:d6:46:8e:ed:2d:f1:49:d2:0b:f3:87:19:06:
                    b2:50:7b:4f:bd:df:77:c9:ee:db:a2:1b:42:80:f5:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2A:95:B9:2B:B6:E6:3A:68:09:8F:9E:68:60:76:CA:59:B2:8F:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f57b5fe-9a49-347f-99a9-78749563a00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:8e:57:11:26:4e:3d:03:88:a3:ad:67:03:c5:ff:41:0b:
         cc:07:dc:83:fb:24:0a:4b:26:9f:7a:9f:73:14:e0:98:df:53:
         04:2c:95:10:fa:05:9a:8c:fc:0e:2f:91:02:85:55:3d:89:e0:
         ff:c7:9a:fd:06:be:99:1c:46:3f:80:97:ae:d0:6f:fd:13:32:
         e7:ab:83:c5:76:4e:1a:7d:52:8b:06:02:04:35:5e:bf:c5:b4:
         6d:f0:c8:98:55:69:ff:e7:a9:88:18:fe:03:a3:04:d1:41:92:
         71:6d:d6:e5:6f:27:e4:3b:d2:09:96:76:4f:42:b1:2d:fb:15:
         1b:60:61:03:62:80:d6:20:51:99:ca:4c:5d:82:65:0b:ce:1b:
         9f:d8:5e:ff:6f:5d:37:b7:c7:14:f3:9e:4b:0d:1b:25:24:ac:
         b5:2b:97:8f:05:28:0d:d4:f5:3f:39:25:b7:f5:3c:9d:9a:c0:
         b4:02:70:1b:04:c5:28:16:02:86:84:2e:8c:5a:ae:e4:06:61:
         01:99:45:61:d9:c0:45:81:ec:ab:96:17:12:11:8a:05:a5:78:
         35:c9:ba:49:fc:78:c3:c3:ff:75:ba:e4:70:f5:42:92:ac:d1:
         6f:77:7f:f3:15:03:a3:60:a2:7b:a5:01:5e:b5:f2:9f:43:46:
         8f:29:90:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:41:01 2025 by rpki-client