Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0a3c617-0468-3330-92b9-2c3c79f149e5.roa
File:                     d0a3c617-0468-3330-92b9-2c3c79f149e5.roa (raw, json)
Hash identifier:          Bb7MHr0M0HOlh9oLADGy+HcD8jeU5RLxo0Vp2icoAZ0=
Subject key identifier:   E5:15:CD:A6:0F:75:16:F7:D8:AE:57:A1:87:6C:44:E4:E5:E0:4F:64
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A7E7B82C6516A1F61CA70D940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0a3c617-0468-3330-92b9-2c3c79f149e5.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     36622
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:82:c6:51:6a:1f:61:ca:70:d9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=d23f7dd2-6aea-4d62-ac63-d45e18f41731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a5:c3:23:b8:b9:00:1f:05:75:18:d8:ba:ce:
                    98:f2:b2:10:b0:ce:1b:fc:29:35:02:62:9a:c7:e0:
                    a3:6b:fd:66:5b:c4:f7:41:ac:1f:e6:6c:02:92:a3:
                    90:79:80:ad:61:60:e8:f1:99:31:3f:cb:2a:cf:89:
                    31:8b:f7:f3:b2:14:bb:96:0d:36:34:da:dd:ba:bb:
                    21:b8:06:9a:c2:e6:70:75:9e:ec:ba:09:f9:2f:3f:
                    aa:99:d5:17:b7:11:fb:87:70:7f:35:f6:b7:9a:0b:
                    f3:c0:b8:92:86:1e:8a:85:77:6b:69:ca:0d:cc:e3:
                    ef:26:87:77:90:96:2b:ed:3b:67:6d:6c:33:6b:3d:
                    1f:21:45:a7:a2:8b:47:fa:e5:b3:e9:99:eb:23:41:
                    03:7f:7c:7e:10:09:28:2c:ce:f1:92:61:8c:32:5c:
                    64:1a:08:a1:78:2a:91:7b:26:55:16:26:7c:c6:76:
                    a4:85:0e:d8:ab:ce:d2:a7:53:57:5d:df:ca:4b:91:
                    3e:39:10:43:98:ba:30:e8:5e:fb:84:81:10:92:55:
                    9c:3e:5d:6d:62:83:04:bd:3d:9d:85:0d:d0:21:4d:
                    10:18:3d:87:bf:c4:76:52:ec:94:91:25:a9:21:6c:
                    03:08:24:dc:cf:61:cc:36:e8:e8:bb:eb:4a:9c:fc:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:15:CD:A6:0F:75:16:F7:D8:AE:57:A1:87:6C:44:E4:E5:E0:4F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d0a3c617-0468-3330-92b9-2c3c79f149e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:f5:33:e4:54:0d:e5:ac:f1:35:1e:b8:43:6d:80:65:e7:f4:
         03:ab:74:31:33:36:38:4f:83:f8:bb:2d:86:50:b5:16:86:31:
         7a:53:01:da:a8:d0:16:6f:aa:55:dc:78:86:0b:bc:5f:b2:a0:
         38:25:54:db:f9:4b:2e:bd:a0:6b:21:29:9c:b3:89:51:b2:8f:
         3c:b1:95:27:8e:30:32:78:d6:6c:3e:2a:6d:f6:d3:28:a3:e8:
         df:3b:da:f7:25:7b:e2:9a:99:4e:0b:7c:c2:b6:2a:63:3c:18:
         b1:be:80:ad:e9:92:ec:93:b2:6e:4e:00:49:47:cf:41:74:62:
         f6:e1:b3:c2:72:5d:e0:95:19:49:03:b5:ed:ba:20:d0:1b:ab:
         88:8f:c3:e3:98:27:79:d6:76:65:09:89:1c:05:50:7e:1d:26:
         25:af:ae:86:32:ed:9d:e2:e0:da:de:a8:d7:97:22:cf:6c:f5:
         7f:89:e0:1e:76:50:c8:46:af:76:b2:a0:3c:89:a1:24:81:aa:
         e3:1f:f5:ee:11:11:40:42:45:55:02:57:76:ba:78:9f:c1:73:
         60:de:03:4e:d8:9b:f7:67:cd:b6:d8:2c:3d:1a:22:e0:b8:a2:
         8b:53:c6:c9:b3:43:70:46:50:20:07:18:22:69:2a:7d:dc:77:
         11:36:29:15
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp+e4LGUWofYcpw2UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
ZDIzZjdkZDItNmFlYS00ZDYyLWFjNjMtZDQ1ZTE4ZjQxNzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6XDI7i5AB8FdRjYus6Y8rIQsM4b/Ck1AmKa
x+Cja/1mW8T3Qawf5mwCkqOQeYCtYWDo8ZkxP8sqz4kxi/fzshS7lg02NNrdursh
uAaawuZwdZ7sugn5Lz+qmdUXtxH7h3B/Nfa3mgvzwLiShh6KhXdracoNzOPvJod3
kJYr7TtnbWwzaz0fIUWnootH+uWz6ZnrI0EDf3x+EAkoLM7xkmGMMlxkGgiheCqR
eyZVFiZ8xnakhQ7Yq87Sp1NXXd/KS5E+ORBDmLow6F77hIEQklWcPl1tYoMEvT2d
hQ3QIU0QGD2Hv8R2UuyUkSWpIWwDCCTcz2HMNujou+tKnPxc1QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOUVzaYPdRb32K5XoYdsROTl4E9kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDBhM2M2MTctMDQ2OC0z
MzMwLTkyYjktMmMzYzc5ZjE0OWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCy9TPkVA3lrPE1HrhDbYBl5/QDq3QxMzY4T4P4
uy2GULUWhjF6UwHaqNAWb6pV3HiGC7xfsqA4JVTb+UsuvaBrISmcs4lRso88sZUn
jjAyeNZsPipt9tMoo+jfO9r3JXvimplOC3zCtipjPBixvoCt6ZLsk7JuTgBJR89B
dGL24bPCcl3glRlJA7XtuiDQG6uIj8PjmCd51nZlCYkcBVB+HSYlr66GMu2d4uDa
3qjXlyLPbPV/ieAedlDIRq92sqA8iaEkgarjH/XuERFAQkVVAld2unifwXNg3gNO
2Jv3Z8222Cw9GiLguKKLU8bJs0NwRlAgBxgiaSp93HcRNikV
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:55 2025 by rpki-client