Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a84bdb11-69da-3c82-9f23-c12004dc667c.roa
File:                     a84bdb11-69da-3c82-9f23-c12004dc667c.roa (raw, json)
Hash identifier:          9QsELZ2+lG1Ad5M8LfAHZrXDtNJqVkL9fUQB7qpZuK0=
Subject key identifier:   26:6B:D8:1C:23:78:A7:A1:CA:38:35:6D:CA:51:1C:3C:CA:1A:51:15
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3AEC4FB8136A4994DF42B780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a84bdb11-69da-3c82-9f23-c12004dc667c.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     19836
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:4f:b8:13:6a:49:94:df:42:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=210b0e8b-2f70-45bf-bab5-218be2b597ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:75:66:89:2d:12:a9:a4:ba:c9:02:9f:6e:a2:
                    9e:43:8e:e8:68:97:b0:e9:ec:8f:3d:0d:1d:6b:53:
                    16:83:69:f2:10:a9:05:a5:1b:13:5c:8d:dc:21:a8:
                    5b:45:7b:ec:a0:1e:7a:33:e1:f2:55:bb:4d:02:ec:
                    09:47:01:39:f0:95:1f:f1:20:a9:fe:d4:72:7a:56:
                    70:88:6f:6f:10:b8:64:bc:5a:48:f1:97:c2:f7:35:
                    d0:27:b1:71:9d:f4:f3:fe:2b:ec:f3:f9:f0:57:80:
                    5c:a0:19:f4:8a:e8:d7:65:e0:74:49:bf:13:0c:39:
                    dd:e3:9b:e1:24:29:47:ad:8a:96:61:89:58:bf:d6:
                    65:89:19:da:fb:b0:89:5d:2b:e0:b9:45:95:38:b9:
                    79:fb:66:73:38:b0:57:df:ae:5f:6b:a7:94:a3:15:
                    11:97:97:b4:f8:96:e9:0b:f4:2d:f2:b1:08:97:ae:
                    2c:5b:ee:21:32:e9:7d:ba:5d:86:41:63:1e:e8:c6:
                    ad:7a:02:80:43:53:e7:b9:35:97:a2:ce:70:4a:fe:
                    12:aa:b1:16:82:0e:dc:84:16:dc:f5:d5:33:fe:2d:
                    7b:bb:a3:f5:09:cf:04:1d:10:70:d0:db:fa:b9:18:
                    16:cb:e6:ff:b2:80:fa:77:50:fc:81:c2:b6:69:7a:
                    a4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6B:D8:1C:23:78:A7:A1:CA:38:35:6D:CA:51:1C:3C:CA:1A:51:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a84bdb11-69da-3c82-9f23-c12004dc667c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:11:f2:36:b5:f7:78:e4:f1:d1:64:24:c3:ac:36:78:67:39:
         ff:bd:7a:30:9c:0a:e4:bb:ba:b6:13:5e:c3:ac:7e:3d:b7:43:
         eb:64:09:70:5c:cf:e4:91:03:7c:2e:e4:fd:c4:fb:91:c9:fd:
         94:51:be:e8:c5:46:32:51:88:f2:62:15:95:e7:d9:71:3d:e5:
         a4:40:17:64:c7:ff:9b:35:c3:12:8b:62:94:46:0e:d1:fa:2d:
         98:e0:6e:3a:eb:a2:54:1c:c6:be:c6:3b:bc:7b:4c:03:d0:46:
         56:ee:41:08:3d:41:70:cd:d4:a9:2b:2e:43:ec:96:1e:45:ad:
         71:47:48:7b:1d:2f:4e:29:1d:85:77:28:93:b3:19:21:19:db:
         c6:7f:da:44:79:48:e4:64:1d:c9:0c:43:a9:9d:77:18:a3:c7:
         a1:b3:9a:57:86:4b:e0:19:5e:5c:1a:31:cd:ba:9d:1c:74:35:
         57:df:ab:07:56:ff:14:95:b4:65:f0:b1:1e:4c:74:0e:64:48:
         5d:81:76:4a:98:4c:80:dc:cd:4f:d4:80:cb:b3:9c:3d:15:f4:
         01:7a:40:9d:3d:38:0f:30:e6:75:13:63:38:57:2d:43:e3:bf:
         21:77:6f:0a:60:a2:e1:4a:9a:5b:1f:74:75:74:15:03:10:0b:
         64:f9:e8:fe
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs67E+4E2pJlN9Ct4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk
MjEwYjBlOGItMmY3MC00NWJmLWJhYjUtMjE4YmUyYjU5N2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnVmiS0SqaS6yQKfbqKeQ47oaJew6eyPPQ0d
a1MWg2nyEKkFpRsTXI3cIahbRXvsoB56M+HyVbtNAuwJRwE58JUf8SCp/tRyelZw
iG9vELhkvFpI8ZfC9zXQJ7FxnfTz/ivs8/nwV4BcoBn0iujXZeB0Sb8TDDnd45vh
JClHrYqWYYlYv9ZliRna+7CJXSvguUWVOLl5+2ZzOLBX365fa6eUoxURl5e0+Jbp
C/Qt8rEIl64sW+4hMul9ul2GQWMe6MategKAQ1PnuTWXos5wSv4SqrEWgg7chBbc
9dUz/i17u6P1Cc8EHRBw0Nv6uRgWy+b/soD6d1D8gcK2aXqk/QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCZr2BwjeKehyjg1bcpRHDzKGlEVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg0YmRiMTEtNjlkYS0z
YzgyLTlmMjMtYzEyMDA0ZGM2NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBvEfI2tfd45PHRZCTDrDZ4Zzn/vXownArku7q2
E17DrH49t0PrZAlwXM/kkQN8LuT9xPuRyf2UUb7oxUYyUYjyYhWV59lxPeWkQBdk
x/+bNcMSi2KURg7R+i2Y4G4666JUHMa+xju8e0wD0EZW7kEIPUFwzdSpKy5D7JYe
Ra1xR0h7HS9OKR2FdyiTsxkhGdvGf9pEeUjkZB3JDEOpnXcYo8ehs5pXhkvgGV5c
GjHNup0cdDVX36sHVv8UlbRl8LEeTHQOZEhdgXZKmEyA3M1P1IDLs5w9FfQBekCd
PTgPMOZ1E2M4Vy1D478hd28KYKLhSppbH3R1dBUDEAtk+ej+
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:58:15 2025 by rpki-client