Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48c4b811-16a7-33d5-8f17-383a4148cdb5.roa
File:                     48c4b811-16a7-33d5-8f17-383a4148cdb5.roa (raw, json)
Hash identifier:          6WIWbvHwdxZaRzqLPaaBzoYhlhGYVcM1nOCB96ziJFw=
Subject key identifier:   A1:D8:58:2F:46:F5:0C:C4:0E:3B:89:31:B0:0D:1A:0D:F6:0C:BC:9B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB2A93C43767273276F800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48c4b811-16a7-33d5-8f17-383a4148cdb5.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36632
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:2a:93:c4:37:67:27:32:76:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=79fdb782-523f-40c0-b18a-d33cc897f57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cf:5c:6e:e0:b3:7b:ea:ec:04:f6:ad:ec:64:
                    a3:3e:de:26:8d:f6:43:79:82:33:a5:89:35:13:40:
                    06:29:53:67:67:65:80:7c:e2:e5:e7:fa:e4:30:69:
                    22:d2:ed:a0:50:ba:03:35:51:60:3c:97:75:17:e0:
                    a1:cd:20:32:e7:0a:47:d4:c9:3d:23:88:e5:52:9a:
                    bb:95:4e:1a:c5:6a:81:6e:e0:36:b9:60:1e:ce:56:
                    9f:31:54:e8:3a:87:49:3c:7a:d0:ba:a2:5a:c7:37:
                    00:3b:4f:1c:c1:7a:61:07:ac:79:b6:35:09:17:ee:
                    53:09:bf:53:a5:ab:3e:89:fe:1c:49:09:a7:2c:2c:
                    03:e7:d3:a7:04:6c:63:d4:9f:23:80:af:b0:9c:c9:
                    f3:ca:16:8c:7c:5c:30:7c:25:02:5b:20:2a:1b:86:
                    13:81:07:0e:f0:e2:85:6a:e3:49:ce:5a:80:42:56:
                    b5:d4:7b:c6:66:80:7a:40:0d:a3:06:25:dd:7f:62:
                    75:99:6a:f1:41:fa:40:80:70:84:a8:6c:33:ff:36:
                    bd:c3:1c:11:49:a1:e0:d1:1f:3a:e1:07:e5:a7:2f:
                    e2:04:de:ca:1f:0b:82:2d:32:2b:5b:80:c4:be:13:
                    53:07:48:c7:97:45:84:62:ad:3e:e4:da:06:f7:3f:
                    89:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D8:58:2F:46:F5:0C:C4:0E:3B:89:31:B0:0D:1A:0D:F6:0C:BC:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/48c4b811-16a7-33d5-8f17-383a4148cdb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:53:46:27:ee:65:8e:8e:dd:29:ff:68:b5:98:c2:cd:a5:2f:
         49:5a:79:94:b3:80:e1:08:1d:3a:e1:a2:74:1f:54:0e:f8:7b:
         c8:6f:f3:10:21:87:00:15:c9:d2:cd:70:a9:68:22:24:a3:fa:
         67:9d:42:b2:45:b6:6d:1a:77:12:2c:33:56:fa:18:f8:14:98:
         85:de:00:38:0c:b0:84:6d:45:fa:b1:1b:4c:c7:2c:8d:1b:73:
         64:f5:53:19:ff:49:32:58:8d:62:3e:21:0e:52:41:b4:c3:ca:
         4b:63:c8:44:a3:81:65:aa:1b:a9:bd:91:ec:bb:a9:21:36:22:
         fe:68:7d:ba:bd:a5:1d:6d:db:14:cd:76:d0:db:f8:b7:91:d2:
         5a:d1:61:d7:a4:79:84:d1:46:cd:fd:de:62:eb:34:ae:64:10:
         8c:a2:e8:d6:b1:49:db:9c:be:56:e8:82:79:a8:0a:3f:3f:7a:
         81:76:f4:f9:60:a5:85:50:42:77:f9:8e:d8:47:25:e6:22:e0:
         46:a7:49:06:52:77:f4:ee:40:4b:10:f5:32:5f:a1:b0:b4:4c:
         ce:34:5b:2d:94:73:9d:64:cb:2d:0f:b2:52:dd:93:55:f2:b8:
         88:d0:fa:0f:ad:d6:aa:ad:dc:01:3f:23:7d:d0:6a:eb:5a:77:
         da:0c:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:17:54 2025 by rpki-client