Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d012f6c0-a1af-38e2-b740-27a47b123020.roa
File:                     d012f6c0-a1af-38e2-b740-27a47b123020.roa (raw, json)
Hash identifier:          SP1ONUj5iewao8R5zREfIbcHB72Ij5fBjl9//nKg7kc=
Subject key identifier:   B6:5A:86:A3:C1:87:78:14:DD:66:6F:3F:4A:43:C5:BC:25:06:1A:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A30804A7248164CD1B787C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d012f6c0-a1af-38e2-b740-27a47b123020.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     396613
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:80:4a:72:48:16:4c:d1:b7:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=3f841a11-8753-4a31-aeae-609db5dcfde7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:a0:72:f5:e5:9f:a4:66:43:44:31:81:83:
                    91:f3:75:1b:3f:ea:23:ec:72:71:6a:a2:e7:bc:12:
                    72:2c:fe:96:2d:fa:35:b6:92:af:ea:b0:f8:18:2e:
                    a5:89:59:76:b8:b5:99:c5:f6:7a:c2:ba:57:de:ca:
                    a1:e4:e7:d9:88:4a:4f:0f:0d:d3:5c:7a:61:00:85:
                    65:98:f4:51:5c:ce:04:af:16:f0:6a:db:96:c7:ca:
                    7f:30:c7:72:24:43:1e:4b:48:77:47:e9:ee:25:48:
                    94:bd:10:72:3c:2a:b7:07:87:29:af:a3:52:ad:35:
                    de:5d:3e:5e:14:92:a3:f4:88:1b:77:39:0b:59:28:
                    b6:8a:41:59:cf:8d:8e:c9:e8:30:f4:f4:7e:25:ad:
                    df:ae:da:6d:c2:7e:4b:ef:2f:52:56:80:ab:48:2f:
                    f9:4e:71:bb:86:0d:88:91:8d:f3:ad:d1:48:bb:43:
                    74:fb:76:22:dc:92:23:7c:71:29:03:5f:fb:a7:8f:
                    04:50:bd:2b:8a:73:19:db:6c:1f:f5:fa:ef:bd:04:
                    cf:a4:37:32:bb:0b:6e:f4:73:0f:12:7f:75:2d:1d:
                    87:54:6b:1d:e8:f0:e9:96:31:9d:7d:4d:9a:18:20:
                    64:4c:c6:bb:cb:86:e3:92:fb:de:a9:4d:01:e8:b5:
                    c1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5A:86:A3:C1:87:78:14:DD:66:6F:3F:4A:43:C5:BC:25:06:1A:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d012f6c0-a1af-38e2-b740-27a47b123020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:49:2b:4c:f9:34:6f:b2:0f:59:fd:94:dc:17:01:ec:cc:62:
         6a:cf:24:38:09:5f:cc:d0:ec:eb:83:9e:a3:2f:30:f1:57:f3:
         dd:e5:30:d8:75:85:89:4d:6b:b3:b2:ee:03:b5:f3:bf:fb:38:
         a1:da:d9:86:9d:5e:9e:fb:15:6b:91:d3:c5:2e:af:5a:9f:60:
         ad:37:e6:b4:85:3f:bc:d0:38:dc:c2:09:e9:41:04:41:f7:d1:
         49:77:e8:d3:06:49:83:3b:07:08:cf:19:35:59:90:d3:37:f8:
         0b:58:79:36:6a:bc:d9:ef:15:d9:b5:1f:45:3f:12:2c:e9:39:
         3e:a8:60:c0:be:44:94:e1:0f:3c:9a:4e:b6:2e:01:33:84:7a:
         79:c2:6d:83:cd:cc:89:bd:c7:0a:6b:0e:3d:d1:dc:cd:01:12:
         80:8a:d7:8c:77:c9:5f:38:f9:62:48:df:8b:d0:9a:c0:9a:b4:
         0b:0f:07:a0:4c:99:79:f8:61:bc:18:6a:4e:13:12:c4:d1:3c:
         c7:ca:0f:34:10:ac:e7:a6:99:eb:06:f8:6f:b0:98:97:a4:1f:
         94:b0:05:0f:90:5f:62:f6:f7:a1:cc:5a:3b:61:7f:20:09:76:
         67:b4:2f:88:b0:c1:32:68:11:5b:f5:5d:13:b3:d5:ed:8e:b3:
         36:48:0a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:54:26 2025 by rpki-client