Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4edb4b-097b-38ab-91f3-d358d83340f2.roa
File:                     3c4edb4b-097b-38ab-91f3-d358d83340f2.roa (raw, json)
Hash identifier:          voGSyhMHsu1hz8HF9i9h4NUftcufKb0JDu5LfGIeO8Y=
Subject key identifier:   5B:CD:D1:66:46:C1:E3:27:2C:CF:32:EA:C5:94:3B:C2:90:29:6C:3F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C56B604C888E55228C0D2
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4edb4b-097b-38ab-91f3-d358d83340f2.roa
Signing time:             Tue 22 Jul 2025 12:41:18 +0000
ROA not before:           Tue 22 Jul 2025 12:41:18 +0000
ROA not after:            Mon 20 Oct 2025 12:41:18 +0000
asID:                     396603
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:56:b6:04:c8:88:e5:52:28:c0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:18 2025 GMT
            Not After : Oct 20 12:41:18 2025 GMT
        Subject: CN=a06f9da2-33fb-4c1a-b33c-b2e011976009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7e:98:ac:98:b9:49:8a:e3:c9:57:01:c9:36:
                    e7:fc:c6:19:70:4b:37:d9:69:f2:8a:0c:bc:29:30:
                    01:39:67:3b:fe:a9:43:d8:6a:05:9a:80:54:a2:5d:
                    ea:8e:fa:b0:67:e2:6c:4b:96:a4:4d:90:2a:91:f8:
                    44:37:60:f1:57:23:5c:74:6c:df:de:b9:a1:57:16:
                    72:90:ce:2c:a4:9e:c5:20:5e:fe:62:8a:5d:b1:94:
                    93:a2:a7:70:53:0e:73:2e:d1:13:04:50:6e:58:a5:
                    30:bc:69:8d:00:ad:d9:4f:74:bc:96:ac:dd:ec:86:
                    0f:fb:c4:13:a0:d6:5d:41:96:55:9d:ee:0f:ee:9c:
                    d7:8d:cd:44:b9:33:a7:48:5d:92:ad:5f:b4:1d:94:
                    75:22:93:6e:0b:b7:58:5d:86:18:0c:80:53:c3:51:
                    1f:55:a5:ee:10:f2:2f:93:37:65:89:2b:22:56:73:
                    78:93:6c:f6:25:9e:28:78:62:f3:39:37:e6:32:bf:
                    d5:b2:60:b4:29:c1:2b:cf:d0:f5:61:c0:3d:00:7a:
                    26:d0:4e:4a:b2:d2:50:78:85:55:9a:14:b8:69:e4:
                    0a:0e:13:f9:5c:5e:77:59:46:9e:78:66:22:f1:ed:
                    d8:4b:0f:b3:d8:1c:86:32:d2:a1:59:62:e3:59:11:
                    ee:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CD:D1:66:46:C1:E3:27:2C:CF:32:EA:C5:94:3B:C2:90:29:6C:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c4edb4b-097b-38ab-91f3-d358d83340f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:72:c1:27:66:4c:03:0c:35:c1:63:21:61:7d:3f:c0:62:f8:
         38:99:d1:77:b2:1c:38:f1:1e:5d:24:0a:e5:68:2b:2a:9c:6c:
         3d:10:cc:b4:b0:53:94:cf:bf:14:46:43:93:ee:c3:79:12:4f:
         bf:c5:01:c0:62:23:dd:98:54:1e:61:c2:57:91:15:93:37:16:
         d3:b9:49:d8:0d:37:2e:86:4a:e8:31:e7:30:a5:79:80:46:09:
         63:bb:18:20:1e:59:e7:b6:76:06:70:ae:5d:10:bc:fc:f0:e6:
         5b:b0:a6:af:dc:40:86:65:3c:8c:cd:ee:cb:02:34:bf:9a:9b:
         6e:a3:1f:38:e2:6d:96:8f:09:ad:86:33:25:c5:04:81:27:99:
         2d:3f:83:aa:44:ef:e2:e7:b8:c7:28:00:5b:99:09:b2:9f:fc:
         1a:57:d8:d1:69:91:66:d0:0f:af:cf:7a:b8:0a:77:cf:b2:67:
         60:9f:29:84:2a:a1:22:54:ab:f1:be:d5:85:08:b2:90:cf:91:
         ee:a3:ab:2d:3b:cd:12:51:5c:c3:f1:58:44:78:34:32:e4:80:
         64:4c:cd:c6:a1:f0:0c:9c:3b:92:91:f7:f8:20:19:40:b4:c3:
         82:fa:c8:d9:c9:bc:c2:f7:27:87:9e:84:31:46:15:87:29:16:
         af:36:f9:21
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXFa2BMiI5VIowNIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyMjEyNDExOFoXDTI1MTAyMDEyNDExOFowLzEtMCsGA1UEAxMk
YTA2ZjlkYTItMzNmYi00YzFhLWIzM2MtYjJlMDExOTc2MDA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX6YrJi5SYrjyVcByTbn/MYZcEs32Wnyigy8
KTABOWc7/qlD2GoFmoBUol3qjvqwZ+JsS5akTZAqkfhEN2DxVyNcdGzf3rmhVxZy
kM4spJ7FIF7+YopdsZSToqdwUw5zLtETBFBuWKUwvGmNAK3ZT3S8lqzd7IYP+8QT
oNZdQZZVne4P7pzXjc1EuTOnSF2SrV+0HZR1IpNuC7dYXYYYDIBTw1EfVaXuEPIv
kzdliSsiVnN4k2z2JZ4oeGLzOTfmMr/VsmC0KcErz9D1YcA9AHom0E5KstJQeIVV
mhS4aeQKDhP5XF53WUaeeGYi8e3YSw+z2ByGMtKhWWLjWRHurwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFvN0WZGweMnLM8y6sWUO8KQKWw/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2M0ZWRiNGItMDk3Yi0z
OGFiLTkxZjMtZDM1OGQ4MzM0MGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEdywSdmTAMMNcFjIWF9P8Bi+DiZ0XeyHDjxHl0kCuVoKyqcbD0Q
zLSwU5TPvxRGQ5Puw3kST7/FAcBiI92YVB5hwleRFZM3FtO5SdgNNy6GSugx5zCl
eYBGCWO7GCAeWee2dgZwrl0QvPzw5luwpq/cQIZlPIzN7ssCNL+am26jHzjibZaP
Ca2GMyXFBIEnmS0/g6pE7+LnuMcoAFuZCbKf/BpX2NFpkWbQD6/PergKd8+yZ2Cf
KYQqoSJUq/G+1YUIspDPke6jqy07zRJRXMPxWER4NDLkgGRMzcah8AycO5KR9/gg
GUC0w4L6yNnJvML3J4eehDFGFYcpFq82+SE=
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:16:55 2025 by rpki-client