Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5579b81d-ba6e-39f3-8b47-035203368afc.roa
File:                     5579b81d-ba6e-39f3-8b47-035203368afc.roa (raw, json)
Hash identifier:          T1LP7W4AMo7zVzzChsXgmm4sNoE8QgbFvQAesttoshA=
Subject key identifier:   AF:24:1F:84:BE:F0:E3:63:07:8D:EA:D9:48:D7:3C:17:31:0C:99:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCCC58E650C1B90952BF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5579b81d-ba6e-39f3-8b47-035203368afc.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396600
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:cc:58:e6:50:c1:b9:09:52:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=51577303-736f-4519-9cfd-4e8042c2968d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:0b:2a:67:ba:a2:20:57:d6:3a:17:39:09:76:
                    05:c1:d1:54:e8:11:2f:f8:89:4f:99:ff:bb:ed:cf:
                    bd:8c:9d:06:f0:6a:fb:00:48:b7:e5:3d:e6:66:04:
                    4f:83:93:fd:f9:fa:79:74:00:e1:ff:8c:a2:c3:b4:
                    28:d3:c0:03:dc:e2:15:2b:7b:3e:7c:3e:f6:a4:5b:
                    ef:92:dd:d7:f3:ac:e6:54:a7:a6:0a:01:10:c4:d4:
                    2b:bb:34:c5:2b:4b:ed:68:35:d6:42:30:9d:22:87:
                    61:90:6a:8f:9c:7f:c5:41:21:2c:a6:e8:1d:03:83:
                    49:3b:5f:bf:1c:42:1e:61:e4:1f:e6:74:92:0f:7d:
                    8b:8d:78:6c:b7:9b:95:56:fd:8b:9f:b7:15:1b:cc:
                    ac:14:89:28:75:a1:2f:2a:55:28:f0:04:67:57:7b:
                    da:e1:43:39:bb:41:05:68:16:50:9d:a4:ea:1f:4d:
                    91:45:dc:fb:76:cc:d4:a3:a2:3b:3a:11:23:b2:42:
                    51:3d:b7:2c:91:4c:e6:04:bb:31:b3:d0:a9:18:ad:
                    c5:20:c4:81:ed:f7:8b:63:93:9c:00:1f:7f:e7:fa:
                    68:b9:cd:f1:ad:0a:d7:02:5e:d3:27:68:64:20:71:
                    52:cf:03:da:93:c3:18:92:63:53:2c:34:51:03:4a:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:24:1F:84:BE:F0:E3:63:07:8D:EA:D9:48:D7:3C:17:31:0C:99:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5579b81d-ba6e-39f3-8b47-035203368afc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f3:25:48:11:62:c5:f8:9f:d6:45:9a:e4:7b:28:6f:e6:e5:
         0e:44:de:4c:24:29:38:3b:6d:c3:ca:77:b2:f0:df:49:ae:af:
         c3:e2:96:70:69:ea:cb:2a:04:d4:05:89:3d:e1:5a:e1:1f:b4:
         cc:8f:3d:ad:6e:a9:ca:21:e5:a2:d7:bd:e9:47:43:10:0b:40:
         16:69:6f:de:33:5e:e9:93:78:0a:5b:c1:80:e3:4f:da:3e:d9:
         7f:1d:b6:8d:53:56:b8:a7:e5:41:4b:86:81:2d:a3:a1:16:e7:
         8d:ab:23:39:6a:bc:1d:a3:fb:72:fe:df:d1:34:7e:51:19:34:
         19:de:92:1c:4a:98:4f:45:54:0a:2c:df:1e:8c:04:44:6e:ff:
         ff:ca:58:f9:c4:a5:8e:67:5f:53:a8:74:f7:78:09:de:e4:82:
         39:ee:23:a2:53:30:8e:3c:7b:8f:4f:d2:20:0a:49:c8:fe:c9:
         f3:89:27:2b:bb:66:84:e9:c8:c3:fb:75:ec:e8:be:94:e8:5a:
         ad:fc:5f:d1:fc:10:f9:ea:86:e1:de:02:6b:ab:76:3c:42:a0:
         cb:a1:50:9d:d8:df:87:e2:d3:61:36:ed:c9:29:41:d7:0a:f6:
         17:ef:ed:fe:59:c5:d1:36:9b:4a:2d:8f:5c:71:4a:00:e7:ac:
         c8:bf:0a:d7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vMxY5lDBuQlSv0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
NTE1NzczMDMtNzM2Zi00NTE5LTljZmQtNGU4MDQyYzI5NjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAsqZ7qiIFfWOhc5CXYFwdFU6BEv+IlPmf+7
7c+9jJ0G8Gr7AEi35T3mZgRPg5P9+fp5dADh/4yiw7Qo08AD3OIVK3s+fD72pFvv
kt3X86zmVKemCgEQxNQruzTFK0vtaDXWQjCdIodhkGqPnH/FQSEspugdA4NJO1+/
HEIeYeQf5nSSD32LjXhst5uVVv2Ln7cVG8ysFIkodaEvKlUo8ARnV3va4UM5u0EF
aBZQnaTqH02RRdz7dszUo6I7OhEjskJRPbcskUzmBLsxs9CpGK3FIMSB7feLY5Oc
AB9/5/pouc3xrQrXAl7TJ2hkIHFSzwPak8MYkmNTLDRRA0qsNwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFK8kH4S+8ONjB43q2UjXPBcxDJlpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTU3OWI4MWQtYmE2ZS0z
OWYzLThiNDctMDM1MjAzMzY4YWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABzzJUgRYsX4n9ZFmuR7KG/m5Q5E3kwkKTg7bcPKd7Lw30mur8Pi
lnBp6ssqBNQFiT3hWuEftMyPPa1uqcoh5aLXvelHQxALQBZpb94zXumTeApbwYDj
T9o+2X8dto1TVrin5UFLhoEto6EW542rIzlqvB2j+3L+39E0flEZNBnekhxKmE9F
VAos3x6MBERu///KWPnEpY5nX1OodPd4Cd7kgjnuI6JTMI48e49P0iAKScj+yfOJ
Jyu7ZoTpyMP7dezovpToWq38X9H8EPnqhuHeAmurdjxCoMuhUJ3Y34fi02E27ckp
QdcK9hfv7f5ZxdE2m0otj1xxSgDnrMi/Ctc=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:07 2025 by rpki-client