Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f25b701-99d7-3707-86ac-1222564b38bd.roa
File:                     1f25b701-99d7-3707-86ac-1222564b38bd.roa (raw, json)
Hash identifier:          /pQ7YAJL22gwLRSw1utnbfBfYyHfpx9eFvAw7hdw40A=
Subject key identifier:   73:AB:B9:0C:66:D4:65:38:36:46:7E:D8:20:DB:1A:07:F8:52:79:02
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B66320DB6C20BAB3461C15EA0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f25b701-99d7-3707-86ac-1222564b38bd.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     27544
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:0d:b6:c2:0b:ab:34:61:c1:5e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=06ccbd34-ad17-4bca-a777-477c72a0c656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:d7:49:a3:ab:0c:a0:60:aa:7c:e6:b4:e9:
                    0e:2e:f1:c4:7c:a1:ff:66:fe:37:ee:c6:97:75:52:
                    54:82:0b:1c:26:9a:a6:2c:67:27:ad:2b:56:fe:e0:
                    19:0d:b2:fe:e2:4f:6c:0f:7f:92:11:16:31:f9:da:
                    36:a7:ff:ae:9a:4e:16:98:30:a0:63:c8:d1:13:d1:
                    45:76:f2:f6:cc:2c:b4:06:28:1b:1c:eb:71:84:70:
                    08:48:91:0d:52:0d:7a:e2:27:48:42:b1:53:6e:e6:
                    21:bc:5a:92:83:1f:09:85:13:5a:7d:af:50:8d:a0:
                    74:2b:6b:b8:4f:5b:50:e2:8a:a9:26:53:7e:83:5d:
                    f2:a7:99:cc:65:6a:65:e0:6f:ad:40:0b:b5:e0:51:
                    c8:d0:8c:f2:fb:f9:47:35:ba:73:7c:50:47:61:39:
                    02:96:9e:41:0b:b5:ab:3c:55:31:90:8a:a6:37:8d:
                    2b:ef:56:85:95:0b:d2:50:b3:67:99:f4:d9:41:71:
                    21:ea:dd:e7:8f:26:6b:07:53:ca:fc:5f:37:b6:56:
                    f6:d9:75:60:eb:4e:fe:41:15:57:89:fc:19:e8:8c:
                    e8:7b:b9:90:5a:d5:55:3b:07:36:c8:a1:29:da:bd:
                    8a:fd:26:7b:e8:16:5c:b0:0f:66:b0:50:8a:31:75:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AB:B9:0C:66:D4:65:38:36:46:7E:D8:20:DB:1A:07:F8:52:79:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f25b701-99d7-3707-86ac-1222564b38bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:1d:fd:1f:38:2c:75:a4:2a:7c:a1:cb:26:1c:d0:32:3b:58:
         9a:61:0d:41:24:ca:36:65:59:1f:56:0f:79:1e:86:41:d5:6b:
         62:3b:0f:66:ad:25:fc:0c:57:ed:75:22:fb:c6:56:b3:78:b6:
         b3:1e:bd:26:3d:83:53:85:01:a1:6d:e2:19:1e:69:5c:3c:49:
         c5:32:a8:28:d4:8a:40:6f:25:bc:17:70:7c:9f:fc:94:2d:b2:
         8d:e2:ff:fd:97:7b:46:b7:f5:32:54:3f:c3:2e:e1:8a:09:0e:
         d2:58:e7:47:71:77:28:7c:bd:ac:d8:43:ef:3c:8f:09:4e:89:
         22:04:bd:f7:e3:3f:e1:ed:de:c6:ba:f7:3b:2e:5a:a7:a1:3d:
         71:9d:5b:e1:be:f1:07:e9:2d:a9:a2:d6:e9:3d:f6:d3:af:1c:
         77:93:fc:1d:30:7c:d8:6b:a9:0d:f8:8c:27:e5:d0:c5:bb:80:
         12:53:d3:57:56:54:6a:e8:d2:e8:b7:cd:24:0c:57:b9:dc:85:
         82:86:61:72:00:88:44:bc:df:af:77:97:a6:ce:72:2c:1a:c5:
         79:ab:98:12:64:08:fc:52:e4:2e:a9:b0:16:63:d2:84:09:6c:
         16:1e:72:10:cb:f8:d2:1c:b3:6b:91:3f:b0:22:77:e5:bc:ae:
         9b:c7:0c:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMg22wgurNGHBXqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
MDZjY2JkMzQtYWQxNy00YmNhLWE3NzctNDc3YzcyYTBjNjU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI7XSaOrDKBgqnzmtOkOLvHEfKH/Zv437saX
dVJUggscJpqmLGcnrStW/uAZDbL+4k9sD3+SERYx+do2p/+umk4WmDCgY8jRE9FF
dvL2zCy0BigbHOtxhHAISJENUg164idIQrFTbuYhvFqSgx8JhRNafa9QjaB0K2u4
T1tQ4oqpJlN+g13yp5nMZWpl4G+tQAu14FHI0Izy+/lHNbpzfFBHYTkClp5BC7Wr
PFUxkIqmN40r71aFlQvSULNnmfTZQXEh6t3njyZrB1PK/F83tlb22XVg607+QRVX
ifwZ6Izoe7mQWtVVOwc2yKEp2r2K/SZ76BZcsA9msFCKMXVUUwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHOruQxm1GU4NkZ+2CDbGgf4UnkCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWYyNWI3MDEtOTlkNy0z
NzA3LTg2YWMtMTIyMjU2NGIzOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALMd/R84LHWkKnyhyyYc0DI7WJphDUEkyjZlWR9WD3kehkHVa2I7
D2atJfwMV+11IvvGVrN4trMevSY9g1OFAaFt4hkeaVw8ScUyqCjUikBvJbwXcHyf
/JQtso3i//2Xe0a39TJUP8Mu4YoJDtJY50dxdyh8vazYQ+88jwlOiSIEvffjP+Ht
3sa69zsuWqehPXGdW+G+8QfpLami1uk99tOvHHeT/B0wfNhrqQ34jCfl0MW7gBJT
01dWVGro0ui3zSQMV7nchYKGYXIAiES83693l6bOciwaxXmrmBJkCPxS5C6psBZj
0oQJbBYechDL+NIcs2uRP7Aid+W8rpvHDAk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:02:59 2025 by rpki-client