Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4140906-0fe0-36ff-b946-d139dc591bf4.roa
File:                     b4140906-0fe0-36ff-b946-d139dc591bf4.roa (raw, json)
Hash identifier:          78p4TnxGvxtsyyjiteR0gCrnmaxnryNLbyKqkSg1nt8=
Subject key identifier:   5B:AC:B3:2F:0A:18:A6:85:B1:42:60:AD:C6:05:A1:D3:8D:EB:3B:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF09FA0324AEAF26B0FEEE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4140906-0fe0-36ff-b946-d139dc591bf4.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     397206
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:9f:a0:32:4a:ea:f2:6b:0f:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=661c1523-5931-4d49-a479-c5d607aceac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3a:e2:24:7b:19:bc:de:f9:2d:0e:8a:0d:b0:
                    a7:d7:c0:17:cc:dc:95:85:6b:59:29:a0:0c:fc:e2:
                    e7:c8:6b:4d:a2:5c:79:8d:48:05:a7:9e:cc:20:69:
                    c3:5b:ae:db:66:53:cb:fa:67:20:ed:ad:2f:8b:67:
                    15:72:5c:ff:cd:db:2c:6f:cf:d0:70:92:65:6b:9a:
                    54:00:5e:dd:76:ab:9d:2c:05:7a:a6:8e:a3:23:e7:
                    25:40:a6:b2:f3:64:19:29:dd:67:ec:3e:72:40:e2:
                    7e:2e:66:0c:e2:dd:c2:58:6e:79:1e:c6:4d:18:70:
                    5f:81:e8:27:95:0f:db:de:2a:64:81:e9:9f:9d:fa:
                    10:d6:3c:59:41:06:28:3d:0f:ef:cb:22:cf:36:5d:
                    f6:ae:d2:ae:80:57:4c:62:26:37:7e:34:55:41:81:
                    79:74:d2:75:e3:92:22:47:bd:07:79:b4:8f:9a:00:
                    15:70:d3:41:7d:d9:de:ce:bf:9c:c7:d0:d9:53:18:
                    82:c4:55:81:2a:41:d2:af:49:4f:f8:d3:1f:20:1f:
                    5b:df:18:cc:6e:14:08:31:c5:7f:56:b1:2b:49:e4:
                    2e:c5:6b:71:a8:a6:b2:cf:44:33:ac:73:f8:fa:fc:
                    74:4b:9c:b9:61:0a:78:97:01:8e:0e:87:5b:80:94:
                    b6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AC:B3:2F:0A:18:A6:85:B1:42:60:AD:C6:05:A1:D3:8D:EB:3B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4140906-0fe0-36ff-b946-d139dc591bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:7e:57:36:78:06:6c:87:d7:9a:92:96:1e:09:d3:1e:42:
         da:7b:77:35:35:b3:ab:e7:f8:ee:dd:af:31:76:e8:52:b9:2b:
         5c:6b:de:78:8b:7c:77:12:b0:95:ee:dc:15:70:91:d1:82:97:
         2d:eb:1e:a1:bf:b0:49:6c:a6:17:66:cf:4c:31:f7:f6:97:3d:
         fa:b2:03:ff:1e:4a:6e:99:64:d2:c3:ee:c4:b8:c9:9e:46:ab:
         ce:32:a8:55:60:fd:0a:1b:ec:3f:88:f1:1e:c0:0f:37:60:6a:
         99:17:04:59:b9:c6:0a:97:52:10:69:28:d9:48:83:d7:b0:4e:
         4c:26:39:e9:55:34:2e:5d:a4:cb:e1:33:03:49:64:9b:66:8c:
         bc:f7:de:ff:b8:df:96:b1:f2:aa:37:d0:5d:d2:87:33:92:75:
         74:32:96:ea:53:26:52:8a:a9:44:4b:14:5d:e7:b3:00:81:6d:
         1c:e1:fb:2a:32:d9:28:8f:0e:fe:90:82:39:c2:a2:91:22:c0:
         bc:6c:0f:9e:79:dc:29:21:60:89:26:b4:0c:e5:24:ce:a4:69:
         ad:3f:72:91:ea:1a:d7:d7:a5:e3:a8:e9:72:ba:4a:15:a8:9a:
         c5:a9:19:11:98:19:35:3a:82:25:09:f1:9e:26:5d:3c:3b:5f:
         d8:97:18:c3
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpq8J+gMkrq8msP7uAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk
NjYxYzE1MjMtNTkzMS00ZDQ5LWE0NzktYzVkNjA3YWNlYWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTriJHsZvN75LQ6KDbCn18AXzNyVhWtZKaAM
/OLnyGtNolx5jUgFp57MIGnDW67bZlPL+mcg7a0vi2cVclz/zdssb8/QcJJla5pU
AF7ddqudLAV6po6jI+clQKay82QZKd1n7D5yQOJ+LmYM4t3CWG55HsZNGHBfgegn
lQ/b3ipkgemfnfoQ1jxZQQYoPQ/vyyLPNl32rtKugFdMYiY3fjRVQYF5dNJ145Ii
R70HebSPmgAVcNNBfdnezr+cx9DZUxiCxFWBKkHSr0lP+NMfIB9b3xjMbhQIMcV/
VrErSeQuxWtxqKayz0QzrHP4+vx0S5y5YQp4lwGODodbgJS2rwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFussy8KGKaFsUJgrcYFodON6ztpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjQxNDA5MDYtMGZlMC0z
NmZmLWI5NDYtZDEzOWRjNTkxYmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB4D35XNngGbIfXmpKWHgnTHkLae3c1NbOr5/ju
3a8xduhSuStca954i3x3ErCV7twVcJHRgpct6x6hv7BJbKYXZs9MMff2lz36sgP/
HkpumWTSw+7EuMmeRqvOMqhVYP0KG+w/iPEewA83YGqZFwRZucYKl1IQaSjZSIPX
sE5MJjnpVTQuXaTL4TMDSWSbZoy8997/uN+WsfKqN9Bd0oczknV0MpbqUyZSiqlE
SxRd57MAgW0c4fsqMtkojw7+kII5wqKRIsC8bA+eedwpIWCJJrQM5STOpGmtP3KR
6hrX16XjqOlyukoVqJrFqRkRmBk1OoIlCfGeJl08O1/YlxjD
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:21:31 2025 by rpki-client