Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa
File:                     33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa (raw, json)
Hash identifier:          6ypRchW4UhT1cqapq/R79GUrvn5kvT9QsnWP2fLTGkY=
Subject key identifier:   03:0D:42:B7:CB:0E:87:DA:A7:DA:33:27:26:E0:98:CC:DC:DE:57:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E603E2E17105FFD50B4000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     396594
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:03:e2:e1:71:05:ff:d5:0b:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=e11bd14b-1bbd-4401-ac4d-bc55315e87c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9f:e9:63:88:c9:b7:51:0b:c7:f4:f1:73:11:
                    49:75:c8:12:f5:83:e7:98:64:74:50:1e:72:4c:dd:
                    c0:0d:0a:8e:f7:6a:ec:f8:bf:56:50:c3:b6:62:03:
                    b1:e5:0a:98:dc:df:11:64:f8:48:ad:3e:3e:a0:3e:
                    8e:13:71:1d:41:7c:52:31:17:51:6d:8b:d3:fb:69:
                    9f:37:d5:30:69:6a:45:88:59:f8:85:97:b7:b7:cc:
                    1f:9b:5d:79:1b:19:4f:7b:44:3b:df:98:9e:f9:e9:
                    cc:18:3c:08:52:6c:45:5a:92:63:7a:8d:bc:63:b3:
                    8a:4f:28:10:f6:3e:5d:59:c2:93:e7:77:fc:e7:87:
                    7d:2a:a5:ea:bb:5d:3e:c1:af:71:4f:b2:5a:47:40:
                    b0:e5:76:9b:ed:d6:57:59:da:b3:2f:a7:45:23:d3:
                    e6:ce:f6:6d:01:15:23:2b:fc:db:17:ad:85:02:18:
                    31:42:31:33:f2:e2:44:e2:42:3b:62:83:fe:86:d4:
                    46:87:4f:d7:65:4b:c5:ae:89:90:22:dc:48:0e:8e:
                    1c:b1:fe:f9:74:46:34:94:f6:3c:22:54:1f:17:71:
                    45:01:e5:4a:38:c3:c5:c2:d8:3b:c9:42:38:3d:49:
                    42:51:63:09:0a:3b:f3:7d:c3:77:a5:e7:2b:92:b5:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:42:B7:CB:0E:87:DA:A7:DA:33:27:26:E0:98:CC:DC:DE:57:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33d3fe5a-2cfe-3d96-a299-a62a549204e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e9:a9:95:42:d7:fc:b5:79:7a:88:44:6e:75:1f:7a:9a:06:
         ce:8f:40:85:3d:89:21:12:0e:b3:c8:92:d5:65:83:72:d8:75:
         7f:f5:f2:58:77:94:c3:17:f1:3e:d3:d9:c0:62:cb:7d:f6:cd:
         67:b7:8d:4c:44:89:a2:0b:7f:6d:bc:71:74:04:18:27:8b:cd:
         e4:a7:fb:5e:52:d8:b3:25:f6:45:87:27:9f:13:03:e9:28:e6:
         0d:10:99:83:cc:7d:ca:d3:3e:36:9e:3a:e7:bf:ba:92:12:12:
         cc:b2:af:9f:69:1c:a3:a3:47:8a:92:71:2a:21:2d:9c:4b:3f:
         41:18:ab:2b:dd:9a:ef:41:78:e4:1a:5a:af:41:5e:27:98:c9:
         41:27:b1:25:bc:5b:3d:3a:6c:7f:1e:d6:31:19:56:1d:07:23:
         1f:1f:e0:87:e2:c2:0b:d2:9d:1f:29:5d:b0:a4:34:5c:01:dc:
         72:44:30:0f:dd:62:73:68:9b:d8:63:ca:f9:a4:8d:f1:e4:87:
         11:67:d9:f2:fe:2f:d0:78:19:fb:bc:ff:47:00:f7:79:8c:8d:
         81:41:75:83:a0:70:6c:a5:39:64:f2:e4:be:16:e1:2b:92:01:
         da:4d:79:46:d1:ad:66:26:64:d8:0d:e7:68:15:27:0f:19:a4:
         61:cf:4b:b7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp45gPi4XEF/9ULQAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk
ZTExYmQxNGItMWJiZC00NDAxLWFjNGQtYmM1NTMxNWU4N2M2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5/pY4jJt1ELx/TxcxFJdcgS9YPnmGR0UB5y
TN3ADQqO92rs+L9WUMO2YgOx5QqY3N8RZPhIrT4+oD6OE3EdQXxSMRdRbYvT+2mf
N9UwaWpFiFn4hZe3t8wfm115GxlPe0Q735ie+enMGDwIUmxFWpJjeo28Y7OKTygQ
9j5dWcKT53f854d9KqXqu10+wa9xT7JaR0Cw5Xab7dZXWdqzL6dFI9PmzvZtARUj
K/zbF62FAhgxQjEz8uJE4kI7YoP+htRGh0/XZUvFromQItxIDo4csf75dEY0lPY8
IlQfF3FFAeVKOMPFwtg7yUI4PUlCUWMJCjvzfcN3pecrkrVBFwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAMNQrfLDofap9ozJybgmMzc3lcpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzNkM2ZlNWEtMmNmZS0z
ZDk2LWEyOTktYTYyYTU0OTIwNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAZ6amVQtf8tXl6iERudR96mgbOj0CFPYkhEg6z
yJLVZYNy2HV/9fJYd5TDF/E+09nAYst99s1nt41MRImiC39tvHF0BBgni83kp/te
UtizJfZFhyefEwPpKOYNEJmDzH3K0z42njrnv7qSEhLMsq+faRyjo0eKknEqIS2c
Sz9BGKsr3ZrvQXjkGlqvQV4nmMlBJ7ElvFs9Omx/HtYxGVYdByMfH+CH4sIL0p0f
KV2wpDRcAdxyRDAP3WJzaJvYY8r5pI3x5IcRZ9ny/i/QeBn7vP9HAPd5jI2BQXWD
oHBspTlk8uS+FuErkgHaTXlG0a1mJmTYDedoFScPGaRhz0u3
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:15 2025 by rpki-client