Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa
File:                     ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa (raw, json)
Hash identifier:          EbXK4NgyJXtvlp7MofwqxNXAzjyEAkaRvd3oKRbxCsQ=
Subject key identifier:   C9:79:4D:0F:F7:46:88:56:9F:45:54:B8:AF:00:34:81:83:D5:F1:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849D758B5DB1518727D66F69080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa
Signing time:             Tue 13 May 2025 16:11:22 +0000
ROA not before:           Tue 13 May 2025 16:11:22 +0000
ROA not after:            Mon 11 Aug 2025 16:11:22 +0000
asID:                     396551
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d7:58:b5:db:15:18:72:7d:66:f6:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 16:11:22 2025 GMT
            Not After : Aug 11 16:11:22 2025 GMT
        Subject: CN=bc318aad-a47f-42c9-8098-f48d0e9a78c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:61:a1:72:de:cc:f4:fe:46:1a:ce:75:55:
                    19:15:bd:1d:6d:6a:e4:ed:73:70:b4:c9:b4:8d:bd:
                    7b:2c:ca:6e:20:8c:cb:11:4c:1f:cc:04:e9:4a:a1:
                    06:7e:aa:2b:de:97:2d:be:0c:04:22:3c:9f:ec:dd:
                    9c:18:4e:d1:52:1d:4d:8c:b9:b4:4a:e8:e3:fd:34:
                    1b:20:79:b0:af:b8:ac:44:fa:48:f2:83:59:3d:fa:
                    2d:d9:b0:f1:69:fb:99:a9:90:4f:79:b6:b4:0e:23:
                    df:69:d5:39:12:68:51:2c:34:a5:8f:37:44:8d:57:
                    74:c2:7f:2e:0c:f5:e6:00:f4:ae:b8:a2:46:4e:78:
                    67:e6:a8:cb:9f:f1:34:da:0f:a4:9b:50:4f:bf:ae:
                    83:cc:8f:b5:33:bd:d2:bd:10:17:30:d9:d6:86:26:
                    ad:4d:fc:28:54:9b:ae:25:f7:57:33:c9:51:4a:b6:
                    47:00:f5:6e:fc:d9:d5:39:bd:21:f5:12:c5:7c:3e:
                    7a:e0:34:66:40:72:da:61:6d:99:bd:e8:29:d1:19:
                    01:10:48:05:a5:48:87:54:22:90:fc:c1:fc:a0:97:
                    3e:1d:29:6b:bd:21:04:79:ac:51:33:31:84:8c:44:
                    f0:27:21:f5:94:47:99:18:1a:f1:8c:e5:19:24:b7:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:79:4D:0F:F7:46:88:56:9F:45:54:B8:AF:00:34:81:83:D5:F1:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae878f98-8a0a-3474-bd7b-b74381ba1be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:70:ea:af:74:d8:2e:42:da:65:7d:46:47:91:0a:14:38:4b:
         8e:e4:32:d1:9f:b4:a2:21:d4:84:3a:4d:ca:ce:18:82:9e:93:
         e1:c5:66:66:e3:6e:20:51:b5:fb:1b:dc:ba:72:41:4b:d7:ac:
         e6:f4:85:93:7e:f9:4a:37:fc:14:41:38:8f:0c:f8:35:f3:7a:
         29:cd:c9:17:3a:0b:0a:f8:30:76:99:0f:79:2a:f7:31:3e:30:
         6a:47:c9:71:4f:f9:61:fc:78:16:56:e6:93:7e:0d:e9:11:e0:
         88:8d:fc:47:aa:17:60:6f:95:56:70:4b:9c:49:41:86:f3:17:
         ea:89:5c:61:05:5f:75:d5:e0:8a:5a:64:1c:9c:b6:be:b7:60:
         54:7f:a8:50:63:e6:98:2e:87:d0:b7:ac:2a:85:b3:19:db:b6:
         1b:f0:82:05:3a:4c:3e:a9:20:25:d9:8b:07:85:e8:ef:61:3f:
         3b:2c:f2:32:4d:fe:0a:ac:ab:0f:72:86:63:90:93:ab:2c:2b:
         c2:72:af:04:ef:e9:c6:c1:97:c0:5e:17:a6:1c:1a:6a:09:dd:
         f8:c3:79:d3:48:fb:ad:c7:65:81:21:3e:b0:92:85:70:08:22:
         07:ad:e1:fd:3a:ab:3d:57:67:fd:03:fe:33:38:ca:cc:d5:b5:
         fe:bb:4d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 07:00:48 2025 by rpki-client