Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344c50bb-3dc4-3822-86f7-50e1888e6588.roa
File:                     344c50bb-3dc4-3822-86f7-50e1888e6588.roa (raw, json)
Hash identifier:          GLhC8swZYZW5ShWBTSmcGKtYv7AE6Z/+7+xZ/UqUAFo=
Subject key identifier:   23:21:BB:BA:C6:55:22:FA:55:50:F9:74:10:73:35:53:4A:FF:07:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307A9B772F52019753A380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344c50bb-3dc4-3822-86f7-50e1888e6588.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     40647
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7a:9b:77:2f:52:01:97:53:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=632be374-909a-4d87-a808-8221422a1107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:a0:1b:0e:54:75:70:0a:d6:c4:2a:78:58:
                    22:43:c9:44:75:15:c9:97:89:3a:be:2f:40:3f:dd:
                    81:f2:ee:e2:f5:f6:fc:ea:f7:37:1e:4d:f4:dc:4b:
                    30:7f:6d:fb:c7:eb:59:71:b7:10:66:93:ea:4a:27:
                    39:ac:ad:0d:4d:56:de:01:4b:12:9e:a6:5b:c8:c2:
                    5d:30:2a:84:7e:60:7b:19:eb:86:9b:10:7b:1f:80:
                    d8:50:7a:69:61:62:cf:b2:08:f7:72:22:1d:bd:07:
                    ae:9f:63:ea:eb:5e:69:ee:ca:af:b9:c3:1b:9d:e4:
                    7b:c1:73:24:57:c4:d7:4c:8f:58:ec:b1:a3:df:58:
                    ac:11:27:47:8b:08:52:d3:b9:c4:a0:c3:59:f1:ae:
                    f9:f5:88:d9:ca:fd:d1:9f:1e:2d:7b:cc:ff:67:d7:
                    76:d0:5c:87:70:fa:c8:6b:f6:85:23:54:bb:84:20:
                    42:c6:b5:6c:f6:59:49:02:3b:9f:39:8a:f6:b5:22:
                    4c:97:84:86:8d:77:49:4a:86:3b:af:83:77:c1:5a:
                    cb:a1:00:53:c8:4e:2b:1b:24:8a:cf:e4:73:6a:3b:
                    d3:5e:f3:09:83:f5:97:98:ac:b7:40:8b:08:f1:0f:
                    18:06:cb:1d:67:82:33:c6:65:8f:40:c2:1b:6b:42:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:21:BB:BA:C6:55:22:FA:55:50:F9:74:10:73:35:53:4A:FF:07:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/344c50bb-3dc4-3822-86f7-50e1888e6588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9c:4e:33:7b:a7:f0:03:79:c1:8f:a9:19:37:c6:f1:2d:63:
         10:29:7a:cf:ca:0e:b4:59:37:f3:0e:8d:61:87:52:44:1e:61:
         a5:a6:c0:31:d3:a8:5d:bb:74:26:bd:22:a0:73:36:c8:ef:e4:
         d6:ec:87:ab:87:94:f4:69:8d:72:c2:5b:85:7c:01:39:2b:f9:
         65:86:58:37:d9:0d:1b:fb:22:b9:e6:38:39:13:fc:25:28:af:
         2c:a6:23:63:60:1c:2d:d6:b8:45:85:e5:af:50:92:05:9d:89:
         2b:93:a3:99:7d:9a:35:f5:e5:dc:c0:9e:f4:12:7a:07:d2:f8:
         2c:71:8e:d5:a6:d4:0e:13:8c:88:08:52:bf:fc:dc:21:2c:5e:
         65:02:10:1b:9b:5d:c2:aa:60:0f:aa:50:97:f4:52:6b:d3:59:
         a9:5b:16:e9:ee:c9:c5:1a:be:b3:a2:25:f5:eb:fa:e9:7f:4e:
         f0:dd:7b:01:26:40:77:42:8a:f9:70:22:89:34:12:34:8f:40:
         92:58:ff:7d:93:48:1b:10:1d:fc:70:74:d6:e5:db:8b:4e:59:
         2b:9a:6d:96:7a:d6:6c:a8:26:86:68:76:81:1a:a2:25:ae:1d:
         22:35:2c:d2:b0:06:68:17:7f:ca:93:8e:02:8d:e7:af:86:24:
         ff:8c:d3:63
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpaMHqbdy9SAZdTo4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
NjMyYmUzNzQtOTA5YS00ZDg3LWE4MDgtODIyMTQyMmExMTA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVqgGw5UdXAK1sQqeFgiQ8lEdRXJl4k6vi9A
P92B8u7i9fb86vc3Hk303Eswf237x+tZcbcQZpPqSic5rK0NTVbeAUsSnqZbyMJd
MCqEfmB7GeuGmxB7H4DYUHppYWLPsgj3ciIdvQeun2Pq615p7sqvucMbneR7wXMk
V8TXTI9Y7LGj31isESdHiwhS07nEoMNZ8a759YjZyv3Rnx4te8z/Z9d20FyHcPrI
a/aFI1S7hCBCxrVs9llJAjufOYr2tSJMl4SGjXdJSoY7r4N3wVrLoQBTyE4rGySK
z+RzajvTXvMJg/WXmKy3QIsI8Q8YBssdZ4IzxmWPQMIba0KFywIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCMhu7rGVSL6VVD5dBBzNVNK/weJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzQ0YzUwYmItM2RjNC0z
ODIyLTg2ZjctNTBlMTg4OGU2NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCGnE4ze6fwA3nBj6kZN8bxLWMQKXrPyg60WTfz
Do1hh1JEHmGlpsAx06hdu3QmvSKgczbI7+TW7Ierh5T0aY1ywluFfAE5K/llhlg3
2Q0b+yK55jg5E/wlKK8spiNjYBwt1rhFheWvUJIFnYkrk6OZfZo19eXcwJ70EnoH
0vgscY7VptQOE4yICFK//NwhLF5lAhAbm13CqmAPqlCX9FJr01mpWxbp7snFGr6z
oiX16/rpf07w3XsBJkB3Qor5cCKJNBI0j0CSWP99k0gbEB38cHTW5duLTlkrmm2W
etZsqCaGaHaBGqIlrh0iNSzSsAZoF3/Kk44CjeevhiT/jNNj
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:18:56 2025 by rpki-client