Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833a5796-e170-355e-9286-7e74452c8388.roa
File:                     833a5796-e170-355e-9286-7e74452c8388.roa (raw, json)
Hash identifier:          WElgtewOstHziR3I9c0yQ2AWzE4Sb1sDRZZyqMyGY98=
Subject key identifier:   CF:28:F4:49:16:CB:27:AD:A6:F1:14:9B:4C:BE:AF:AF:31:6D:B5:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883FB9D70B16F9639376900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833a5796-e170-355e-9286-7e74452c8388.roa
Signing time:             Tue 19 Aug 2025 12:34:14 +0000
ROA not before:           Tue 19 Aug 2025 12:34:14 +0000
ROA not after:            Mon 17 Nov 2025 13:34:14 +0000
asID:                     36618
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:fb:9d:70:b1:6f:96:39:37:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:14 2025 GMT
            Not After : Nov 17 13:34:14 2025 GMT
        Subject: CN=3519083c-5310-4e3b-9907-107876966fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:74:e7:8e:d2:e2:77:35:d7:de:67:37:b4:
                    f5:e8:ee:d0:bb:49:04:48:8b:af:cb:5c:7b:ba:8e:
                    d5:9c:fd:dc:f3:1e:fd:bd:e4:9c:0c:17:d3:6a:e5:
                    17:db:bc:e4:92:fb:1f:44:4b:d0:65:a9:31:92:4c:
                    c3:01:f8:4a:f5:c1:28:5f:5f:82:ff:ad:95:f0:8c:
                    31:93:ae:7b:01:e3:52:4e:79:5c:7b:04:47:33:f2:
                    a9:99:dd:62:22:2a:57:0b:15:37:7b:8b:5c:b9:7e:
                    db:e7:2a:dd:5b:86:d2:df:4a:e3:8c:a1:96:7f:44:
                    06:f4:b6:b5:76:2f:c5:d3:e1:6d:5b:ea:ad:a0:3e:
                    05:3c:56:6f:c6:b3:39:ae:81:61:c0:50:df:5a:31:
                    72:5c:9b:95:a7:d6:2b:4a:fd:cb:c9:e8:db:d0:fd:
                    73:52:7b:81:f1:bd:ec:c4:8d:f4:d7:29:84:9f:f9:
                    51:9a:f2:e4:a3:9b:12:d1:a4:93:01:b3:19:eb:d9:
                    17:38:66:94:97:1b:44:79:2d:ef:35:25:0c:0a:1b:
                    dc:01:b3:24:3c:4a:94:97:69:3b:9c:32:98:8e:24:
                    1f:04:85:0c:1e:c0:9f:30:d1:fe:23:f7:5a:d6:59:
                    86:c2:e0:c9:c5:6a:2c:ad:3e:d2:b0:92:69:11:44:
                    ac:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:28:F4:49:16:CB:27:AD:A6:F1:14:9B:4C:BE:AF:AF:31:6D:B5:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/833a5796-e170-355e-9286-7e74452c8388.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:d1:61:11:18:61:b2:1d:c3:3e:2f:b2:5d:e4:20:8e:96:d4:
         7d:15:f4:89:b8:79:6b:9d:4d:ef:4b:98:d1:bd:6f:c9:c1:01:
         e5:1b:1e:97:7a:0d:f1:ab:62:6e:85:81:2f:b8:4f:90:7e:fa:
         32:da:18:46:2b:ea:53:33:61:d7:69:61:38:a1:86:99:a6:48:
         92:04:39:2b:96:03:95:b4:6f:bb:cb:b4:19:91:df:7c:ed:24:
         4c:1b:f3:b5:a7:d6:79:3a:a9:3a:7f:91:55:c4:23:bb:6a:48:
         3d:7c:45:8a:e5:49:e7:6a:60:77:50:8d:6e:07:c6:28:da:29:
         85:05:59:d8:78:04:ed:0f:6c:19:d9:c2:ca:02:6e:bb:61:6c:
         89:d2:29:81:db:31:3b:dc:d1:68:2b:87:d4:e4:d7:ff:4f:3f:
         71:ba:62:da:cf:2a:da:ac:24:64:c2:ec:f4:f5:bd:fa:dc:7d:
         ef:62:24:9d:a4:9a:cd:c2:02:f3:92:14:08:41:60:95:b9:f5:
         b6:5c:03:48:49:6a:e9:ac:96:7f:e0:75:b9:9c:dc:ae:d7:aa:
         aa:bc:02:7e:4e:40:bc:db:bd:cf:58:4d:dc:0d:b2:8f:c7:22:
         2a:21:ee:cc:9f:a2:07:ab:f5:2d:e2:8f:ac:b6:4a:d3:78:30:
         95:0b:42:12
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/udcLFvljk3aQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxOTEyMzQxNFoXDTI1MTExNzEzMzQxNFowLzEtMCsGA1UEAxMk
MzUxOTA4M2MtNTMxMC00ZTNiLTk5MDctMTA3ODc2OTY2ZmJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG10547S4nc1195nN7T16O7Qu0kESIuvy1x7
uo7VnP3c8x79veScDBfTauUX27zkkvsfREvQZakxkkzDAfhK9cEoX1+C/62V8Iwx
k657AeNSTnlcewRHM/Kpmd1iIipXCxU3e4tcuX7b5yrdW4bS30rjjKGWf0QG9La1
di/F0+FtW+qtoD4FPFZvxrM5roFhwFDfWjFyXJuVp9YrSv3Lyejb0P1zUnuB8b3s
xI301ymEn/lRmvLko5sS0aSTAbMZ69kXOGaUlxtEeS3vNSUMChvcAbMkPEqUl2k7
nDKYjiQfBIUMHsCfMNH+I/da1lmGwuDJxWosrT7SsJJpEUSsJwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFM8o9EkWyyetpvEUm0y+r68xbbVEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODMzYTU3OTYtZTE3MC0z
NTVlLTkyODYtN2U3NDQ1MmM4Mzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB60WERGGGyHcM+L7Jd5CCOltR9FfSJuHlrnU3v
S5jRvW/JwQHlGx6Xeg3xq2JuhYEvuE+Qfvoy2hhGK+pTM2HXaWE4oYaZpkiSBDkr
lgOVtG+7y7QZkd987SRMG/O1p9Z5Oqk6f5FVxCO7akg9fEWK5UnnamB3UI1uB8Yo
2imFBVnYeATtD2wZ2cLKAm67YWyJ0imB2zE73NFoK4fU5Nf/Tz9xumLazyrarCRk
wuz09b363H3vYiSdpJrNwgLzkhQIQWCVufW2XANISWrprJZ/4HW5nNyu16qqvAJ+
TkC8273PWE3cDbKPxyIqIe7Mn6IHq/Ut4o+stkrTeDCVC0IS
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:30:39 2025 by rpki-client