Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a465492f-04ad-3601-a9e7-c503454303a0.roa
File:                     a465492f-04ad-3601-a9e7-c503454303a0.roa (raw, json)
Hash identifier:          o79UVpu698x7uLhkIfYhU/nDPcpVldr2JdzaCAp38Z0=
Subject key identifier:   4C:8D:87:B4:AA:68:64:8D:EC:9E:92:FE:9D:BC:81:D3:B9:67:A1:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB00D18A239726B5536B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a465492f-04ad-3601-a9e7-c503454303a0.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     396577
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:00:d1:8a:23:97:26:b5:53:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c3a9e989-49df-4cfb-ae19-e7b6c873fb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e3:ae:94:1f:20:c1:eb:78:02:71:00:89:e0:
                    e2:04:e0:3b:79:48:c2:10:5c:35:a3:90:f1:e0:35:
                    d9:15:98:38:eb:05:4f:7f:c8:df:5e:c9:a6:10:e2:
                    d9:ea:84:9d:cc:68:1d:e0:94:13:93:48:b0:cb:7c:
                    35:aa:24:2f:31:6d:fa:d8:8b:ec:06:a4:91:44:39:
                    8b:55:74:90:bf:24:45:cc:52:69:b3:2a:10:80:4a:
                    c9:44:ed:b9:82:25:8c:96:ff:54:0b:c2:e6:ef:91:
                    6d:11:b0:47:56:5b:12:5a:f9:39:69:f2:92:e4:cb:
                    04:b6:59:ff:02:ab:97:01:b1:f4:d6:dc:c1:17:f1:
                    16:3b:a8:15:fc:8f:8a:59:70:8b:7a:51:11:f4:f9:
                    99:29:88:e5:59:2a:a7:e7:7f:0c:a1:8a:ce:45:fa:
                    7e:7c:fa:30:55:58:22:cb:6c:47:e4:f0:67:84:e0:
                    02:8a:58:ed:cd:c6:3e:c6:bc:3c:9b:c4:77:92:7f:
                    79:09:f1:cf:b3:c7:65:1b:45:99:02:4a:59:f4:3a:
                    4f:d4:3d:a9:d6:d1:21:ab:94:61:8c:91:0e:bf:00:
                    53:b4:56:0b:70:a3:3b:69:ae:16:14:f5:5f:9c:92:
                    f6:84:38:2e:13:c7:d7:bd:b6:09:a1:da:4a:56:8b:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8D:87:B4:AA:68:64:8D:EC:9E:92:FE:9D:BC:81:D3:B9:67:A1:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a465492f-04ad-3601-a9e7-c503454303a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:85:43:d5:00:7f:1b:53:ae:01:47:77:9a:bf:a1:cd:81:8b:
         cc:61:38:73:eb:5c:28:b0:ba:69:05:2d:e3:65:db:64:87:d5:
         65:7b:b6:39:c0:48:8e:eb:8b:33:12:21:0f:d9:32:89:e7:44:
         bd:4c:e0:a3:2f:fc:cb:cd:18:88:eb:43:29:a2:cc:9e:6f:09:
         77:34:5b:95:4c:7a:f2:47:3f:cf:94:83:82:cf:be:fc:ff:de:
         7d:9d:4c:e5:07:86:b6:56:de:a2:bb:88:51:1b:47:d6:77:7e:
         6e:fd:77:a7:7d:1b:87:a3:a6:d1:63:ca:1c:0e:67:14:35:19:
         04:79:d5:2f:93:a7:48:ce:50:22:55:09:ea:db:49:61:a6:30:
         e9:72:f6:5c:20:a2:ca:6e:a7:b2:12:da:ab:b5:6b:05:68:39:
         50:1b:0e:b5:95:1f:67:f7:31:fc:b5:4e:26:59:1f:91:13:82:
         8f:f9:e5:07:66:53:cb:bf:7c:87:01:9e:ab:67:12:c1:00:26:
         b3:d3:ac:d7:ed:d9:b6:0e:75:04:3a:88:ae:3c:f4:03:5c:73:
         92:77:e1:75:06:ef:70:a0:d5:35:b5:b9:4c:1d:68:2e:94:f1:
         0d:32:ce:69:54:15:e0:06:32:a6:5f:d8:04:9c:af:e8:68:01:
         f7:a2:a9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:00:17 2025 by rpki-client