Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/944d2a14-343b-3f4c-8d1b-02871caa602a.roa
File:                     944d2a14-343b-3f4c-8d1b-02871caa602a.roa (raw, json)
Hash identifier:          +QI+ZXogZIa18AiUB8Zj+BJwcXjmocTKaE3oaVLfad0=
Subject key identifier:   41:78:7B:42:AA:DD:71:F4:4B:06:3F:DF:D2:2C:BC:1A:7B:B5:8A:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D3BD7004877EA2252710
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/944d2a14-343b-3f4c-8d1b-02871caa602a.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396561
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d3:bd:70:04:87:7e:a2:25:27:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=0562841d-83d4-4a94-8636-63a31f02b396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c0:44:0e:5f:63:88:36:f5:1e:42:0c:fd:81:
                    e1:32:60:8e:01:40:24:c1:d4:12:5f:93:c6:5d:98:
                    d3:d1:05:58:36:d8:7e:39:10:a6:a8:be:49:40:d9:
                    d3:0c:de:c7:dc:3b:25:a0:06:0a:50:0e:13:7e:95:
                    6d:12:19:be:c5:0b:09:15:44:3e:93:5c:c7:9c:ae:
                    04:8a:ea:8c:cd:19:1c:9e:20:d8:fb:d4:8e:52:a2:
                    b8:f0:6c:e9:ff:c0:4c:21:54:18:80:93:bb:d4:4b:
                    9c:14:6a:93:ea:11:13:c0:79:59:0a:c9:7d:36:e9:
                    4b:ac:d9:dd:0a:79:2f:d4:12:f5:7f:d5:e8:23:e7:
                    77:19:af:24:33:15:4c:75:73:80:fc:b8:e7:7a:4d:
                    9a:52:73:61:c9:82:29:8a:91:a0:1f:4d:ca:08:52:
                    b8:4d:e9:0a:ff:41:43:6b:7d:39:5d:7e:5a:65:95:
                    df:fa:ac:24:16:82:57:ee:6e:40:8e:16:78:de:be:
                    ad:a8:02:7b:66:d1:ba:2a:9c:88:74:43:53:39:55:
                    1c:bf:4f:7d:99:a7:36:43:fb:15:dd:ea:57:22:e1:
                    70:77:88:fe:cf:65:a9:db:03:62:db:fb:cf:16:18:
                    b3:3f:a3:c3:99:b8:00:7e:8a:55:cf:99:9c:a9:43:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:78:7B:42:AA:DD:71:F4:4B:06:3F:DF:D2:2C:BC:1A:7B:B5:8A:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/944d2a14-343b-3f4c-8d1b-02871caa602a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:98:00:3e:d5:96:7c:a6:b4:19:01:3f:25:0e:c0:b3:7c:cb:
         30:bd:cf:99:09:1f:bc:9d:60:ac:51:26:79:29:00:b4:9f:03:
         5b:da:56:89:c7:e3:1a:c2:0d:e8:29:fc:72:7a:84:56:07:f7:
         b8:57:6d:11:38:06:dd:6f:29:35:1a:1f:33:11:a9:d6:ab:93:
         b5:b9:d9:8b:12:e8:8f:fc:4b:f0:0b:6f:2a:fb:26:c1:8b:6b:
         24:28:45:45:47:a7:77:d3:17:11:64:62:2a:86:50:5f:67:99:
         65:39:90:8d:ca:4f:9e:e8:b5:4d:aa:cc:c6:cf:89:2c:bb:12:
         87:77:d7:b9:74:e9:a9:4a:0a:cd:ce:68:91:2d:56:30:92:76:
         a4:1c:0c:ae:21:dd:19:25:db:b8:37:49:25:6a:1d:cd:cc:e7:
         45:20:a6:b4:d7:f4:27:bd:8d:d6:d0:9a:a1:d5:aa:07:25:41:
         13:c7:99:8d:66:76:ff:86:69:9e:7f:d9:78:43:b0:a3:0c:d7:
         e9:a1:59:19:1f:3d:a8:08:69:4c:0f:e0:5e:66:37:64:8b:8e:
         ca:10:18:dc:5e:33:4d:fe:35:2e:77:59:64:55:6f:1b:9f:3e:
         d1:65:1e:95:d4:ef:12:3b:41:b8:a9:11:ba:a7:bf:21:67:fd:
         7a:9b:10:bc
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZodO9cASHfqIlJxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk
MDU2Mjg0MWQtODNkNC00YTk0LTg2MzYtNjNhMzFmMDJiMzk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcBEDl9jiDb1HkIM/YHhMmCOAUAkwdQSX5PG
XZjT0QVYNth+ORCmqL5JQNnTDN7H3DsloAYKUA4TfpVtEhm+xQsJFUQ+k1zHnK4E
iuqMzRkcniDY+9SOUqK48Gzp/8BMIVQYgJO71EucFGqT6hETwHlZCsl9NulLrNnd
Cnkv1BL1f9XoI+d3Ga8kMxVMdXOA/Ljnek2aUnNhyYIpipGgH03KCFK4TekK/0FD
a305XX5aZZXf+qwkFoJX7m5AjhZ43r6tqAJ7ZtG6KpyIdENTOVUcv099mac2Q/sV
3epXIuFwd4j+z2Wp2wNi2/vPFhizP6PDmbgAfopVz5mcqUPWuQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEF4e0Kq3XH0SwY/39IsvBp7tYq5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTQ0ZDJhMTQtMzQzYi0z
ZjRjLThkMWItMDI4NzFjYWE2MDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBMmAA+1ZZ8prQZAT8lDsCzfMswvc+ZCR+8nWCs
USZ5KQC0nwNb2laJx+Mawg3oKfxyeoRWB/e4V20ROAbdbyk1Gh8zEanWq5O1udmL
EuiP/EvwC28q+ybBi2skKEVFR6d30xcRZGIqhlBfZ5llOZCNyk+e6LVNqszGz4ks
uxKHd9e5dOmpSgrNzmiRLVYwknakHAyuId0ZJdu4N0klah3NzOdFIKa01/QnvY3W
0Jqh1aoHJUETx5mNZnb/hmmef9l4Q7CjDNfpoVkZHz2oCGlMD+BeZjdki47KEBjc
XjNN/jUud1lkVW8bnz7RZR6V1O8SO0G4qRG6p78hZ/16mxC8
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:25:22 2025 by rpki-client