Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb4d0c11-c5e1-3210-af43-c29c8062ee10.roa
File:                     bb4d0c11-c5e1-3210-af43-c29c8062ee10.roa (raw, json)
Hash identifier:          qBc7tdVf/lxYZ+A1goZ+Z+srmcmpdRVak/uqIPBc4Hw=
Subject key identifier:   1B:82:C0:4F:FC:AE:E9:2F:37:E7:10:AA:46:FE:26:55:74:BF:59:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307E00F8604F72F8D37740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb4d0c11-c5e1-3210-af43-c29c8062ee10.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     397202
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7e:00:f8:60:4f:72:f8:d3:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=5e0afbc8-1bcb-48b9-a952-ed68f5dbc9ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:74:ef:cf:17:59:b5:28:35:66:c9:f4:9f:
                    fd:0c:d9:4d:34:3a:73:f7:71:38:6b:17:ed:bc:c7:
                    c9:7f:21:80:d4:b2:ce:2b:4e:71:2d:03:aa:58:51:
                    be:3b:88:ed:dc:1d:00:0e:a5:62:ec:1c:73:99:29:
                    68:7d:3c:e8:90:80:d4:2c:ee:58:cb:d7:4c:14:5d:
                    64:6c:0e:55:e3:1a:83:0d:e6:33:7d:50:47:f2:5a:
                    d8:06:6d:98:00:24:3c:cb:ed:97:ae:6c:45:9f:f2:
                    e4:be:94:60:52:e7:5a:ed:8a:4e:92:74:65:7d:0a:
                    f5:14:43:9a:b6:a7:b5:44:b5:02:f6:fc:5d:72:eb:
                    c5:ec:9b:40:b6:a9:62:3f:4e:ef:37:63:ee:19:89:
                    9e:6c:54:53:5f:15:44:f4:fc:77:88:30:b3:aa:46:
                    e7:ba:05:97:3a:cd:c1:5d:60:48:7d:d2:e1:b1:64:
                    36:38:25:5c:0f:4a:82:f4:32:b7:1a:d4:e7:25:1d:
                    f6:95:3c:c7:1f:f5:4e:f6:42:bf:cb:a5:93:01:8a:
                    85:e7:0f:44:72:c1:37:71:ab:9c:24:d5:c8:6f:02:
                    49:41:e5:51:d8:5e:93:87:68:12:84:77:41:4d:64:
                    2e:23:5d:aa:af:00:6a:af:98:d7:1b:51:6e:7b:1d:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:82:C0:4F:FC:AE:E9:2F:37:E7:10:AA:46:FE:26:55:74:BF:59:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb4d0c11-c5e1-3210-af43-c29c8062ee10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:ab:47:1d:c7:3b:43:2d:0a:44:33:ea:05:48:d2:1b:49:41:
         c6:4e:57:c1:c9:33:46:e2:58:6f:02:04:e3:b1:cb:5c:ed:20:
         30:dc:ed:ec:cd:7f:bd:a2:9b:5c:1e:1e:a9:7e:b3:88:91:07:
         ab:77:7b:e6:d0:43:9c:59:f2:ce:b1:ca:89:8d:fb:90:7b:6a:
         51:06:d3:c7:11:38:51:7b:44:d6:48:42:54:9b:e7:74:24:44:
         db:a7:ba:29:d1:1b:74:a6:2a:02:86:3e:33:1a:b2:62:ee:56:
         cc:ad:b4:84:12:bf:46:b7:93:dc:7d:46:c6:73:7f:f0:64:6e:
         1e:f2:9d:68:52:b4:83:41:24:be:56:60:da:50:49:56:8b:e4:
         16:d5:d7:85:a4:2b:2d:48:98:52:e2:f3:e6:66:a0:a1:7b:9c:
         7c:e3:38:3b:4e:e4:bb:34:1b:06:0d:e0:31:32:a7:4b:b8:89:
         6a:4d:59:1c:6b:08:41:66:9b:b3:6d:d5:4d:66:13:79:4d:a8:
         3b:ec:9c:e9:86:e4:cf:0c:b4:21:cc:90:04:7d:fe:86:2f:b4:
         70:fb:ab:46:64:72:89:c3:ec:fe:2b:73:31:91:19:5c:02:46:
         66:c9:f5:cd:a0:45:5d:6e:f4:b1:72:b0:de:7e:4e:ff:0c:22:
         b0:28:6c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:29:44 2025 by rpki-client