Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a02bb120-670d-341b-acbd-a1e6e58cd2c5.roa
File:                     a02bb120-670d-341b-acbd-a1e6e58cd2c5.roa (raw, json)
Hash identifier:          L0hyV9QnjJ7p7vmf/1dz0njsaHeUGk3Ph/KRAvNAIow=
Subject key identifier:   01:22:5B:BB:F7:7D:A7:B3:0A:DA:D3:FD:6E:96:48:DB:79:56:0D:BE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1F90544B46D0A5C97169EA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a02bb120-670d-341b-acbd-a1e6e58cd2c5.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     396608
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:54:4b:46:d0:a5:c9:71:69:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=2bbe9d69-8d42-4fc0-b0c3-242481632d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:72:83:f7:83:a2:ca:2d:de:1d:7f:b3:99:3f:
                    e0:16:09:f4:ef:9a:0d:cf:11:d0:1c:98:c0:1d:96:
                    22:f9:2c:0d:20:44:8c:0d:8d:da:ae:14:6d:3f:29:
                    db:22:98:15:98:81:89:cd:14:cf:81:ba:98:40:22:
                    e5:7e:79:d6:20:54:8f:3e:ee:1d:d0:17:74:5e:1d:
                    4f:39:a5:2c:49:a9:73:09:8d:fe:df:90:2e:28:3c:
                    d7:f5:b9:52:18:8d:44:46:15:c5:4b:dd:57:89:a0:
                    01:40:56:3a:0c:e1:17:4f:a1:21:f7:98:d0:58:3a:
                    b3:1a:78:b4:ec:78:aa:f9:c1:96:63:fe:56:8f:9c:
                    06:a9:a2:79:49:ed:83:1c:12:aa:ec:69:9c:c2:91:
                    ff:aa:b6:53:fd:ec:c4:9f:f1:7a:13:92:45:fd:bf:
                    e9:54:0c:7c:ef:35:ec:62:1d:61:18:9d:fb:02:10:
                    96:4c:39:d9:1f:c4:e7:9c:b2:16:c4:df:1f:95:4c:
                    d9:25:41:8e:56:12:7f:2e:18:f6:f3:0d:37:dc:dc:
                    f8:82:58:ae:29:a4:30:34:1c:7c:5c:ed:d7:d1:fb:
                    c3:0b:a1:f4:12:7b:81:aa:19:a8:31:46:9d:2c:69:
                    94:e7:f3:51:38:33:b9:25:7e:c9:b8:8d:5f:f9:fd:
                    ad:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:22:5B:BB:F7:7D:A7:B3:0A:DA:D3:FD:6E:96:48:DB:79:56:0D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a02bb120-670d-341b-acbd-a1e6e58cd2c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:63:53:53:37:72:ac:7b:d9:6e:70:95:e6:df:97:bb:ec:32:
         b5:1e:de:41:76:78:e2:eb:2a:5d:5d:30:bb:3b:c5:74:cc:49:
         1e:50:81:ff:40:87:4e:2a:82:ef:f5:42:a3:b0:44:5d:ae:ad:
         a7:ff:ed:bb:d2:ea:53:43:c7:d8:49:14:36:b5:55:2b:72:a9:
         98:a8:d8:8e:49:1a:3f:fd:26:e6:68:20:c6:18:68:97:f2:3c:
         ee:6c:b1:7f:91:78:7d:74:25:60:af:83:2a:9c:0c:b4:4b:1a:
         2c:dd:f7:84:2d:64:a9:37:e5:33:00:91:90:1a:81:66:fb:53:
         f3:69:90:f8:e6:13:e6:47:65:ad:41:fe:e1:b7:26:1f:c6:9e:
         e3:19:fc:81:72:7e:e7:e2:45:58:79:05:87:03:29:a2:21:36:
         36:19:7f:09:bc:38:2c:2f:ba:34:47:24:ba:2b:65:e8:4a:21:
         83:03:c9:52:7e:8d:49:6c:7b:19:b3:33:ee:14:70:1d:1c:f6:
         42:2d:d1:91:b3:4f:6e:72:35:ba:c0:59:73:7f:28:0e:57:a6:
         14:2c:7f:b0:0f:91:77:d2:25:82:69:fa:29:b3:d7:c0:0f:8a:
         e7:5f:ee:33:86:e0:d7:12:f3:5a:99:0c:4f:4d:ea:d4:44:a5:
         4f:2f:31:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:08:06 2025 by rpki-client