Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d4c8dd0-8ea7-35fc-8c6c-0cc07f5cfb75.roa
File:                     2d4c8dd0-8ea7-35fc-8c6c-0cc07f5cfb75.roa (raw, json)
Hash identifier:          p1Swok5ptKG8WjHEv6Ovt3F6/7aC7nmoMwczubh2nrk=
Subject key identifier:   4D:B0:75:3E:D5:2A:E7:21:6B:44:39:A3:B6:BA:44:40:9F:8B:EA:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196C50D04FC93D4854A3420
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d4c8dd0-8ea7-35fc-8c6c-0cc07f5cfb75.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     27544
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c5:0d:04:fc:93:d4:85:4a:34:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=97aa0920-4703-488a-8c94-4788156ea327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6a:89:28:72:31:c5:cf:23:b2:fb:1b:ad:c4:
                    a4:6e:68:c9:9a:62:8d:a8:c7:43:e9:9e:89:98:a9:
                    f4:2b:76:83:40:61:6d:bb:92:b8:63:50:02:9a:62:
                    63:5a:e5:7b:cb:7c:ce:af:d3:47:ef:3a:f6:dd:e8:
                    4a:51:20:73:fd:38:a8:ca:7c:e3:e1:a8:08:e2:25:
                    3e:0a:dc:9c:4d:76:5d:5c:de:5c:aa:04:cf:6d:cf:
                    9f:29:6a:3a:96:41:0e:f4:e3:46:a0:dc:f4:8d:0a:
                    a6:06:5a:c4:04:b8:57:3a:f9:25:ef:88:59:63:dc:
                    6d:fd:0f:7d:84:7b:db:7c:9e:5c:4c:bb:80:6b:b0:
                    e1:aa:3e:81:86:76:d8:38:ad:35:41:49:75:94:0a:
                    50:2e:a3:4a:77:d2:97:94:b4:27:54:7c:76:07:62:
                    ac:ac:f7:e3:59:81:e4:6a:3b:ed:0b:a3:1c:fd:29:
                    53:a4:83:fe:a5:41:0c:6e:59:11:58:ba:d9:42:31:
                    5d:8f:ee:8a:dc:01:d6:87:f4:1b:79:04:df:02:34:
                    43:3f:fe:33:92:56:f1:a7:0f:bb:2f:c2:ac:bd:25:
                    c1:3e:5a:58:49:29:f2:7e:6c:18:ae:bc:76:eb:a6:
                    4c:39:b6:27:5c:15:61:0d:c5:b4:3d:7e:96:d0:77:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B0:75:3E:D5:2A:E7:21:6B:44:39:A3:B6:BA:44:40:9F:8B:EA:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d4c8dd0-8ea7-35fc-8c6c-0cc07f5cfb75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:87:6d:bf:01:db:9d:74:5c:6e:ea:67:89:90:53:05:47:fc:
         bb:fb:41:7d:97:9e:f5:71:30:a0:b3:02:0d:15:68:fe:bc:fc:
         c8:f8:9e:72:49:41:54:d7:5a:ae:ea:b8:7a:44:d1:99:db:ac:
         21:8e:33:39:32:b4:3c:5b:c5:a8:e9:0f:3d:b8:0e:f8:54:9e:
         73:e5:27:de:54:9c:74:25:5a:65:4c:e4:64:56:08:5a:a7:61:
         27:c7:fe:12:0e:d9:27:55:86:b7:82:b9:1e:45:a9:d2:dc:f8:
         62:05:3f:28:2b:25:2d:94:74:39:42:9e:7d:2a:da:f6:f8:19:
         46:70:31:1d:68:94:da:cc:bd:00:31:bd:9e:0e:1c:52:57:1a:
         78:bd:71:3e:60:f1:2b:9c:df:df:2b:c8:eb:43:ed:19:06:e7:
         86:50:c9:a4:18:d2:4b:18:4a:6b:36:25:68:29:e1:0c:db:ab:
         0d:6f:ff:dc:49:dd:54:27:a4:8b:82:84:28:b9:91:15:eb:4c:
         ec:f5:5a:a4:4e:ba:17:86:d7:7e:47:57:ad:fb:11:de:26:52:
         28:25:b9:dc:ba:9b:f0:98:63:88:4c:33:45:cf:65:bd:1c:17:
         36:10:3b:3b:6f:7a:26:25:83:4c:73:a6:aa:f3:d6:06:30:b5:
         8b:f6:df:55
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlsUNBPyT1IVKNCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
OTdhYTA5MjAtNDcwMy00ODhhLThjOTQtNDc4ODE1NmVhMzI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2qJKHIxxc8jsvsbrcSkbmjJmmKNqMdD6Z6J
mKn0K3aDQGFtu5K4Y1ACmmJjWuV7y3zOr9NH7zr23ehKUSBz/Tioynzj4agI4iU+
CtycTXZdXN5cqgTPbc+fKWo6lkEO9ONGoNz0jQqmBlrEBLhXOvkl74hZY9xt/Q99
hHvbfJ5cTLuAa7Dhqj6BhnbYOK01QUl1lApQLqNKd9KXlLQnVHx2B2KsrPfjWYHk
ajvtC6Mc/SlTpIP+pUEMblkRWLrZQjFdj+6K3AHWh/QbeQTfAjRDP/4zklbxpw+7
L8KsvSXBPlpYSSnyfmwYrrx266ZMObYnXBVhDcW0PX6W0HdDUQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFE2wdT7VKucha0Q5o7a6RECfi+pAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmQ0YzhkZDAtOGVhNy0z
NWZjLThjNmMtMGNjMDdmNWNmYjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBeh22/AduddFxu6meJkFMFR/y7+0F9l571cTCg
swINFWj+vPzI+J5ySUFU11qu6rh6RNGZ26whjjM5MrQ8W8Wo6Q89uA74VJ5z5Sfe
VJx0JVplTORkVghap2Enx/4SDtknVYa3grkeRanS3PhiBT8oKyUtlHQ5Qp59Ktr2
+BlGcDEdaJTazL0AMb2eDhxSVxp4vXE+YPErnN/fK8jrQ+0ZBueGUMmkGNJLGEpr
NiVoKeEM26sNb//cSd1UJ6SLgoQouZEV60zs9VqkTroXhtd+R1et+xHeJlIoJbnc
upvwmGOITDNFz2W9HBc2EDs7b3omJYNMc6aq89YGMLWL9t9V
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:14 2025 by rpki-client