Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1966ec84-655f-37f9-8ee5-0b5151539718.roa
File:                     1966ec84-655f-37f9-8ee5-0b5151539718.roa (raw, json)
Hash identifier:          a/Not6lrQShT/IIbvv2IO1I5074VIcGBFjm6BxIi04M=
Subject key identifier:   47:CE:D8:CB:06:76:71:16:2B:1A:81:D3:90:92:F1:F1:3D:E1:ED:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849DC7DAFE44A00B3E7AA6253C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1966ec84-655f-37f9-8ee5-0b5151539718.roa
Signing time:             Thu 15 May 2025 12:24:54 +0000
ROA not before:           Thu 15 May 2025 12:24:54 +0000
ROA not after:            Wed 13 Aug 2025 12:24:54 +0000
asID:                     27544
IP address blocks:        2001:500:122::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:7d:af:e4:4a:00:b3:e7:aa:62:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 15 12:24:54 2025 GMT
            Not After : Aug 13 12:24:54 2025 GMT
        Subject: CN=67f0d6b7-b9f9-4084-8e60-ea6a002ae234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0e:16:38:2c:8b:67:16:4f:4c:0c:48:0a:aa:
                    95:b7:f6:53:ce:e4:e8:de:c0:93:59:7f:ee:c6:4f:
                    7a:90:88:1f:f7:f5:12:57:b6:7b:0a:86:82:aa:2b:
                    ef:eb:d0:a0:a2:e2:d1:ee:e3:6c:42:9d:2b:01:6b:
                    77:d3:6d:03:30:34:46:96:56:72:15:7e:5a:9d:5c:
                    0f:db:bf:d9:03:4c:6e:3b:be:c5:68:c6:68:8c:47:
                    28:b5:7a:14:4b:2e:90:9c:10:f9:aa:6a:b1:de:96:
                    b2:1f:6f:d5:c8:23:4a:bc:b0:7b:0a:80:d2:f2:80:
                    fd:e5:1a:29:56:dd:ad:91:d8:92:0f:92:51:60:e9:
                    e0:f3:0f:a0:8a:8b:d7:bd:7b:70:39:a7:e9:dc:98:
                    ae:e3:46:9d:fa:1d:8c:b5:ea:db:e8:45:22:4a:51:
                    bd:e7:9a:e0:ca:15:62:1a:a5:cf:44:f4:18:8e:e9:
                    60:f3:ca:ac:e5:74:94:d0:f7:6f:58:37:9c:ed:c2:
                    33:a5:cf:81:3a:4e:11:0c:63:46:6f:b6:66:35:11:
                    e2:80:23:d1:3d:07:47:a7:ba:35:a8:fe:4a:74:c9:
                    c9:50:82:1a:08:08:b8:c2:5f:ff:15:f1:63:1f:72:
                    d3:07:12:8a:41:5f:91:f1:a7:08:9e:9f:49:a7:76:
                    dd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:CE:D8:CB:06:76:71:16:2B:1A:81:D3:90:92:F1:F1:3D:E1:ED:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1966ec84-655f-37f9-8ee5-0b5151539718.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:36:d2:76:99:d5:3e:b2:c4:a9:6a:f8:d9:9a:dd:d7:53:77:
         23:32:24:7a:00:9e:72:aa:c8:6c:e9:1b:35:90:1e:1e:cd:ec:
         08:00:27:13:05:2b:b5:d9:86:cc:53:81:aa:08:eb:8a:97:73:
         83:fb:80:b2:9f:da:a3:9a:89:e6:c8:ba:4b:7b:54:7c:0a:8c:
         79:c0:9a:64:13:14:c3:f8:a9:6b:32:30:41:1f:59:7b:93:8a:
         eb:ba:7d:c6:10:5a:45:64:cd:7f:6f:eb:4f:09:c4:4f:78:29:
         d8:af:6f:a5:72:26:05:49:d1:96:84:02:0c:33:3b:f3:10:5e:
         1c:34:14:33:04:bb:54:ca:16:3c:8d:2d:76:9e:28:ac:8b:14:
         21:11:34:b7:ae:03:89:f0:a8:ff:7b:b6:48:6a:9e:e9:5c:26:
         ee:41:05:11:6b:90:3c:59:3c:3b:57:88:cf:cc:fa:cc:80:dd:
         25:71:30:4d:8c:df:39:c9:9c:14:50:db:2f:08:d8:2f:9f:ad:
         de:d7:09:70:48:d2:5b:9e:50:9a:5b:4e:83:d2:e9:fb:2d:28:
         3b:09:61:95:26:7e:ff:b0:a0:f8:be:5a:bd:96:25:ac:74:65:
         2c:89:82:6b:d1:04:2b:20:34:c1:47:1b:a5:6f:45:9a:e4:f0:
         5c:ec:94:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:53:08 2025 by rpki-client