Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/159d517c-ab02-33db-9257-cd769316fd9b.roa
File:                     159d517c-ab02-33db-9257-cd769316fd9b.roa (raw, json)
Hash identifier:          e59QagCFj7iof4a6Gt2+00vIEPOnPgLrjaFShk26ZW8=
Subject key identifier:   54:82:B9:D7:C3:73:F6:B9:4D:4F:8C:C6:A8:21:34:3D:A3:24:49:58
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C2782B1DA8F6EEFFD7C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/159d517c-ab02-33db-9257-cd769316fd9b.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     397202
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:27:82:b1:da:8f:6e:ef:fd:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=a2e0a3e5-7989-4275-8814-d9d0b7a95e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ec:56:76:9a:9f:32:c0:b2:0e:60:92:1e:e6:
                    8e:69:dc:c9:46:51:d3:b4:31:0f:cf:c7:57:3e:fc:
                    90:77:07:5b:62:0f:98:09:ce:96:7a:18:ab:00:3a:
                    ca:6f:6f:52:1e:fc:c8:b9:83:a6:79:08:dd:f0:b8:
                    c5:d9:cb:13:41:c1:04:c7:a6:d7:bf:01:9e:ea:b5:
                    3f:2d:a5:20:49:98:c6:32:1a:d4:c9:0f:a8:0b:f6:
                    70:52:8d:2e:49:1f:56:ce:d2:69:3d:a3:70:1e:d8:
                    3f:df:bd:d3:b9:fb:e1:98:20:d1:fe:71:5c:5e:31:
                    d4:02:d2:40:d7:50:84:9c:9e:1e:3c:12:83:83:90:
                    8c:6a:9e:c9:0d:ec:82:65:c8:ad:f5:c6:87:ab:a0:
                    af:b4:09:a0:3d:f1:b5:0c:d4:34:10:99:15:95:66:
                    9e:6a:07:ab:35:da:95:e4:54:66:f0:ca:6b:a7:ae:
                    77:5b:47:34:2f:24:1a:d4:cf:3c:b4:02:70:7f:7b:
                    dd:ab:38:c4:6a:e0:55:2f:01:e5:d4:69:1a:3c:5d:
                    a2:00:b4:af:7a:f4:cf:2e:7c:11:54:26:9a:9a:e4:
                    a5:bc:a9:fe:c0:67:f2:76:4c:14:4f:38:29:6d:7c:
                    82:72:29:81:b8:5e:f1:a3:7d:c5:96:16:c3:c4:56:
                    69:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:82:B9:D7:C3:73:F6:B9:4D:4F:8C:C6:A8:21:34:3D:A3:24:49:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/159d517c-ab02-33db-9257-cd769316fd9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:35:4b:21:d1:70:0e:bf:b7:41:0c:36:8a:9b:d4:b0:7f:09:
         e0:ab:83:73:16:2e:79:39:d1:f0:24:60:95:30:4a:3e:6b:ae:
         d6:b2:f4:b5:3f:d6:12:4f:4d:1c:bd:2a:0d:c4:e4:fb:32:e7:
         09:71:9b:f1:a6:0c:13:5a:8b:4c:c2:a6:46:14:59:a3:bc:b5:
         5c:a4:cc:a7:62:2b:b9:31:dc:15:3c:68:52:65:68:1c:c9:a8:
         1f:54:ab:b3:b7:0d:89:ba:3b:68:fc:74:2f:eb:24:dd:74:dc:
         ec:41:c1:43:8a:26:1c:95:e7:9c:73:69:28:5b:df:47:37:0e:
         5b:70:7b:05:2e:38:47:2f:33:69:8e:2a:77:fb:28:06:cc:36:
         d8:a6:55:20:99:b7:ca:01:ee:1f:3d:a7:56:5a:d9:19:04:18:
         aa:91:eb:e9:7d:db:f1:7f:6b:33:2c:8c:07:79:ec:de:3a:16:
         37:22:23:0e:19:c3:49:d5:5c:76:43:b9:28:93:47:d8:54:32:
         aa:6f:31:f0:50:85:c7:c8:1d:1f:32:b4:8c:6d:48:1d:3e:5d:
         d7:96:91:68:bd:ee:d0:74:db:e7:37:3b:aa:b1:83:8b:86:e2:
         94:6f:98:b7:64:cd:a0:0e:e0:7d:c8:ca:c2:57:8d:24:24:d8:
         c3:e7:27:a9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATCeCsdqPbu/9fAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
YTJlMGEzZTUtNzk4OS00Mjc1LTg4MTQtZDlkMGI3YTk1ZTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uxWdpqfMsCyDmCSHuaOadzJRlHTtDEPz8dX
PvyQdwdbYg+YCc6WehirADrKb29SHvzIuYOmeQjd8LjF2csTQcEEx6bXvwGe6rU/
LaUgSZjGMhrUyQ+oC/ZwUo0uSR9WztJpPaNwHtg/373TufvhmCDR/nFcXjHUAtJA
11CEnJ4ePBKDg5CMap7JDeyCZcit9caHq6CvtAmgPfG1DNQ0EJkVlWaeagerNdqV
5FRm8Mprp653W0c0LyQa1M88tAJwf3vdqzjEauBVLwHl1GkaPF2iALSvevTPLnwR
VCaamuSlvKn+wGfydkwUTzgpbXyCcimBuF7xo33FlhbDxFZpXwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFSCudfDc/a5TU+MxqghND2jJElYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTU5ZDUxN2MtYWIwMi0z
M2RiLTkyNTctY2Q3NjkzMTZmZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBtNUsh0XAOv7dBDDaKm9Swfwngq4NzFi55OdHw
JGCVMEo+a67WsvS1P9YST00cvSoNxOT7MucJcZvxpgwTWotMwqZGFFmjvLVcpMyn
Yiu5MdwVPGhSZWgcyagfVKuztw2Jujto/HQv6yTddNzsQcFDiiYcleecc2koW99H
Nw5bcHsFLjhHLzNpjip3+ygGzDbYplUgmbfKAe4fPadWWtkZBBiqkevpfdvxf2sz
LIwHeezeOhY3IiMOGcNJ1Vx2Q7kok0fYVDKqbzHwUIXHyB0fMrSMbUgdPl3XlpFo
ve7QdNvnNzuqsYOLhuKUb5i3ZM2gDuB9yMrCV40kJNjD5yep
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:44:00 2025 by rpki-client