Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f073baab-1a24-3e8f-9991-122cbe8b828e.roa
File:                     f073baab-1a24-3e8f-9991-122cbe8b828e.roa (raw, json)
Hash identifier:          6Lk4tDScpvkEbnzX2+v0kFfrqVfrI+6dj258Pgaba9M=
Subject key identifier:   7F:40:94:5F:06:1C:64:F9:53:8B:27:73:BF:CB:61:F8:FC:98:F4:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C3668EEAB0734F7290A56600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f073baab-1a24-3e8f-9991-122cbe8b828e.roa
Signing time:             Tue 06 May 2025 12:43:06 +0000
ROA not before:           Tue 06 May 2025 12:43:06 +0000
ROA not after:            Mon 04 Aug 2025 12:43:06 +0000
asID:                     36617
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c3:66:8e:ea:b0:73:4f:72:90:a5:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  6 12:43:06 2025 GMT
            Not After : Aug  4 12:43:06 2025 GMT
        Subject: CN=f9763f73-6210-4f3f-8ba8-b0abdb87cf77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:70:b0:5e:a3:0e:29:12:e9:14:f4:fc:a0:
                    4c:01:8f:69:d4:e6:17:ea:eb:2c:5a:22:d0:00:71:
                    bc:3e:b1:74:aa:f0:ba:d0:59:61:9f:ee:7a:f2:e5:
                    9a:8a:b9:85:e7:fe:92:6e:a7:39:36:d3:94:f5:48:
                    a6:c6:62:2b:4c:88:25:74:23:16:ba:84:fb:bc:d4:
                    99:4f:24:22:d1:0f:81:2b:f3:d5:98:04:df:e2:a6:
                    50:9c:37:ec:10:8e:fe:b4:02:8d:aa:5e:d3:85:81:
                    85:b2:52:d6:c3:50:45:c2:3c:4d:4e:4c:2e:7b:d9:
                    aa:2b:04:9a:4a:7e:ab:59:78:b2:ab:c5:86:26:42:
                    63:d7:1b:f6:90:91:ed:46:42:84:03:f0:66:59:e7:
                    d2:ae:8d:d8:32:c1:57:2c:ce:0a:5e:a6:57:15:9a:
                    b5:80:bb:75:a7:32:0f:42:11:da:f2:41:14:dd:17:
                    d2:32:7c:aa:df:eb:cd:9d:60:7f:e4:6e:3f:88:d3:
                    74:7b:64:84:29:0c:36:63:cc:7c:0b:bc:a3:a9:25:
                    8a:cb:5e:7c:7d:53:98:82:21:29:e3:a6:57:32:4c:
                    28:73:e2:77:8a:e6:62:ba:45:eb:6a:06:40:8a:85:
                    3b:ad:ed:f2:dd:f0:69:13:83:5e:0a:01:b4:8c:da:
                    ad:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:40:94:5F:06:1C:64:F9:53:8B:27:73:BF:CB:61:F8:FC:98:F4:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f073baab-1a24-3e8f-9991-122cbe8b828e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c9:fe:ba:fa:30:f7:c6:c7:d5:fb:09:ff:ed:9b:90:63:fa:
         bb:b0:1e:ee:27:de:7c:d0:c7:1e:38:86:38:3d:69:49:a1:13:
         40:10:ef:14:80:c4:fa:8a:72:d6:b9:24:76:d6:7e:8a:f2:f8:
         3f:34:0d:98:7a:a6:9f:33:87:19:cd:9c:f5:60:64:db:38:e4:
         fc:c1:c8:f6:db:af:ab:14:05:6e:20:93:b8:a0:fd:a4:b4:5a:
         53:89:4c:d4:47:a0:5a:20:9f:64:30:57:7a:bc:15:bd:c5:bb:
         4c:2b:7a:81:01:ee:d5:f5:17:e8:9d:44:28:06:59:0d:27:b6:
         f4:21:14:17:10:92:76:19:5f:fc:c1:bc:99:ec:f0:6f:56:4c:
         3d:84:be:b2:b6:f5:24:2a:65:bc:ec:f9:d1:08:51:72:f0:de:
         6a:4f:5c:56:1a:db:e4:fd:c1:a4:7c:79:1a:db:60:af:59:77:
         6b:5e:3c:ed:a2:ac:90:74:0d:89:a2:59:8c:90:29:75:f8:7c:
         3e:64:9e:e0:da:06:18:54:67:b6:6c:b9:aa:17:4d:44:d0:57:
         e7:ca:a0:be:a7:26:bd:6c:a2:79:38:62:ef:9b:2d:8b:a0:3d:
         26:52:21:81:ce:04:eb:bb:61:57:c1:47:36:7a:59:12:dc:d2:
         8a:73:84:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:22:31 2025 by rpki-client