Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb025afb-68a3-3756-a6bd-43794d486166.roa
File:                     eb025afb-68a3-3756-a6bd-43794d486166.roa (raw, json)
Hash identifier:          uSO/Eq9ArCvpmP38vC/MxUspWg7r6+WBMNUHu/m0cq4=
Subject key identifier:   82:A9:32:2E:7C:AF:31:41:BF:6A:C6:49:70:98:9B:64:3F:0A:BB:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C3668B4CBF0F403AE7309840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb025afb-68a3-3756-a6bd-43794d486166.roa
Signing time:             Tue 06 May 2025 12:43:04 +0000
ROA not before:           Tue 06 May 2025 12:43:04 +0000
ROA not after:            Mon 04 Aug 2025 12:43:04 +0000
asID:                     396826
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:8b:4c:bf:0f:40:3a:e7:30:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:04 2025 GMT
            Not After : Aug  4 12:43:04 2025 GMT
        Subject: CN=0b687821-2879-4b9a-ac32-9e20bf56628c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8b:d9:36:bf:ab:ce:2a:03:fd:bc:a8:40:56:
                    af:fc:69:78:88:7f:6b:3f:96:5c:9c:d1:5e:f0:70:
                    2b:37:21:1e:40:c6:57:9e:0b:20:4d:66:62:4c:2b:
                    77:ac:b9:7a:1e:09:8c:63:53:8e:68:16:88:3a:0b:
                    ac:2d:4f:1a:74:9a:6c:b8:49:79:74:d0:61:91:cc:
                    27:89:76:4c:82:10:76:6f:4e:d1:de:0d:6b:1e:5e:
                    5a:d4:47:b0:27:f5:a7:5e:d5:7f:a4:26:a4:ae:af:
                    38:e2:f4:50:1b:85:b5:cf:9e:62:b8:75:cd:88:f3:
                    aa:02:e0:21:41:8c:cb:1f:3f:84:42:7f:ca:06:0b:
                    24:00:a8:72:54:ef:42:ef:4b:d1:e7:9e:ab:9f:02:
                    1a:b7:37:cb:0f:f1:c7:38:27:1a:0e:18:65:40:f2:
                    21:ec:0d:b2:a6:59:8d:81:95:42:d9:79:b9:2b:56:
                    c1:87:4b:21:06:8b:63:b8:3a:89:85:ed:9d:24:29:
                    c3:6f:cc:a6:ff:85:58:63:66:a7:28:d2:da:11:6b:
                    57:71:c5:8a:9e:2d:23:59:06:c1:e3:c6:f5:a6:04:
                    b9:bf:f3:e8:f1:ea:e2:32:0f:da:e8:be:98:d5:e1:
                    ee:9b:f8:ea:88:ce:f1:b5:32:06:2d:54:64:b5:7f:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:32:2E:7C:AF:31:41:BF:6A:C6:49:70:98:9B:64:3F:0A:BB:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb025afb-68a3-3756-a6bd-43794d486166.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:4e:27:77:e2:74:cf:f4:00:eb:dd:11:88:7e:0a:ea:7e:1c:
         89:9e:4c:bf:29:7c:7f:15:6f:1d:bc:b0:f2:71:78:7c:55:19:
         99:8f:0e:54:de:7e:b4:59:6f:9d:e9:33:ab:cd:52:ae:58:70:
         84:75:1b:80:e9:57:7b:1b:ba:95:45:00:09:5a:3f:6e:64:9e:
         97:0c:6f:44:a9:37:92:1e:a0:7e:4e:47:6a:4a:ca:a8:bf:2f:
         ba:20:bc:bf:a1:ae:fa:1d:78:05:1a:f2:94:8e:28:71:da:c4:
         d3:10:96:68:55:7c:43:35:76:aa:69:27:70:ca:87:25:2e:31:
         6a:18:da:dc:72:4a:a8:f6:4f:f5:9e:24:9f:37:b2:3e:c3:78:
         7e:d2:a8:8b:06:8a:b0:2b:4e:2a:21:22:8b:b7:c0:5c:77:00:
         35:48:b3:b1:cc:90:ed:01:15:f5:88:33:d2:d8:6b:62:cd:15:
         52:d4:e7:0b:0b:e8:e3:cc:7c:a4:75:50:e4:92:7a:74:d7:51:
         d1:2f:18:df:f0:8f:3f:d3:ff:5b:8b:70:89:a6:35:2f:6e:43:
         39:c6:13:3f:08:24:1c:bb:d7:d5:56:18:13:b9:35:be:5a:2d:
         a5:07:c7:1f:0c:44:cc:91:60:ed:fd:d5:48:60:29:73:3e:cf:
         55:cf:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:58:40 2025 by rpki-client