Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a90d95e8-364f-3dd9-bf1a-2d9ff3b23884.roa
File:                     a90d95e8-364f-3dd9-bf1a-2d9ff3b23884.roa (raw, json)
Hash identifier:          jRLnX0ZGhQpNAR+FSbqyLeJ8zGPQfY0sJxF5d40KwTk=
Subject key identifier:   BA:EA:0E:51:A6:CF:D7:FC:5E:AB:F6:94:73:AC:59:2E:53:12:61:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF0A3F92234A9E34F91B2C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a90d95e8-364f-3dd9-bf1a-2d9ff3b23884.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     396597
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:a3:f9:22:34:a9:e3:4f:91:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=d68c719a-57da-4912-9111-680642b292c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:41:b0:61:4e:43:3a:b1:b3:4f:46:30:76:
                    29:d4:c5:12:63:38:e4:bc:09:18:d2:97:b0:d1:99:
                    e6:e3:bb:d6:a0:a1:2f:35:4d:53:7c:c0:88:c3:3e:
                    68:f6:22:8a:05:20:52:2c:61:df:f4:23:46:45:45:
                    c3:f9:fd:f0:9a:37:1c:f8:94:dc:c3:b5:8c:04:ac:
                    a3:ae:2a:94:4a:00:31:9b:09:aa:3b:a2:49:93:c5:
                    ea:df:85:b3:2f:2e:b1:e6:60:b7:ed:6f:69:d1:05:
                    2d:0b:57:3e:47:0a:0c:76:c8:ad:8d:a2:bd:98:36:
                    7e:f2:fc:ed:e9:2d:a8:ac:1c:e7:83:e1:0e:ee:78:
                    0f:98:8d:0e:97:74:82:72:fa:60:65:fb:99:ec:d3:
                    b1:a0:1f:1b:63:10:72:f4:28:7f:40:8d:4b:f5:91:
                    21:e8:52:68:dd:b8:79:59:8d:06:a4:0e:6a:6e:71:
                    08:c6:ee:a0:f6:1a:e3:87:22:61:2a:8d:99:aa:3c:
                    90:41:e6:df:8d:ba:22:0c:49:ad:b7:fe:78:c4:5e:
                    ca:5c:7c:a9:56:79:0b:0b:49:47:b6:f6:a6:0c:93:
                    be:c5:77:bf:2c:29:18:08:03:d0:6d:c5:98:f1:90:
                    c1:08:dd:78:86:c0:a3:bc:d0:98:66:2a:c3:4b:15:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EA:0E:51:A6:CF:D7:FC:5E:AB:F6:94:73:AC:59:2E:53:12:61:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a90d95e8-364f-3dd9-bf1a-2d9ff3b23884.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:26:11:89:28:b4:2e:97:1b:5a:4b:0e:c7:60:83:b2:75:a5:
         e8:a5:46:d6:31:30:94:b3:78:18:be:44:b6:a1:48:a4:5b:ae:
         a8:38:20:13:4b:14:97:4b:fa:53:18:0b:3e:c2:8f:bf:36:f4:
         a2:31:0c:2a:f3:cc:e6:f8:23:c8:6e:a3:9c:76:c5:6d:39:d7:
         ae:90:ed:44:10:0e:fc:87:a3:88:3b:ff:6f:cc:48:4a:9a:e4:
         19:81:8c:e0:b4:a2:5e:71:cb:5b:78:f5:3d:c0:78:01:e1:71:
         b3:08:c9:c0:32:21:ce:3d:4e:5d:be:24:79:5d:27:42:3f:5c:
         a8:c1:cb:19:81:b7:fd:8f:6f:5b:e4:60:b1:30:1c:ed:ab:ea:
         4c:b0:06:f6:ba:58:52:e0:e1:e4:1f:76:4b:7a:55:69:3a:19:
         8c:14:7d:9e:19:e8:d2:c5:4a:4a:04:22:2a:01:59:63:37:4c:
         f1:b6:6c:fa:29:be:f6:1f:18:b8:34:c6:30:5f:0b:d5:ae:09:
         2f:f9:3d:06:f6:f0:25:7f:d7:e4:ae:ee:f8:24:ed:57:f8:4a:
         f0:80:72:20:14:f9:a1:5d:f4:ab:d9:a7:47:b3:e0:d4:74:f0:
         61:f0:b4:23:03:f4:2b:51:e6:66:ef:62:32:ca:b0:f2:50:35:
         d2:1c:2d:13
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpq8KP5IjSp40+RssAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk
ZDY4YzcxOWEtNTdkYS00OTEyLTkxMTEtNjgwNjQyYjI5MmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYNBsGFOQzqxs09GMHYp1MUSYzjkvAkY0pew
0Znm47vWoKEvNU1TfMCIwz5o9iKKBSBSLGHf9CNGRUXD+f3wmjcc+JTcw7WMBKyj
riqUSgAxmwmqO6JJk8Xq34WzLy6x5mC37W9p0QUtC1c+RwoMdsitjaK9mDZ+8vzt
6S2orBzng+EO7ngPmI0Ol3SCcvpgZfuZ7NOxoB8bYxBy9Ch/QI1L9ZEh6FJo3bh5
WY0GpA5qbnEIxu6g9hrjhyJhKo2ZqjyQQebfjboiDEmtt/54xF7KXHypVnkLC0lH
tvamDJO+xXe/LCkYCAPQbcWY8ZDBCN14hsCjvNCYZirDSxUwgQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLrqDlGmz9f8Xqv2lHOsWS5TEmF8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTkwZDk1ZTgtMzY0Zi0z
ZGQ5LWJmMWEtMmQ5ZmYzYjIzODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB5JhGJKLQulxtaSw7HYIOydaXopUbWMTCUs3gY
vkS2oUikW66oOCATSxSXS/pTGAs+wo+/NvSiMQwq88zm+CPIbqOcdsVtOdeukO1E
EA78h6OIO/9vzEhKmuQZgYzgtKJecctbePU9wHgB4XGzCMnAMiHOPU5dviR5XSdC
P1yowcsZgbf9j29b5GCxMBztq+pMsAb2ulhS4OHkH3ZLelVpOhmMFH2eGejSxUpK
BCIqAVljN0zxtmz6Kb72Hxi4NMYwXwvVrgkv+T0G9vAlf9fkru74JO1X+ErwgHIg
FPmhXfSr2adHs+DUdPBh8LQjA/QrUeZm72IyyrDyUDXSHC0T
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:22 2025 by rpki-client