Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06f8d7af-d326-3f38-98c5-f23dbed2fcc0.roa
File:                     06f8d7af-d326-3f38-98c5-f23dbed2fcc0.roa (raw, json)
Hash identifier:          mzZbtJ0MHlkE7XJHLSAtPRSqMy9Bt4L3+obPq8xcgJ4=
Subject key identifier:   35:17:AD:42:D6:DE:BA:7C:30:BA:2A:94:15:42:22:81:71:A2:B1:A4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F676BD35B5CC031619CB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06f8d7af-d326-3f38-98c5-f23dbed2fcc0.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     396600
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:76:bd:35:b5:cc:03:16:19:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=d059f9a4-5bb0-46eb-892e-acf6b3ca52c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:98:5d:75:39:1e:83:a7:db:29:82:06:5c:82:
                    de:30:82:48:96:2c:67:26:16:0e:86:1b:df:1a:16:
                    55:e8:a4:82:46:b5:98:fa:1b:f2:02:f9:8b:e7:9b:
                    b5:9f:f2:3c:dc:a3:03:cd:e4:3a:69:d1:90:e0:6f:
                    c0:54:43:bf:8d:9a:4c:7c:32:84:2b:c3:b0:8f:3b:
                    b0:83:b6:69:e3:37:2d:af:d0:56:8c:0d:4b:68:71:
                    8a:70:28:7e:c6:8b:cd:5c:53:22:17:bf:13:d5:5d:
                    53:85:05:6f:e5:5d:b2:78:07:e5:13:c8:d2:38:e2:
                    c1:fb:87:67:e6:83:d5:5b:9a:a6:38:55:e8:f1:a0:
                    ed:fb:a8:7e:56:88:9b:9e:32:f4:ed:83:78:6d:4b:
                    95:ea:1c:37:c7:cd:61:01:7e:d1:b7:c1:8d:a5:c1:
                    3b:19:2e:c3:0a:cf:38:f6:76:50:4f:47:9a:70:38:
                    0f:0d:24:bd:0e:71:44:b1:33:87:1b:e5:84:15:e1:
                    23:3f:21:6f:5d:f4:58:3d:2f:38:19:2a:ba:bd:6a:
                    3f:bf:61:07:08:9c:a2:50:83:f7:b0:68:54:1b:bd:
                    7e:ce:fc:d7:43:57:ef:fc:83:29:92:ea:0c:d3:07:
                    0c:db:82:28:74:f9:bd:38:7d:d8:09:0e:8a:8b:72:
                    0c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:17:AD:42:D6:DE:BA:7C:30:BA:2A:94:15:42:22:81:71:A2:B1:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06f8d7af-d326-3f38-98c5-f23dbed2fcc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:83:d8:3d:c2:df:09:b1:b7:ad:8f:c6:25:c9:96:f4:83:05:
         d3:3d:15:bf:a9:18:23:93:13:bc:21:1e:3a:51:d3:9d:4f:fa:
         cd:08:9b:bc:07:4a:ba:1d:97:ee:cf:48:cb:fd:79:9e:0d:18:
         46:9e:66:e1:f4:c7:c6:89:73:83:87:cf:26:90:0c:57:6e:e1:
         ad:f6:18:7a:9a:40:e0:5b:56:95:6b:0c:60:f7:ef:0f:d1:73:
         b7:16:47:b4:42:e0:4a:94:13:17:c2:81:8f:b6:5e:82:1b:8f:
         2e:5b:6a:6d:38:47:3d:94:b1:b7:fc:4e:2c:5a:64:d2:70:d5:
         fa:37:60:1f:07:c2:57:f1:af:11:03:ca:a7:c8:a2:7c:fd:7a:
         52:2f:4a:73:a4:00:34:bb:6f:05:2c:8d:a9:1b:98:b5:c4:1a:
         5b:0b:33:b7:34:f2:2d:6c:7c:12:6f:49:56:63:44:51:b7:fa:
         c1:27:1e:b8:a6:dd:c7:7b:51:11:a5:b3:58:b5:15:b9:3e:42:
         f5:ec:90:28:c6:5a:93:39:ab:ad:4d:62:82:48:e4:51:73:12:
         94:45:30:ad:dd:fe:be:90:cd:29:1f:0e:73:c6:ad:3a:ad:25:
         a6:b3:87:af:ea:4a:3a:ce:e4:15:01:44:18:dc:12:1f:67:f8:
         9f:44:a2:a9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9na9NbXMAxYZy4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk
ZDA1OWY5YTQtNWJiMC00NmViLTg5MmUtYWNmNmIzY2E1MmM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JhddTkeg6fbKYIGXILeMIJIlixnJhYOhhvf
GhZV6KSCRrWY+hvyAvmL55u1n/I83KMDzeQ6adGQ4G/AVEO/jZpMfDKEK8Owjzuw
g7Zp4zctr9BWjA1LaHGKcCh+xovNXFMiF78T1V1ThQVv5V2yeAflE8jSOOLB+4dn
5oPVW5qmOFXo8aDt+6h+VoibnjL07YN4bUuV6hw3x81hAX7Rt8GNpcE7GS7DCs84
9nZQT0eacDgPDSS9DnFEsTOHG+WEFeEjPyFvXfRYPS84GSq6vWo/v2EHCJyiUIP3
sGhUG71+zvzXQ1fv/IMpkuoM0wcM24IodPm9OH3YCQ6Ki3IM/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDUXrULW3rp8MLoqlBVCIoFxorGkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDZmOGQ3YWYtZDMyNi0z
ZjM4LTk4YzUtZjIzZGJlZDJmY2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQADg9g9wt8Jsbetj8YlyZb0gwXTPRW/qRgjkxO8
IR46UdOdT/rNCJu8B0q6HZfuz0jL/XmeDRhGnmbh9MfGiXODh88mkAxXbuGt9hh6
mkDgW1aVawxg9+8P0XO3Fke0QuBKlBMXwoGPtl6CG48uW2ptOEc9lLG3/E4sWmTS
cNX6N2AfB8JX8a8RA8qnyKJ8/XpSL0pzpAA0u28FLI2pG5i1xBpbCzO3NPItbHwS
b0lWY0RRt/rBJx64pt3He1ERpbNYtRW5PkL17JAoxlqTOautTWKCSORRcxKURTCt
3f6+kM0pHw5zxq06rSWms4ev6ko6zuQVAUQY3BIfZ/ifRKKp
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:00:56 2025 by rpki-client