Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da5c1b2a-6008-3102-9dc3-ef7027f5f9d5.roa
File:                     da5c1b2a-6008-3102-9dc3-ef7027f5f9d5.roa (raw, json)
Hash identifier:          Y/FX1hufyErC2bmh46Es5rCIOoe88Ks2pvJUWF/Axj4=
Subject key identifier:   BB:36:15:68:4E:BE:3D:B8:27:94:BA:BE:2A:CE:6D:B5:85:0E:3A:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B9BDFAF47E0DAC5045580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da5c1b2a-6008-3102-9dc3-ef7027f5f9d5.roa
Signing time:             Wed 20 Aug 2025 14:37:01 +0000
ROA not before:           Wed 20 Aug 2025 14:37:01 +0000
ROA not after:            Tue 18 Nov 2025 15:37:01 +0000
asID:                     396600
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:9b:df:af:47:e0:da:c5:04:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:37:01 2025 GMT
            Not After : Nov 18 15:37:01 2025 GMT
        Subject: CN=79482a2e-ef8f-4259-8859-be7cd5f0dfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:52:6b:6f:fa:bd:0b:33:bd:cc:56:01:31:
                    cf:bf:44:6b:63:0e:47:45:cd:f5:4d:1f:cb:8d:24:
                    7c:65:a9:45:20:26:06:4a:a2:3a:1b:de:d1:a8:6d:
                    ef:ef:5b:cf:38:ed:06:dc:90:60:eb:20:28:9b:75:
                    ba:a0:03:96:09:4c:69:04:c1:5d:17:c5:d1:cd:4f:
                    28:5e:8a:3c:a8:a1:7d:9b:2e:46:fe:5e:20:a1:00:
                    e9:ff:9d:02:79:8a:2b:f3:05:6b:d5:74:81:e8:8c:
                    91:42:28:06:97:48:47:a4:f5:2d:96:32:f5:bd:64:
                    fc:2c:b6:03:3f:e8:be:40:55:95:05:5b:1f:da:db:
                    42:9f:31:63:9d:29:80:c0:46:d2:f4:8e:a1:c7:b8:
                    dc:6c:c2:2d:45:ad:a6:9c:8e:df:88:fa:8b:8b:41:
                    41:e8:09:5b:19:3f:27:14:2b:b4:47:42:fc:05:5b:
                    2a:16:81:f2:68:1b:0e:ae:35:a0:0f:06:2d:f2:61:
                    54:85:4f:97:82:b1:e7:1d:c5:b3:cb:d1:d7:df:d1:
                    82:58:a7:61:98:41:5a:62:0e:32:93:69:9b:cd:ef:
                    c6:1c:63:5e:6c:1d:5d:8f:42:1c:d6:4e:75:0d:d0:
                    89:f8:9a:84:cb:78:8c:c6:04:f0:4a:3b:b9:4d:2c:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:36:15:68:4E:BE:3D:B8:27:94:BA:BE:2A:CE:6D:B5:85:0E:3A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da5c1b2a-6008-3102-9dc3-ef7027f5f9d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:cd:35:10:59:5b:de:61:21:1d:be:85:9c:cb:c1:61:fa:2a:
         7a:46:1d:10:17:4d:4c:bb:de:55:30:bf:e7:8c:88:23:08:ad:
         1d:0c:6f:20:fb:ed:39:90:c0:23:db:c1:2a:8e:32:8e:8a:37:
         5d:a0:1f:ec:e0:2e:96:97:05:3f:da:24:ba:d6:9a:e3:aa:ec:
         5e:42:bd:e6:e8:cb:9e:be:16:29:55:90:94:08:d6:19:47:33:
         7b:88:b1:53:e3:47:7e:b3:80:33:64:54:0c:03:6c:2d:9e:58:
         35:1b:4b:d4:2e:37:d4:88:8e:da:b0:1b:0b:15:a7:8f:ad:22:
         40:cd:e6:a6:cb:ac:12:e1:40:05:c9:4b:7b:d9:ab:9c:12:30:
         72:60:65:e9:2b:4a:6f:ad:c3:f1:13:48:2d:a5:82:8f:f8:94:
         b1:8f:d9:29:fe:88:1d:e7:a1:34:86:d8:02:c8:8a:dc:16:26:
         42:e6:73:c5:ff:31:fa:c3:b8:23:98:93:66:e7:06:35:85:76:
         45:dd:26:b0:61:68:3d:5d:94:b5:cd:48:db:3f:7c:46:46:ed:
         57:db:ef:b2:06:16:ea:ed:15:9a:5a:4c:88:ba:8d:18:db:32:
         eb:2f:8e:25:12:fe:90:b2:84:34:85:c7:da:f1:fd:aa:a3:06:
         9d:e9:c8:78
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErri5vfr0fg2sUEVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDE0MzcwMVoXDTI1MTExODE1MzcwMVowLzEtMCsGA1UEAxMk
Nzk0ODJhMmUtZWY4Zi00MjU5LTg4NTktYmU3Y2Q1ZjBkZmIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdpSa2/6vQszvcxWATHPv0RrYw5HRc31TR/L
jSR8ZalFICYGSqI6G97RqG3v71vPOO0G3JBg6yAom3W6oAOWCUxpBMFdF8XRzU8o
Xoo8qKF9my5G/l4goQDp/50CeYor8wVr1XSB6IyRQigGl0hHpPUtljL1vWT8LLYD
P+i+QFWVBVsf2ttCnzFjnSmAwEbS9I6hx7jcbMItRa2mnI7fiPqLi0FB6AlbGT8n
FCu0R0L8BVsqFoHyaBsOrjWgDwYt8mFUhU+XgrHnHcWzy9HX39GCWKdhmEFaYg4y
k2mbze/GHGNebB1dj0Ic1k51DdCJ+JqEy3iMxgTwSju5TSzX2QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLs2FWhOvj24J5S6virObbWFDjrIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGE1YzFiMmEtNjAwOC0z
MTAyLTlkYzMtZWY3MDI3ZjVmOWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAnCU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAyzTUQWVveYSEdvoWcy8Fh+ip6Rh0QF01Mu95V
ML/njIgjCK0dDG8g++05kMAj28EqjjKOijddoB/s4C6WlwU/2iS61prjquxeQr3m
6MuevhYpVZCUCNYZRzN7iLFT40d+s4AzZFQMA2wtnlg1G0vULjfUiI7asBsLFaeP
rSJAzeamy6wS4UAFyUt72aucEjByYGXpK0pvrcPxE0gtpYKP+JSxj9kp/ogd56E0
htgCyIrcFiZC5nPF/zH6w7gjmJNm5wY1hXZF3SawYWg9XZS1zUjbP3xGRu1X2++y
Bhbq7RWaWkyIuo0Y2zLrL44lEv6QsoQ0hcfa8f2qowad6ch4
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:26:44 2025 by rpki-client