Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b4ebce5-b86a-38bd-8e7f-91cd489dbd32.roa
File:                     4b4ebce5-b86a-38bd-8e7f-91cd489dbd32.roa (raw, json)
Hash identifier:          HZqUOFIh0zAeDwLXcBskpKz/AIFGFcqY7ppN7mqjJdI=
Subject key identifier:   7E:13:52:8B:70:54:46:38:71:56:F5:DD:BB:C5:D0:C7:29:43:66:DF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849A4BA2B232FE9E4D377B4FA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b4ebce5-b86a-38bd-8e7f-91cd489dbd32.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     396542
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:2b:23:2f:e9:e4:d3:77:b4:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=9bfe8788-ce80-460f-a320-b25fbe4909cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:a9:66:27:d2:ff:fa:35:9b:98:44:58:46:
                    2e:39:2c:5f:a5:3d:15:69:6f:85:ad:0f:08:d0:2d:
                    0e:39:10:63:78:9e:79:09:19:94:4d:b7:17:9b:28:
                    48:3c:b5:21:88:49:dc:7a:d1:f5:83:fe:c2:91:85:
                    50:4b:0a:9b:f0:74:ee:6c:f3:c7:74:19:43:05:9b:
                    af:fa:0e:b1:6c:61:95:bf:69:22:9f:46:6c:ba:50:
                    27:60:1d:0d:09:09:e1:5f:42:b8:6b:15:cf:ad:4c:
                    07:bc:cf:73:bf:a1:60:f7:77:d8:eb:41:af:c3:1a:
                    6a:83:0e:f6:d3:0b:15:6c:af:3f:11:a4:34:47:9e:
                    a5:4e:5a:fc:1b:09:0a:45:51:1a:33:3e:29:6d:45:
                    8d:b4:89:4c:46:93:ee:5d:68:40:75:e0:92:72:82:
                    f9:23:7b:31:4c:a8:07:2c:55:b3:cf:e4:15:1f:75:
                    99:13:13:ab:fb:28:bf:f7:df:94:ff:c6:44:99:ef:
                    ff:1c:ad:49:e0:1e:25:84:57:71:18:68:08:12:e1:
                    20:62:37:2c:e1:cd:af:9f:dd:f3:8f:9e:e7:e7:52:
                    53:0a:3c:af:be:ef:01:9c:b0:8a:ad:3f:86:34:33:
                    c3:5b:1b:a3:50:c4:72:2a:81:06:7a:8e:cb:07:7c:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:13:52:8B:70:54:46:38:71:56:F5:DD:BB:C5:D0:C7:29:43:66:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b4ebce5-b86a-38bd-8e7f-91cd489dbd32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4d:08:d1:dd:ff:f9:7d:1e:85:06:15:3d:1d:f2:a9:58:b8:
         7e:4d:dd:75:20:03:fa:c0:c8:c7:c4:58:32:65:ad:7a:20:ab:
         e3:b4:77:0d:9b:12:f7:a9:14:2c:ce:d2:a5:dc:c2:d2:7d:18:
         cf:b1:10:ab:aa:2f:68:2a:2d:eb:30:f9:f7:f0:23:24:b9:88:
         b0:13:78:64:d2:ed:cc:24:d4:0e:f3:64:6f:80:32:b9:89:71:
         3d:84:8b:b2:bc:f7:79:96:67:61:7c:2f:e2:45:ff:0f:a2:5e:
         23:31:92:65:93:0f:24:95:59:4c:86:6e:7e:a4:29:71:4b:c6:
         b8:47:96:aa:fb:11:86:e1:43:e9:23:3e:91:fa:37:70:bc:8c:
         72:80:0d:c6:3d:57:c0:d9:b1:41:61:84:d9:e4:63:df:db:61:
         05:ae:b4:2e:1a:f5:f4:70:37:68:3f:26:52:3c:f8:37:d1:41:
         89:e7:cb:2c:cc:f0:77:d1:74:4a:26:5e:21:75:1d:da:a2:94:
         8e:9c:28:4b:10:dd:02:64:b2:84:0d:3c:78:18:30:fd:17:dc:
         59:85:bc:89:e5:0c:b3:cf:93:50:80:f3:c3:b6:67:fd:78:10:
         8b:a6:b1:98:51:ea:0f:b5:24:ea:d5:84:53:b9:39:ca:14:fc:
         c7:5d:c8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:41:29 2025 by rpki-client