Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df8fc7f4-5488-36a2-a8d4-55b882f71028.roa
File:                     df8fc7f4-5488-36a2-a8d4-55b882f71028.roa (raw, json)
Hash identifier:          RsZAgx6pwzfzt7O1x159M4zZc8Dh+E0RnSk5nEVx0+Q=
Subject key identifier:   DC:F4:9B:CC:46:88:C2:3C:1E:C3:EB:5B:E0:FD:CA:DC:61:6F:92:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849A4BA27C5C0CB75FD0750342C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df8fc7f4-5488-36a2-a8d4-55b882f71028.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     25485
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:27:c5:c0:cb:75:fd:07:50:34:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=d1589649-2dff-4bf4-bc37-98b3966ff621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:62:2a:18:3b:48:f4:1f:8f:8d:27:8f:1a:
                    4e:82:16:1c:b7:e5:05:f4:a2:e6:d3:16:44:e1:20:
                    b8:3b:65:a3:fc:00:c4:e7:f5:76:77:2a:43:33:55:
                    f2:e1:0b:07:25:29:57:bd:17:8e:55:b9:3d:27:7a:
                    3f:f3:d8:37:ef:3a:b1:3f:e8:59:bb:0e:1b:f1:97:
                    84:0a:89:4e:61:39:e3:e3:1a:21:32:48:2e:67:53:
                    8e:8d:04:cf:70:7c:f6:67:e1:8f:aa:cb:c9:df:f7:
                    16:1b:63:fd:94:eb:a1:37:3c:3f:b8:6b:a7:e4:57:
                    35:b0:91:d4:7d:7f:b1:ea:87:8e:1a:1f:64:2e:59:
                    6b:a2:a2:6e:e1:ee:d5:7e:35:54:01:32:5f:1f:ed:
                    dc:85:c1:78:f1:d2:68:eb:14:e4:a5:a6:40:dd:db:
                    07:20:f9:e1:c8:04:7d:30:d1:37:77:28:01:bb:ff:
                    58:4d:49:0a:6b:98:90:33:4a:7a:3d:73:4e:39:69:
                    dd:05:73:13:e2:40:1c:54:d4:4d:95:fa:95:ed:6d:
                    d8:d9:fd:85:a5:fb:67:3b:11:b2:a7:15:7f:56:a2:
                    b0:96:51:fe:30:2b:34:c8:dc:3c:53:76:88:e3:a0:
                    a7:d1:cb:f8:da:39:9a:81:bd:a7:d7:6f:b5:ae:a5:
                    ed:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F4:9B:CC:46:88:C2:3C:1E:C3:EB:5B:E0:FD:CA:DC:61:6F:92:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df8fc7f4-5488-36a2-a8d4-55b882f71028.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:82:ab:d1:e2:86:d1:39:68:9b:f7:07:85:3f:2c:d4:a0:40:
         b2:02:a7:1e:16:32:e6:58:44:16:de:91:36:6e:d0:5e:fd:ed:
         44:c3:8d:c2:c2:54:12:c5:99:66:6a:a9:b3:1b:1e:43:0a:4b:
         66:7b:cd:3a:57:b7:70:29:b4:12:fc:34:49:05:0d:c1:a0:67:
         dd:6e:f5:2e:3f:e6:71:5e:84:98:09:52:14:02:7c:92:97:90:
         ad:dc:b9:fa:98:dd:44:98:14:a5:4d:82:cf:a6:4d:75:18:57:
         42:94:a7:2f:04:d2:7c:ad:cb:60:bb:8f:a0:3e:93:00:11:aa:
         e5:82:ac:9e:ff:a5:ad:0e:d6:1c:a6:f9:d6:53:53:39:82:fd:
         63:f3:0f:47:3e:f3:80:ca:ac:cc:f9:89:fe:ed:8a:eb:97:3e:
         ea:0b:ba:30:0d:3d:55:4e:43:a4:a6:28:c8:80:c2:02:41:b1:
         96:cb:68:10:88:20:f6:4f:87:ac:6f:1a:2d:d7:19:05:0b:52:
         9e:63:c0:c8:da:99:e9:3f:70:47:79:97:6f:29:53:b7:8e:fd:
         46:ae:7d:76:54:c5:23:24:e6:6a:ea:0b:21:3e:93:3e:a9:32:
         2f:54:49:6c:3e:cc:b1:88:68:c8:fa:35:65:3d:ad:34:fd:49:
         6f:b0:f1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:46:15 2025 by rpki-client