Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/146d7131-b985-30d5-acc9-7ad81f702f6c.roa
File:                     146d7131-b985-30d5-acc9-7ad81f702f6c.roa (raw, json)
Hash identifier:          BnEd3UqpnNXyHcmPap29/OehdMCcDNweQyplB+9gRik=
Subject key identifier:   DA:55:B9:56:50:8F:D7:18:FB:1A:6C:8B:23:71:8D:1A:DA:66:2B:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF0A25EC9F3910944013000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/146d7131-b985-30d5-acc9-7ad81f702f6c.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     396550
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:a2:5e:c9:f3:91:09:44:01:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=a2169f38-6f52-4715-88a2-0dd79fbe23f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:c2:d3:34:00:32:e6:1b:08:35:33:80:ea:
                    82:34:f4:61:b5:71:65:fc:6d:7e:c7:11:35:a2:83:
                    db:a0:90:58:b7:7d:1d:c4:49:2b:1f:94:e6:fa:91:
                    60:6c:0f:5b:86:c2:26:c0:ce:dc:d2:db:2f:36:fd:
                    01:08:48:bc:f7:80:ca:aa:34:73:bb:3b:28:34:a2:
                    45:10:76:03:d0:bd:9e:36:fc:ab:9d:2f:d5:11:59:
                    eb:9c:50:f7:2f:5f:d8:b9:7b:24:4a:e7:e9:05:41:
                    e1:ec:c1:47:f4:cf:81:78:c6:ef:3f:fd:59:fe:49:
                    3d:39:89:64:d4:be:50:82:79:43:73:5b:a3:c3:2f:
                    e7:b2:dd:c6:d6:1a:8b:a5:8b:d2:d3:c7:26:a0:b0:
                    61:10:16:a4:31:22:76:a1:10:2e:f1:11:86:b2:6d:
                    07:b8:fe:72:80:4d:68:11:36:b1:b0:a4:9e:ac:fb:
                    85:9b:7f:27:d0:15:3b:33:aa:94:08:4f:40:44:49:
                    39:46:2e:7f:2f:cf:b4:88:e5:69:c1:af:f1:7f:b9:
                    09:83:d1:d6:18:d4:6b:1c:1a:8d:8b:b7:2b:22:28:
                    7f:56:a9:48:b7:20:d8:75:32:3c:d1:cf:03:ee:99:
                    47:85:4e:ba:c4:18:4b:3c:9f:3e:ee:7b:c6:cb:69:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:55:B9:56:50:8F:D7:18:FB:1A:6C:8B:23:71:8D:1A:DA:66:2B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/146d7131-b985-30d5-acc9-7ad81f702f6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:c7:09:a7:2c:91:90:ed:cd:4b:84:3b:67:96:2d:0f:dc:52:
         c6:9e:9f:58:f1:f3:8a:52:b9:02:3b:44:b0:7f:d2:4c:a9:a5:
         63:45:87:fb:49:13:b5:66:4a:e6:71:71:27:a9:c4:29:fe:18:
         24:d6:48:68:f5:df:fd:3e:d0:32:cb:a6:a1:67:d8:9a:6a:13:
         24:ec:41:0f:4b:02:14:00:16:88:04:61:c4:09:a2:ba:9a:7c:
         4c:7e:11:3e:01:fd:6f:9c:9a:12:9b:6b:2c:b2:dc:d4:e7:28:
         5e:1b:98:47:9e:ca:cc:87:bd:9f:ec:3c:49:0f:4c:06:5f:74:
         51:4b:9d:3c:15:40:5e:21:1e:81:5e:59:81:31:d5:63:d0:3d:
         98:14:f3:e4:73:9f:b7:54:8c:1d:1d:aa:0b:c1:26:85:cf:e8:
         f5:48:ee:5e:5b:6b:bf:b8:3e:ec:b6:02:cc:15:79:43:a1:58:
         e1:00:71:ef:7b:cf:6a:c8:d6:60:7f:89:f2:f9:a8:8b:e7:29:
         25:56:92:f4:18:61:94:7b:7b:7f:8c:43:97:1c:40:5f:e6:eb:
         bb:c3:bc:34:45:3e:b0:8d:4b:cf:a8:a5:57:9b:23:fc:d2:40:
         a7:15:6a:24:7a:0c:67:bb:27:d0:f3:d5:43:c6:4e:20:23:a3:
         a7:70:40:5e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpq8KJeyfORCUQBMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk
YTIxNjlmMzgtNmY1Mi00NzE1LTg4YTItMGRkNzlmYmUyM2Y5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRHC0zQAMuYbCDUzgOqCNPRhtXFl/G1+xxE1
ooPboJBYt30dxEkrH5Tm+pFgbA9bhsImwM7c0tsvNv0BCEi894DKqjRzuzsoNKJF
EHYD0L2eNvyrnS/VEVnrnFD3L1/YuXskSufpBUHh7MFH9M+BeMbvP/1Z/kk9OYlk
1L5QgnlDc1ujwy/nst3G1hqLpYvS08cmoLBhEBakMSJ2oRAu8RGGsm0HuP5ygE1o
ETaxsKSerPuFm38n0BU7M6qUCE9AREk5Ri5/L8+0iOVpwa/xf7kJg9HWGNRrHBqN
i7crIih/VqlItyDYdTI80c8D7plHhU66xBhLPJ8+7nvGy2l/EQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNpVuVZQj9cY+xpsiyNxjRraZitvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTQ2ZDcxMzEtYjk4NS0z
MGQ1LWFjYzktN2FkODFmNzAyZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC6xwmnLJGQ7c1LhDtnli0P3FLGnp9Y8fOKUrkC
O0Swf9JMqaVjRYf7SRO1ZkrmcXEnqcQp/hgk1kho9d/9PtAyy6ahZ9iaahMk7EEP
SwIUABaIBGHECaK6mnxMfhE+Af1vnJoSm2ssstzU5yheG5hHnsrMh72f7DxJD0wG
X3RRS508FUBeIR6BXlmBMdVj0D2YFPPkc5+3VIwdHaoLwSaFz+j1SO5eW2u/uD7s
tgLMFXlDoVjhAHHve89qyNZgf4ny+aiL5yklVpL0GGGUe3t/jEOXHEBf5uu7w7w0
RT6wjUvPqKVXmyP80kCnFWokegxnuyfQ89VDxk4gI6OncEBe
-----END CERTIFICATE-----
Generated at Fri Jul 25 11:06:29 2025 by rpki-client