Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa
File:                     0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa (raw, json)
Hash identifier:          XVmwG8Kj2HUa8VaimluUoZIyYsuJOysBSb9bGRE1srI=
Subject key identifier:   EA:09:A3:08:57:76:29:EE:5F:4E:BC:A2:2A:AE:44:97:A7:7D:43:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A8410CF0AD91894F01286B7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     397197
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:cf:0a:d9:18:94:f0:12:86:b7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=619500fc-7eed-4562-9544-6deb8ee95d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:dc:3b:20:88:46:58:19:a6:b2:32:bf:e8:
                    5d:ad:a0:55:0e:a2:85:34:b8:ae:04:0d:52:25:ab:
                    68:d4:84:ec:48:82:a2:38:88:88:c6:d5:c3:10:d5:
                    6a:ec:51:b2:0e:62:4d:d9:9b:c8:29:4e:02:a5:14:
                    8e:22:bd:56:a2:e6:ad:10:a8:ab:1b:ee:b3:77:26:
                    99:82:05:a0:59:31:05:97:aa:c1:8a:10:b5:78:12:
                    8d:25:65:51:f6:5d:dc:7c:a9:6d:52:8e:86:67:b8:
                    84:bb:d5:3a:29:ff:8d:86:3b:87:5e:81:a7:11:b5:
                    95:79:ba:04:fe:d8:18:d3:1a:61:ad:6a:37:b2:74:
                    4a:1e:63:79:e7:7d:3a:53:d5:dc:fe:ba:d4:2e:6b:
                    97:78:e8:ad:c2:6a:b9:7c:ad:07:9a:1e:b2:fd:91:
                    d2:b3:7d:23:65:90:91:f6:5e:c8:ff:dd:c2:01:33:
                    e1:6c:09:c9:6d:5a:fc:f2:3f:4c:5f:ea:77:91:71:
                    53:6e:3b:8a:7b:48:76:3d:3c:a0:32:33:54:79:62:
                    63:1a:93:0b:21:34:dc:5f:e9:f6:5f:7f:b1:f5:de:
                    ef:74:db:8f:b2:f5:64:53:15:6e:77:25:7e:95:8c:
                    c8:00:d3:a8:ce:f5:c1:dd:0d:ba:70:3f:4d:fc:68:
                    84:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:09:A3:08:57:76:29:EE:5F:4E:BC:A2:2A:AE:44:97:A7:7D:43:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0dfa9431-e810-32ab-9730-1e0cf0ca8a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:b9:b8:a7:79:2f:c7:c5:ba:1c:10:41:62:15:76:78:98:76:
         0f:e0:b5:66:9c:39:bc:0f:53:29:2a:99:2c:f6:4b:3e:64:56:
         65:26:a9:ee:cb:e8:91:29:34:af:01:30:83:a6:2a:ea:c1:b5:
         1e:c2:58:d6:d7:04:a2:26:49:88:23:1a:a5:02:9b:46:09:8d:
         e8:07:00:d7:57:de:61:99:cf:cf:d9:f1:68:2a:85:ca:1c:66:
         bc:fb:26:6d:ed:fe:23:f4:13:94:01:ac:8d:74:75:d4:c3:ec:
         f7:6b:86:4e:1b:3f:50:5d:38:21:eb:eb:4b:74:38:48:67:4f:
         40:d4:0e:d8:b7:95:63:7d:93:51:05:99:c1:9e:ac:51:ad:4f:
         53:69:7c:0d:65:4c:4c:3d:a3:96:a8:a2:b5:bd:a2:6b:82:79:
         9c:f9:60:d0:69:68:3b:fd:44:79:00:4a:92:e9:fe:59:e2:87:
         b3:8c:14:ed:eb:f7:70:28:f7:58:57:c3:fd:b3:34:a9:25:af:
         ac:cf:68:94:68:3b:95:93:49:5b:46:f9:1c:ef:0a:ce:8d:d5:
         c9:8d:34:1c:1e:de:2e:99:d7:8a:54:13:d0:75:20:07:1b:21:
         6f:61:aa:9a:8e:c5:2b:88:71:7d:af:96:e9:0e:60:ad:85:71:
         ef:b0:f7:e8
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqEEM8K2RiU8BKGt8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NjE5NTAwZmMtN2VlZC00NTYyLTk1NDQtNmRlYjhlZTk1ZDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1vcOyCIRlgZprIyv+hdraBVDqKFNLiuBA1S
Jato1ITsSIKiOIiIxtXDENVq7FGyDmJN2ZvIKU4CpRSOIr1WouatEKirG+6zdyaZ
ggWgWTEFl6rBihC1eBKNJWVR9l3cfKltUo6GZ7iEu9U6Kf+NhjuHXoGnEbWVeboE
/tgY0xphrWo3snRKHmN55306U9Xc/rrULmuXeOitwmq5fK0Hmh6y/ZHSs30jZZCR
9l7I/93CATPhbAnJbVr88j9MX+p3kXFTbjuKe0h2PTygMjNUeWJjGpMLITTcX+n2
X3+x9d7vdNuPsvVkUxVudyV+lYzIANOozvXB3Q26cD9N/GiEYwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOoJowhXdinuX068oiquRJenfUNvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGRmYTk0MzEtZTgxMC0z
MmFiLTk3MzAtMWUwY2YwY2E4YTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC+ubineS/HxbocEEFiFXZ4mHYP4LVmnDm8D1Mp
Kpks9ks+ZFZlJqnuy+iRKTSvATCDpirqwbUewljW1wSiJkmIIxqlAptGCY3oBwDX
V95hmc/P2fFoKoXKHGa8+yZt7f4j9BOUAayNdHXUw+z3a4ZOGz9QXTgh6+tLdDhI
Z09A1A7Yt5VjfZNRBZnBnqxRrU9TaXwNZUxMPaOWqKK1vaJrgnmc+WDQaWg7/UR5
AEqS6f5Z4oezjBTt6/dwKPdYV8P9szSpJa+sz2iUaDuVk0lbRvkc7wrOjdXJjTQc
Ht4umdeKVBPQdSAHGyFvYaqajsUriHF9r5bpDmCthXHvsPfo
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:22:08 2025 by rpki-client