Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ccc1257-5800-3391-983f-4998416e3ab4.roa
File:                     6ccc1257-5800-3391-983f-4998416e3ab4.roa (raw, json)
Hash identifier:          gJrCex49423L813KF7P4mYem8mrk8bHh4sBD7tRFHRg=
Subject key identifier:   FA:21:23:A5:34:05:6B:BE:42:15:10:52:37:77:CD:BB:8C:81:FF:46
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A172644FEDC01143DC483D4C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ccc1257-5800-3391-983f-4998416e3ab4.roa
Signing time:             Thu 05 Jun 2025 12:41:28 +0000
ROA not before:           Thu 05 Jun 2025 12:41:28 +0000
ROA not after:            Wed 03 Sep 2025 12:41:28 +0000
asID:                     396578
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:26:44:fe:dc:01:14:3d:c4:83:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  5 12:41:28 2025 GMT
            Not After : Sep  3 12:41:28 2025 GMT
        Subject: CN=4c78a750-39a3-4577-a5ec-67f9703e00b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:f1:27:95:d0:30:a5:31:a1:6b:53:2e:6e:
                    3e:68:0c:e3:97:bf:75:0b:4c:ee:19:74:a6:59:30:
                    98:9f:58:ac:73:c8:2e:8f:65:3a:b4:ac:82:9a:cc:
                    96:92:5d:67:d7:05:8b:b7:40:cf:75:7f:74:98:74:
                    6b:ad:eb:96:2f:3a:ee:df:85:54:ca:64:e9:64:3f:
                    cf:4d:ad:57:ab:63:ec:aa:1f:5a:29:f2:07:c5:15:
                    a1:ca:22:e8:13:66:e3:ae:6c:fb:00:bc:fb:fb:2b:
                    14:32:73:7f:cd:6a:a8:34:8d:5a:58:00:52:59:8f:
                    e9:59:63:dc:b2:a4:40:b1:91:83:c4:07:e5:aa:1f:
                    e8:d3:3d:11:ed:06:d4:48:24:a4:6f:ef:b4:10:89:
                    22:ce:4e:3b:59:47:43:d2:d8:90:40:5e:99:86:dd:
                    b3:26:5a:b7:7f:50:72:ba:8f:36:b2:e0:04:67:a2:
                    f2:c3:1b:f6:58:e6:56:78:a2:a5:36:a6:2e:6e:f4:
                    7a:a2:f1:45:1a:0d:e5:57:de:fa:26:14:23:f4:14:
                    08:e7:f4:27:70:b1:08:e2:eb:b4:c6:56:31:42:4d:
                    ff:91:d2:94:92:a7:29:2f:12:b0:94:5e:35:4b:2d:
                    ef:c9:4f:2f:14:cb:5d:66:5a:58:d7:f5:24:f1:b8:
                    1c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:21:23:A5:34:05:6B:BE:42:15:10:52:37:77:CD:BB:8C:81:FF:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ccc1257-5800-3391-983f-4998416e3ab4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:31:96:3a:78:d6:51:86:c6:c5:c2:e5:da:f9:e2:01:16:ff:
         5f:83:4e:66:70:99:63:da:94:5e:22:a8:70:df:82:ed:45:cf:
         eb:8d:5e:ba:d5:38:75:36:b6:7a:64:89:36:81:0e:58:f2:30:
         39:ea:ac:d3:b0:23:60:f8:bb:54:39:d3:80:dd:a5:14:b9:73:
         f7:b6:6d:73:01:fc:76:de:af:a8:8f:8e:a2:c2:9b:24:ee:6e:
         36:8d:1c:07:16:b3:92:6b:6c:43:e8:6e:eb:84:5b:db:2c:7e:
         f0:e6:76:43:28:7f:38:83:5e:a5:b2:0d:17:4a:93:2e:40:84:
         86:3c:07:55:c7:28:b4:43:70:6f:0a:c2:b6:c2:f1:49:0b:00:
         63:34:ce:41:6a:c7:0c:ce:1c:de:ce:cb:0c:a1:cd:b6:5d:0d:
         cd:f9:48:a6:e8:76:97:66:d3:35:b6:8c:ee:5e:f1:e7:ee:51:
         14:5d:73:2f:ed:57:d5:55:c8:aa:70:98:02:65:6d:35:b4:af:
         c7:27:dd:6d:c3:de:c8:e7:13:02:7f:ea:75:cf:b5:06:c5:82:
         2c:b0:f6:94:52:05:f3:53:cd:af:42:59:12:26:5b:b1:04:74:
         be:7e:e3:87:41:43:a8:de:14:49:39:95:e2:68:f5:34:4a:c7:
         ae:8c:d4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 06:36:04 2025 by rpki-client