Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39b6ea1b-144a-360d-8052-8bd64fe77dd9.roa
File:                     39b6ea1b-144a-360d-8052-8bd64fe77dd9.roa (raw, json)
Hash identifier:          lDyh+Y2jad1L+fyDD8a5hRq2faqctHZgfWO4XWA0GwU=
Subject key identifier:   16:E6:1D:12:E4:31:C9:03:17:B5:15:60:67:65:1E:40:9C:96:51:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1895620FF6707F2044D0FCA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39b6ea1b-144a-360d-8052-8bd64fe77dd9.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     396546
IP address blocks:        2001:500:120::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:62:0f:f6:70:7f:20:44:d0:fc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=5d581f5f-ff19-4a50-81bd-dbc99ff3fac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:c3:d6:0e:b1:05:48:8e:e7:31:96:03:ac:
                    18:3b:cc:ca:aa:04:b3:29:72:0d:26:77:b7:28:fb:
                    32:c0:43:72:6b:ac:fe:f7:28:11:6d:50:67:75:d8:
                    87:9f:73:96:9c:40:92:5b:26:85:41:38:0f:12:3c:
                    d5:d1:54:18:e3:89:29:db:f9:17:83:12:a0:d4:8c:
                    49:f7:0b:d4:cd:b7:d8:f7:28:4f:97:ee:7b:56:08:
                    32:65:7c:17:91:4a:5f:5d:4d:e5:05:26:bb:ca:e7:
                    b5:30:fc:e8:43:fd:a2:bd:a1:da:0f:8b:c3:59:5c:
                    b4:9b:50:df:b3:d9:60:d3:a5:a4:78:1a:d2:42:78:
                    d5:8d:43:78:4d:d1:a2:09:f0:2d:5c:bb:27:c9:1e:
                    62:1a:bd:72:ee:5d:6b:86:6d:67:d2:81:f2:fe:cf:
                    49:c9:a9:1f:d5:4d:da:ed:3d:f5:38:7c:43:19:2d:
                    f3:3b:10:d7:05:9f:22:92:ba:b0:d5:d2:e9:9c:c6:
                    34:de:6b:d0:53:c2:04:6a:2e:50:6b:4f:8f:4d:fc:
                    8b:a5:80:d4:a4:11:38:ab:b2:bc:a1:d7:78:12:10:
                    de:d9:75:99:f7:40:f7:50:36:e5:a3:0d:d8:dc:ba:
                    45:7b:d3:29:1d:6c:44:7c:65:f8:8e:e3:ca:65:1b:
                    28:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E6:1D:12:E4:31:C9:03:17:B5:15:60:67:65:1E:40:9C:96:51:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/39b6ea1b-144a-360d-8052-8bd64fe77dd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:120:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:65:f1:c1:d7:f8:ef:5e:2b:09:8c:49:47:01:fe:41:06:06:
         78:83:c0:ea:ed:ba:3d:7e:33:4c:71:be:3c:a5:5b:5a:69:4a:
         77:ef:bc:c7:a8:b2:da:05:cf:bf:bd:49:61:86:38:f1:d0:52:
         5f:91:65:95:d2:6c:1b:a9:a7:2e:84:fe:e9:e5:46:bf:bb:6a:
         dc:27:22:7b:89:78:d6:d8:07:48:8a:f8:c2:46:a1:00:78:64:
         e9:16:cd:76:08:1f:86:9b:36:f7:54:9c:c3:17:c7:92:8f:a1:
         df:f5:6a:0c:a4:35:b6:a3:f2:ec:95:8d:37:e2:dc:cf:e6:90:
         54:fe:85:c6:19:ca:86:7a:10:4b:6e:d0:f8:e0:36:a4:46:1e:
         cb:d4:0d:8e:79:76:12:7f:8e:37:a1:92:15:98:58:3b:68:d6:
         a3:07:13:b3:ff:dc:b1:a7:3e:63:d0:dc:9b:23:99:5c:43:db:
         f1:b7:50:0b:59:07:3f:bd:26:a5:d5:9e:b0:df:4b:80:6f:df:
         63:04:89:23:6b:29:53:c2:6d:42:35:ff:79:fc:df:a7:4e:d7:
         07:92:12:e7:03:de:a1:e7:df:5a:d8:4f:51:d1:c0:4b:73:cb:
         99:6c:a6:06:ca:cd:83:a5:19:3f:24:9e:fa:42:a0:ad:6d:0c:
         ee:39:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:01:31 2025 by rpki-client