Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0daf3dd5-76f0-3f84-8dcd-cb24319a4e49.roa
File:                     0daf3dd5-76f0-3f84-8dcd-cb24319a4e49.roa (raw, json)
Hash identifier:          91zsxBjOPwgtyqFh515gC5X5xzOXk+JcgaHMsuYTx7Y=
Subject key identifier:   DB:02:D6:16:69:3A:00:6F:10:05:6D:6A:2C:26:80:81:43:AF:B8:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B434CA8ACCEE85265EFCE1600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0daf3dd5-76f0-3f84-8dcd-cb24319a4e49.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     397201
IP address blocks:        2001:501:b1f9::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:a8:ac:ce:e8:52:65:ef:ce:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=df9c4ac4-826f-4696-9388-f09a936ca642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:4a:7d:87:0c:ea:c9:1f:73:e7:6a:92:dc:
                    bc:51:84:23:6f:85:7c:70:f4:03:35:ae:84:be:bf:
                    a2:fc:28:d9:af:d7:e9:86:30:66:da:d3:8a:ad:2f:
                    71:28:1a:51:2d:54:c4:3d:f6:30:64:e6:aa:4c:11:
                    be:f7:0f:b2:92:3a:7a:ad:1f:90:ce:5d:9e:b8:f3:
                    07:c4:d9:93:98:9b:7f:10:2a:e2:97:15:80:94:b7:
                    9d:76:2b:34:df:81:d8:38:cc:9c:2f:2e:fb:3c:db:
                    60:84:ce:59:7e:03:38:eb:48:9c:84:2f:8d:ec:42:
                    a3:c8:2b:8b:9a:16:fa:51:c3:07:ef:f6:5b:33:fe:
                    05:75:09:24:c4:69:52:78:7c:d5:7e:bb:27:a1:74:
                    64:cf:6e:11:0e:1d:43:27:4c:e0:98:17:18:a6:df:
                    97:e4:9f:e5:70:82:38:f6:72:41:08:a9:1e:34:3f:
                    e7:4c:d9:94:21:05:e3:e8:d2:bd:d8:7d:16:a6:ef:
                    f1:19:c0:ec:38:98:1d:f5:a0:1b:05:08:71:ff:71:
                    d1:22:a2:28:a8:86:c8:b3:80:1b:9a:65:1d:2b:dd:
                    4d:15:2d:a3:ec:37:ed:91:be:17:86:f8:8d:b7:ff:
                    fc:99:7b:8c:60:b5:2f:e7:40:fc:82:0b:20:7e:65:
                    83:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:02:D6:16:69:3A:00:6F:10:05:6D:6A:2C:26:80:81:43:AF:B8:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0daf3dd5-76f0-3f84-8dcd-cb24319a4e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:0c:1c:3a:d5:a2:a7:a4:0c:77:67:ee:ac:73:53:85:a1:
         3d:fb:9b:07:06:df:2a:bc:0e:fa:c8:d6:c0:04:f0:ad:dc:2d:
         b9:a5:17:2c:36:24:4e:60:36:35:c6:25:03:ac:3b:bc:e8:4a:
         d6:8a:ae:e5:0f:45:81:0a:dd:19:3b:6b:14:78:02:95:0b:e6:
         6c:8c:84:e4:ed:77:89:af:ad:83:e7:d7:73:cc:c7:e7:b4:27:
         22:e2:d8:98:f8:9d:d4:67:98:5a:38:0f:ae:45:47:a7:70:6b:
         1b:0a:44:31:fa:68:1a:27:c7:ab:90:bd:ca:b4:17:3f:6e:6d:
         13:21:dc:6e:70:d6:c6:0a:d9:36:50:11:20:ad:76:b1:b4:0f:
         64:b1:2e:d0:c0:79:29:1d:b7:3c:90:28:02:75:16:ef:8d:c8:
         f5:8d:fc:c0:dd:ce:e9:39:78:8f:a9:a8:d0:65:71:3f:41:95:
         ef:bd:cb:a5:21:ee:3e:5d:47:e0:29:be:45:67:5a:5e:34:a5:
         38:1d:53:3c:87:3e:df:89:3b:e5:21:21:30:e7:8d:f6:eb:c9:
         95:cc:8e:1e:e2:f8:65:1c:df:62:fb:04:28:cf:65:4c:f5:16:
         74:5b:d0:6a:68:0b:00:64:4b:44:4f:d9:c5:ab:ab:3a:a1:07:
         f9:a0:63:74
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtDTKiszuhSZe/OFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk
ZGY5YzRhYzQtODI2Zi00Njk2LTkzODgtZjA5YTkzNmNhNjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX5KfYcM6skfc+dqkty8UYQjb4V8cPQDNa6E
vr+i/CjZr9fphjBm2tOKrS9xKBpRLVTEPfYwZOaqTBG+9w+ykjp6rR+Qzl2euPMH
xNmTmJt/ECrilxWAlLeddis034HYOMycLy77PNtghM5ZfgM460ichC+N7EKjyCuL
mhb6UcMH7/ZbM/4FdQkkxGlSeHzVfrsnoXRkz24RDh1DJ0zgmBcYpt+X5J/lcII4
9nJBCKkeND/nTNmUIQXj6NK92H0Wpu/xGcDsOJgd9aAbBQhx/3HRIqIoqIbIs4Ab
mmUdK91NFS2j7Dftkb4XhviNt//8mXuMYLUv50D8ggsgfmWD1QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNsC1hZpOgBvEAVtaiwmgIFDr7gsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGRhZjNkZDUtNzZmMC0z
Zjg0LThkY2QtY2IyNDMxOWE0ZTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAu2wwcOtWip6QMd2furHNThaE9+5sHBt8qvA76
yNbABPCt3C25pRcsNiROYDY1xiUDrDu86ErWiq7lD0WBCt0ZO2sUeAKVC+ZsjITk
7XeJr62D59dzzMfntCci4tiY+J3UZ5haOA+uRUencGsbCkQx+mgaJ8erkL3KtBc/
bm0TIdxucNbGCtk2UBEgrXaxtA9ksS7QwHkpHbc8kCgCdRbvjcj1jfzA3c7pOXiP
qajQZXE/QZXvvculIe4+XUfgKb5FZ1peNKU4HVM8hz7fiTvlISEw543268mVzI4e
4vhlHN9i+wQoz2VM9RZ0W9BqaAsAZEtET9nFq6s6oQf5oGN0
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:47:08 2025 by rpki-client