Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c043fc86-171a-3cb7-a7d5-440ec8c1cc2c.roa
File:                     c043fc86-171a-3cb7-a7d5-440ec8c1cc2c.roa (raw, json)
Hash identifier:          bxk39YZDlmJijN0RhUrMFQPdUWdXCofEtj7zkVNFYEM=
Subject key identifier:   20:77:A9:CB:D0:A8:4B:9B:7F:74:1A:75:47:E0:27:06:A5:F5:99:AB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C4E5D9F5458FE24962A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c043fc86-171a-3cb7-a7d5-440ec8c1cc2c.roa
Signing time:             Tue 22 Jul 2025 12:41:14 +0000
ROA not before:           Tue 22 Jul 2025 12:41:14 +0000
ROA not after:            Mon 20 Oct 2025 12:41:14 +0000
asID:                     396582
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:4e:5d:9f:54:58:fe:24:96:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:14 2025 GMT
            Not After : Oct 20 12:41:14 2025 GMT
        Subject: CN=bb674e85-710f-46ac-8082-e1d35719bbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:27:75:5f:31:d4:53:29:fe:52:f1:0d:63:
                    1d:bf:44:c8:a0:a3:10:f8:c1:95:17:a9:ba:f8:86:
                    59:80:ea:09:e9:30:1b:b9:e7:70:1e:5c:e1:9e:b1:
                    3b:21:c9:ea:fc:c2:6c:ba:06:a3:b0:e0:0e:21:e9:
                    46:c5:f4:ed:ef:6e:b6:83:d2:a3:50:e2:d1:58:59:
                    45:74:8e:cd:00:8b:ad:9b:89:10:34:9e:bc:a9:81:
                    56:a6:42:8e:db:ef:fc:88:9e:5e:30:8a:4b:27:d5:
                    13:4b:b3:51:07:db:60:b9:2c:ea:12:05:3a:53:ba:
                    6d:3d:65:a1:9a:5d:4f:c7:55:47:c3:ca:07:32:23:
                    76:81:2e:19:2f:77:66:d7:a8:93:8a:83:fc:d4:57:
                    17:46:4d:4c:fd:89:d5:22:39:04:ba:4c:ac:8d:8f:
                    5e:97:1e:c1:12:70:eb:57:00:64:15:9e:77:af:e1:
                    58:62:44:32:cc:cd:0e:64:7e:91:25:6f:2e:cb:48:
                    39:67:a7:81:a6:98:94:00:25:ee:f9:5d:b5:e3:7e:
                    b1:e7:de:de:94:84:b6:3f:ea:67:57:b7:98:25:dc:
                    78:d4:c5:6f:1a:e5:0c:c8:2f:6b:50:0d:2c:76:8c:
                    1b:83:76:24:39:ba:15:a6:fa:70:e3:35:99:16:cc:
                    ae:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:77:A9:CB:D0:A8:4B:9B:7F:74:1A:75:47:E0:27:06:A5:F5:99:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c043fc86-171a-3cb7-a7d5-440ec8c1cc2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:73:a8:c2:db:f1:73:2b:08:15:f1:f9:35:e1:3e:1d:89:35:
         cc:2d:0c:f5:5b:6e:92:6d:b3:47:61:90:55:e4:7c:35:b6:18:
         08:93:17:67:8d:cb:19:de:67:04:3d:d9:33:6b:ca:cc:9e:76:
         99:f2:f3:bc:fd:1c:20:a9:9b:77:cd:ac:c7:f7:83:28:af:1d:
         b0:1e:89:0c:e0:ae:7b:db:0a:1c:63:6d:93:de:ba:34:8a:39:
         5f:90:f4:71:b3:ca:a1:8d:7e:19:99:63:01:1b:8d:90:54:93:
         66:98:82:eb:8a:b3:cb:ca:cd:c9:85:69:ec:16:0b:b9:db:41:
         ee:78:4d:69:84:e2:d2:6d:74:c2:47:4a:9d:0c:f3:52:d8:8d:
         35:ea:32:f7:f7:b5:28:fb:ed:34:f8:1b:5e:54:4d:b0:9a:7a:
         03:fa:45:c5:49:48:83:8d:88:03:fe:4c:0e:db:cc:bc:ad:98:
         ab:36:e8:89:68:89:b8:49:a0:84:aa:d1:89:f2:2f:3f:6f:db:
         14:82:60:6a:f4:8a:60:a3:ae:ac:9b:b4:18:3d:ca:cb:e8:76:
         dc:f6:12:cd:ac:72:35:7f:6f:16:c9:33:0d:b8:ff:b1:b4:71:
         12:b3:f3:25:fb:ff:bc:a4:81:e9:db:13:ae:f5:3f:89:62:97:
         ea:17:1a:11
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXE5dn1RY/iSWKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyMjEyNDExNFoXDTI1MTAyMDEyNDExNFowLzEtMCsGA1UEAxMk
YmI2NzRlODUtNzEwZi00NmFjLTgwODItZTFkMzU3MTliYmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDMndV8x1FMp/lLxDWMdv0TIoKMQ+MGVF6m6
+IZZgOoJ6TAbuedwHlzhnrE7Icnq/MJsugajsOAOIelGxfTt7262g9KjUOLRWFlF
dI7NAIutm4kQNJ68qYFWpkKO2+/8iJ5eMIpLJ9UTS7NRB9tguSzqEgU6U7ptPWWh
ml1Px1VHw8oHMiN2gS4ZL3dm16iTioP81FcXRk1M/YnVIjkEukysjY9elx7BEnDr
VwBkFZ53r+FYYkQyzM0OZH6RJW8uy0g5Z6eBppiUACXu+V21436x597elIS2P+pn
V7eYJdx41MVvGuUMyC9rUA0sdowbg3YkOboVpvpw4zWZFsyuIQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCB3qcvQqEubf3QadUfgJwal9ZmrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzA0M2ZjODYtMTcxYS0z
Y2I3LWE3ZDUtNDQwZWM4YzFjYzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAxzqMLb8XMrCBXx+TXhPh2JNcwtDPVbbpJts0dhkFXkfDW2GAiT
F2eNyxneZwQ92TNrysyedpny87z9HCCpm3fNrMf3gyivHbAeiQzgrnvbChxjbZPe
ujSKOV+Q9HGzyqGNfhmZYwEbjZBUk2aYguuKs8vKzcmFaewWC7nbQe54TWmE4tJt
dMJHSp0M81LYjTXqMvf3tSj77TT4G15UTbCaegP6RcVJSIONiAP+TA7bzLytmKs2
6IloibhJoISq0YnyLz9v2xSCYGr0imCjrqybtBg9ysvodtz2Es2scjV/bxbJMw24
/7G0cRKz8yX7/7ykgenbE671P4lil+oXGhE=
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:11:56 2025 by rpki-client