Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7944015b-7b88-3e14-95cf-098afd85b6a3.roa
File:                     7944015b-7b88-3e14-95cf-098afd85b6a3.roa (raw, json)
Hash identifier:          vAPrLejM5LIGycGh8nQRtCp2kNRLaB4r2z8S8fPuj1U=
Subject key identifier:   01:FF:3F:48:43:C6:CD:8D:20:87:DE:D1:38:42:A0:1A:E2:5A:A3:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883FC3E79B938BAEC532E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7944015b-7b88-3e14-95cf-098afd85b6a3.roa
Signing time:             Tue 19 Aug 2025 12:34:14 +0000
ROA not before:           Tue 19 Aug 2025 12:34:14 +0000
ROA not after:            Mon 17 Nov 2025 13:34:14 +0000
asID:                     396594
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:fc:3e:79:b9:38:ba:ec:53:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:14 2025 GMT
            Not After : Nov 17 13:34:14 2025 GMT
        Subject: CN=542381d0-6c4c-4296-b154-3507b482f397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:63:61:fe:27:cc:04:5b:2c:92:68:e7:ca:
                    b0:3e:71:49:7d:9f:ae:ab:dc:38:14:e4:17:3e:45:
                    e6:e1:66:0b:a3:0d:77:ae:3e:ba:e9:1c:8c:6f:b1:
                    61:ea:e1:af:00:65:7e:56:42:7a:40:81:56:35:fe:
                    2d:4a:ff:90:70:d8:e0:35:e5:d9:13:8d:01:e8:71:
                    f0:1a:73:1a:31:e4:ce:b9:03:c4:cb:b6:d2:d4:42:
                    e0:ba:c7:30:8d:b8:f8:36:f7:6d:bc:a9:5a:15:bb:
                    a3:d3:b5:f7:c4:1b:59:26:14:84:3c:3e:87:95:96:
                    02:47:a8:f2:2d:9d:d4:db:5a:d3:96:75:be:7a:65:
                    58:d7:e5:d2:d3:f0:51:57:f4:e9:dc:4f:03:a9:84:
                    a8:85:4b:f1:98:7d:28:76:7f:25:5b:38:65:cd:9f:
                    e5:0f:1b:94:e1:65:bb:22:01:dd:62:ed:a5:cd:85:
                    bf:e2:e7:be:58:a7:98:3f:b5:98:5e:ae:60:45:a2:
                    ad:bd:f4:72:67:c8:a6:ee:c5:62:85:e5:c1:50:6b:
                    64:b9:76:de:97:b6:e6:68:27:57:92:3c:ea:7e:e0:
                    1c:5a:67:d6:cd:24:22:86:a8:75:ee:73:03:a8:2f:
                    0a:f9:26:09:ba:c4:51:b2:18:d3:57:6b:21:85:51:
                    d0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FF:3F:48:43:C6:CD:8D:20:87:DE:D1:38:42:A0:1A:E2:5A:A3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7944015b-7b88-3e14-95cf-098afd85b6a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:94:de:6e:4e:75:4d:a3:98:f9:b4:59:66:e0:be:2c:ad:d4:
         d9:98:4b:13:85:11:66:7d:5c:47:b0:6a:38:3c:cc:0b:e9:cb:
         7f:2d:f8:03:e4:b8:37:85:74:3c:2e:a6:e3:bd:15:e3:fb:8d:
         c9:59:51:76:b7:e9:a2:7f:98:d3:c5:3f:3e:c7:e5:c0:63:93:
         d1:f4:d6:09:f8:01:3b:c6:1a:fd:db:97:de:39:b6:ea:79:4d:
         9f:66:d4:d3:fa:75:de:77:be:b3:80:cc:78:70:c2:a8:26:dd:
         ee:e7:60:9a:c9:3b:02:a2:c1:6b:73:cc:02:73:c9:a9:0d:71:
         e2:a0:4a:b2:f1:7d:9d:7d:fc:b8:ef:e2:fc:9a:3a:cc:f4:e6:
         ee:6e:41:cf:30:0e:46:2a:e4:33:9e:c7:6e:23:ae:1c:d1:3c:
         91:ac:20:f3:46:1c:60:a2:bb:65:83:88:0a:44:cb:c2:f7:38:
         73:30:db:1f:2d:cf:3b:6d:d5:f6:f8:e5:55:a6:59:62:2d:8c:
         46:5a:df:4d:56:4d:33:16:ec:61:c6:f2:b2:bd:96:b9:ba:66:
         56:4f:5b:22:31:c5:e5:98:0b:df:57:23:31:da:ee:24:37:1b:
         c9:ba:2a:1d:e2:3c:6d:cb:42:32:4e:36:8e:71:83:aa:88:85:
         c5:c5:ab:58
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/w+ebk4uuxTLoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxOTEyMzQxNFoXDTI1MTExNzEzMzQxNFowLzEtMCsGA1UEAxMk
NTQyMzgxZDAtNmM0Yy00Mjk2LWIxNTQtMzUwN2I0ODJmMzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTtjYf4nzARbLJJo58qwPnFJfZ+uq9w4FOQX
PkXm4WYLow13rj666RyMb7Fh6uGvAGV+VkJ6QIFWNf4tSv+QcNjgNeXZE40B6HHw
GnMaMeTOuQPEy7bS1ELguscwjbj4NvdtvKlaFbuj07X3xBtZJhSEPD6HlZYCR6jy
LZ3U21rTlnW+emVY1+XS0/BRV/Tp3E8DqYSohUvxmH0odn8lWzhlzZ/lDxuU4WW7
IgHdYu2lzYW/4ue+WKeYP7WYXq5gRaKtvfRyZ8im7sViheXBUGtkuXbel7bmaCdX
kjzqfuAcWmfWzSQihqh17nMDqC8K+SYJusRRshjTV2shhVHQTQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAH/P0hDxs2NIIfe0ThCoBriWqP8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzk0NDAxNWItN2I4OC0z
ZTE0LTk1Y2YtMDk4YWZkODViNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAolN5uTnVNo5j5tFlm4L4srdTZmEsThRFmfVxH
sGo4PMwL6ct/LfgD5Lg3hXQ8LqbjvRXj+43JWVF2t+mif5jTxT8+x+XAY5PR9NYJ
+AE7xhr925feObbqeU2fZtTT+nXed76zgMx4cMKoJt3u52CayTsCosFrc8wCc8mp
DXHioEqy8X2dffy47+L8mjrM9ObubkHPMA5GKuQznsduI64c0TyRrCDzRhxgortl
g4gKRMvC9zhzMNsfLc87bdX2+OVVplliLYxGWt9NVk0zFuxhxvKyvZa5umZWT1si
McXlmAvfVyMx2u4kNxvJuiod4jxty0IyTjaOcYOqiIXFxatY
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:04 2025 by rpki-client