Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b25f887a-06d0-370c-9d08-efb447436caf.roa
File:                     b25f887a-06d0-370c-9d08-efb447436caf.roa (raw, json)
Hash identifier:          FNlwAtskYKS8Qj7mdc2RFkcZHX/CAzjdk78ILFH4N7M=
Subject key identifier:   F9:75:8C:58:10:BF:C0:82:59:9E:A5:B4:80:D3:D2:12:0B:E1:52:8F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A093AAA4B6C0D3EE76EBC5240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b25f887a-06d0-370c-9d08-efb447436caf.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     396566
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:aa:4b:6c:0d:3e:e7:6e:bc:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=06710d9c-8ade-4b69-95b1-93cc3893c666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e2:f8:35:a8:96:6f:29:3c:e0:e9:e1:20:0d:
                    19:8d:c1:66:e3:0c:a9:c1:e4:90:75:a9:e6:0e:04:
                    b6:24:2f:52:88:91:4b:1f:24:56:70:66:dc:31:1a:
                    18:39:0f:14:84:e2:71:03:7b:0c:8d:5b:f5:34:25:
                    e6:e9:5a:7c:e1:45:0c:c7:fa:51:66:b1:76:69:ee:
                    49:36:38:11:f6:b4:1f:22:05:c9:a7:78:cc:17:1d:
                    0f:54:cf:7f:2c:12:63:bf:f9:88:6b:3f:8d:1d:36:
                    02:25:16:95:b4:6e:b3:bc:8b:0b:94:f6:cd:5e:91:
                    3a:91:98:c1:11:b5:d8:13:ad:61:1e:71:37:17:24:
                    3b:c8:34:eb:c6:97:9f:40:7a:5b:aa:46:e7:ba:24:
                    77:ed:39:4e:7e:42:e3:d4:90:2b:43:fc:86:31:c2:
                    b6:20:9c:b9:cf:0a:3f:74:6e:8e:7b:9e:f9:71:97:
                    be:7f:29:0d:3f:aa:77:80:75:9e:94:0a:26:e4:48:
                    b9:11:ef:4f:00:45:db:bd:ba:ee:c6:fc:ae:c7:90:
                    09:3b:bd:99:f5:2c:98:d6:d6:95:14:67:60:86:0e:
                    72:2d:aa:75:af:96:d4:37:95:05:64:7c:02:f5:09:
                    e2:8d:e5:fb:ae:e3:fd:67:93:86:f6:51:05:12:eb:
                    3c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:75:8C:58:10:BF:C0:82:59:9E:A5:B4:80:D3:D2:12:0B:E1:52:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b25f887a-06d0-370c-9d08-efb447436caf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e6:3f:c2:21:0f:7d:d7:dd:a3:de:ce:d8:d1:3e:68:0e:3d:
         f4:22:a5:b7:0b:97:84:52:86:c3:0b:ba:12:03:43:db:0f:e0:
         6f:fb:53:18:8e:a7:a6:04:91:6f:17:26:24:e7:a6:3b:cb:f5:
         67:ac:20:56:87:98:c4:0a:c5:36:75:bd:2f:b8:2d:30:40:cc:
         ce:24:67:7c:26:64:6c:9e:47:5e:e3:3e:73:ea:5f:36:d2:9a:
         56:98:6a:50:12:38:14:ea:c9:81:96:57:1e:8e:e5:29:38:34:
         aa:38:67:08:e7:d0:cb:9a:90:ff:98:38:f6:66:f9:3c:ef:89:
         e6:b5:54:d4:5b:14:c7:2f:48:f2:cb:83:0e:07:ad:ad:1f:c1:
         02:03:06:b5:0f:e4:7c:c1:20:a1:0c:a3:f1:b6:1f:b9:86:a9:
         79:64:45:91:db:ca:03:25:4d:ec:50:e5:8c:14:3b:df:9c:56:
         0b:d2:7c:49:be:95:c5:c7:c2:51:5c:d7:5f:c3:9f:f2:e3:f7:
         02:9a:06:6e:bf:9c:bb:99:dd:14:b1:ab:22:75:8a:7d:c6:73:
         fc:26:4c:b7:42:12:07:70:1e:2f:ec:59:72:5a:cc:9a:f6:ea:
         73:b1:6f:90:c8:f2:2b:93:99:3e:8f:61:8c:bc:60:ba:3e:19:
         8a:09:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:41:36 2025 by rpki-client