Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/507820c7-82e7-3cb4-8788-21784dc6776f.roa
File:                     507820c7-82e7-3cb4-8788-21784dc6776f.roa (raw, json)
Hash identifier:          cOWhXwBw/Lf54NqECC61NPr+LbyKgOfCJ0CY+dZc0rQ=
Subject key identifier:   2C:47:1C:47:BA:B5:44:BC:6F:D5:27:C1:06:41:61:26:53:0B:B8:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D7A1DB720AB1A3919380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/507820c7-82e7-3cb4-8788-21784dc6776f.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     397203
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d7:a1:db:72:0a:b1:a3:91:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=36843d4a-d192-4354-808b-136c53755dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:1c:18:c7:9d:31:c4:c1:87:b1:2c:e9:8d:
                    1e:82:0b:f7:23:1e:02:b3:de:24:a2:1c:3d:e0:e1:
                    c1:e6:cd:f8:f0:10:6e:7d:74:c2:fa:e4:6c:f5:36:
                    02:68:5f:de:39:0c:bf:3b:3e:33:43:d1:3a:b0:56:
                    a3:06:90:76:c2:f6:fa:ab:e4:ad:02:f8:e2:35:02:
                    91:ea:ec:73:9b:26:2b:1b:2f:c6:97:af:83:f1:03:
                    66:18:7e:0d:cf:eb:20:ab:5a:62:a6:55:65:83:e3:
                    63:94:93:33:10:fa:28:07:06:27:f0:f1:c9:e4:b2:
                    42:9d:d5:a3:6f:7a:f9:45:3a:81:cb:ab:18:f1:b5:
                    52:fe:14:c8:c7:76:fa:27:9b:d9:b7:1c:33:d6:66:
                    b9:44:fc:28:35:ae:a4:aa:78:0e:51:df:18:6b:63:
                    0b:bf:25:e0:a9:c5:00:25:66:07:f6:88:00:34:46:
                    5e:a0:f4:97:66:1e:37:19:46:83:24:f5:33:24:ac:
                    c8:a8:9e:13:ed:df:24:10:7f:cf:da:4f:aa:22:55:
                    49:b4:5f:0a:30:11:e1:48:f9:64:8a:e9:c8:59:22:
                    9f:e8:44:5c:43:d5:fc:e5:7c:93:60:08:4d:c3:0f:
                    33:14:db:87:da:ea:e7:fe:46:00:b2:6a:00:aa:84:
                    62:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:47:1C:47:BA:B5:44:BC:6F:D5:27:C1:06:41:61:26:53:0B:B8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/507820c7-82e7-3cb4-8788-21784dc6776f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:7a:1c:0d:8a:39:c2:b5:47:e9:8e:b1:fe:d5:e2:a3:8e:5d:
         3c:88:56:bb:3e:55:8e:24:33:fd:cb:05:43:ed:b7:24:74:d2:
         ac:92:88:01:1f:15:40:ab:ea:72:b1:4f:4d:ca:bb:0d:0d:7d:
         37:84:74:bc:2e:35:56:62:a9:fc:fb:c7:bf:38:a8:00:f1:74:
         2d:83:c6:74:43:35:d7:23:d7:6f:99:17:de:64:3d:56:1e:e4:
         c7:7a:42:3a:65:27:be:72:64:bb:79:25:0f:64:5e:28:27:26:
         79:e6:45:4d:19:73:ec:1e:14:9d:a4:70:12:f9:ad:1a:39:17:
         ff:30:62:36:b2:c5:6c:72:79:5c:9a:5f:02:ed:dd:66:ea:38:
         71:54:76:a0:d5:b2:e8:29:e9:ec:13:83:2a:3b:11:f9:ba:a7:
         cd:49:7a:f1:db:4c:d4:ef:76:d6:00:0b:a4:d5:10:c0:df:80:
         fd:51:44:f4:9a:ac:b3:81:dc:5d:71:25:25:ce:bc:0f:b5:9d:
         09:bb:55:05:d2:06:4a:59:f2:0f:d1:77:38:aa:d3:ac:1c:57:
         a1:8e:6e:6a:b0:fc:c0:3b:ea:d5:1c:ca:6b:74:c7:dc:fb:80:
         4e:11:f8:52:44:f2:a3:ea:7a:1e:87:9c:61:dc:df:e3:64:4e:
         14:0c:5c:be
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZodeh23IKsaORk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk
MzY4NDNkNGEtZDE5Mi00MzU0LTgwOGItMTM2YzUzNzU1ZGNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCscGMedMcTBh7Es6Y0eggv3Ix4Cs94kohw9
4OHB5s348BBufXTC+uRs9TYCaF/eOQy/Oz4zQ9E6sFajBpB2wvb6q+StAvjiNQKR
6uxzmyYrGy/Gl6+D8QNmGH4Nz+sgq1piplVlg+NjlJMzEPooBwYn8PHJ5LJCndWj
b3r5RTqBy6sY8bVS/hTIx3b6J5vZtxwz1ma5RPwoNa6kqngOUd8Ya2MLvyXgqcUA
JWYH9ogANEZeoPSXZh43GUaDJPUzJKzIqJ4T7d8kEH/P2k+qIlVJtF8KMBHhSPlk
iunIWSKf6ERcQ9X85XyTYAhNww8zFNuH2urn/kYAsmoAqoRibQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCxHHEe6tUS8b9UnwQZBYSZTC7gJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTA3ODIwYzctODJlNy0z
Y2I0LTg3ODgtMjE3ODRkYzY3NzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCYehwNijnCtUfpjrH+1eKjjl08iFa7PlWOJDP9
ywVD7bckdNKskogBHxVAq+pysU9NyrsNDX03hHS8LjVWYqn8+8e/OKgA8XQtg8Z0
QzXXI9dvmRfeZD1WHuTHekI6ZSe+cmS7eSUPZF4oJyZ55kVNGXPsHhSdpHAS+a0a
ORf/MGI2ssVscnlcml8C7d1m6jhxVHag1bLoKensE4MqOxH5uqfNSXrx20zU73bW
AAuk1RDA34D9UUT0mqyzgdxdcSUlzrwPtZ0Ju1UF0gZKWfIP0Xc4qtOsHFehjm5q
sPzAO+rVHMprdMfc+4BOEfhSRPKj6noeh5xh3N/jZE4UDFy+
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:31:49 2025 by rpki-client