Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa
File:                     0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa (raw, json)
Hash identifier:          bgkmyw3iM34pDYVwTpE4LNjapgVU+1YsSjNMTQB9Cy0=
Subject key identifier:   8D:FA:44:06:24:9D:D1:6D:6F:95:78:EE:01:FA:7E:38:55:E7:BB:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CC2258A29414A4B13F50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396582
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:cc:22:58:a2:94:14:a4:b1:3f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b32ea02c-61c3-4cc8-80ac-6cc1a1e8058f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:90:86:92:09:89:f1:3d:99:9c:54:13:6d:
                    6a:2e:18:71:0b:38:c6:2a:39:6e:55:30:27:b3:40:
                    db:97:4f:f2:a5:a1:44:de:67:c9:58:f7:f6:ce:49:
                    0f:aa:c8:53:a7:17:63:37:43:53:ba:c7:e7:d3:5e:
                    b7:6e:bb:a0:2e:88:e6:ae:d8:ca:99:26:7a:50:59:
                    23:d6:9d:9c:ba:e8:de:54:37:a5:6d:36:ae:73:11:
                    63:0e:2a:4a:e7:e7:da:f7:7d:96:2f:57:c9:71:e8:
                    17:86:f5:a8:1f:36:4d:dd:cb:38:1d:83:f9:0b:1a:
                    ee:f2:0f:fa:c6:32:e7:09:2d:bc:36:c0:0b:69:14:
                    2a:f1:7e:c2:4e:bd:57:c5:00:be:84:49:96:a6:79:
                    73:71:6e:99:fd:f4:06:35:88:7a:fb:33:00:4f:c0:
                    5d:3e:da:c1:ce:8c:57:da:ad:22:ee:3c:85:a6:b1:
                    4b:bb:17:e4:a0:29:59:de:ef:bf:fe:12:d5:c7:c6:
                    b1:3b:a2:84:07:d1:1d:f9:82:f7:ff:d5:23:81:24:
                    1c:20:14:6a:98:b2:ba:4c:86:3d:32:6a:2b:73:80:
                    b2:22:aa:77:5a:34:d7:3a:18:20:c7:6c:03:78:91:
                    86:d2:e4:bb:db:48:30:15:1f:c6:de:aa:78:ca:ca:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FA:44:06:24:9D:D1:6D:6F:95:78:EE:01:FA:7E:38:55:E7:BB:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c5b2a53-7aa7-30a5-95d4-2881470b27bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:9a:1f:c3:b8:0b:f3:f2:c5:ef:1a:48:fc:89:c5:34:a5:
         f9:a0:c8:9b:0b:14:cc:ac:64:fd:6b:36:2b:5f:24:25:25:9d:
         84:91:06:ab:35:62:72:00:19:6b:04:60:f3:95:00:09:f0:7f:
         4a:e8:5b:07:89:83:17:bc:bf:2b:03:db:f1:89:26:fe:02:fb:
         19:b1:00:f1:88:4a:0d:08:33:4f:4a:b4:95:53:3d:0c:0f:5e:
         ab:12:4e:39:b0:43:10:7d:98:46:3a:c6:94:35:a2:be:4c:16:
         b6:ef:87:87:8f:fd:72:e5:f4:63:7e:12:49:f0:62:90:c9:09:
         01:ae:c5:8e:0e:09:5c:19:9a:6c:13:55:9b:00:f5:20:a8:70:
         09:86:ec:05:a1:74:32:78:67:b3:d7:8c:05:19:07:84:eb:de:
         cd:5f:4b:1f:c5:87:18:30:a9:cb:75:b5:66:d0:c9:65:95:5d:
         e6:7a:53:6e:05:91:a1:95:d1:a7:bc:f7:33:3a:4a:56:a2:4e:
         27:4c:cf:b7:2f:6b:7b:ed:06:70:6b:4e:12:39:2c:22:d3:d9:
         e8:d2:5a:e9:67:f5:00:d4:87:38:1e:16:8e:f8:2f:a7:0e:54:
         c2:4b:bc:09:ab:17:d7:73:eb:30:1e:b2:fd:9d:c8:64:67:6d:
         3c:cf:94:9b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlswiWKKUFKSxP1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
YjMyZWEwMmMtNjFjMy00Y2M4LTgwYWMtNmNjMWExZTgwNThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEqQhpIJifE9mZxUE21qLhhxCzjGKjluVTAn
s0Dbl0/ypaFE3mfJWPf2zkkPqshTpxdjN0NTusfn0163brugLojmrtjKmSZ6UFkj
1p2cuujeVDelbTaucxFjDipK5+fa932WL1fJcegXhvWoHzZN3cs4HYP5Cxru8g/6
xjLnCS28NsALaRQq8X7CTr1XxQC+hEmWpnlzcW6Z/fQGNYh6+zMAT8BdPtrBzoxX
2q0i7jyFprFLuxfkoClZ3u+//hLVx8axO6KEB9Ed+YL3/9UjgSQcIBRqmLK6TIY9
Mmorc4CyIqp3WjTXOhggx2wDeJGG0uS720gwFR/G3qp4ysrPVwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFI36RAYkndFtb5V47gH6fjhV57sMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGM1YjJhNTMtN2FhNy0z
MGE1LTk1ZDQtMjg4MTQ3MGIyN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAj0Zofw7gL8/LF7xpI/InFNKX5oMibCxTMrGT9
azYrXyQlJZ2EkQarNWJyABlrBGDzlQAJ8H9K6FsHiYMXvL8rA9vxiSb+AvsZsQDx
iEoNCDNPSrSVUz0MD16rEk45sEMQfZhGOsaUNaK+TBa274eHj/1y5fRjfhJJ8GKQ
yQkBrsWODglcGZpsE1WbAPUgqHAJhuwFoXQyeGez14wFGQeE697NX0sfxYcYMKnL
dbVm0MlllV3melNuBZGhldGnvPczOkpWok4nTM+3L2t77QZwa04SOSwi09no0lrp
Z/UA1Ic4HhaO+C+nDlTCS7wJqxfXc+swHrL9nchkZ208z5Sb
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:03:07 2025 by rpki-client