Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa
File:                     e8ecae6c-4778-387d-88a6-7131036ca703.roa (raw, json)
Hash identifier:          fJwcJaCR2t7hTVdoaw9WqcBXPJBUOLeagb7zRUKHtBc=
Subject key identifier:   60:94:59:11:21:E4:2F:3D:48:54:7E:41:54:BC:AF:38:45:69:77:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C5D2125E016177B874F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa
Signing time:             Tue 22 Jul 2025 12:41:21 +0000
ROA not before:           Tue 22 Jul 2025 12:41:21 +0000
ROA not after:            Mon 20 Oct 2025 12:41:21 +0000
asID:                     396695
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:5d:21:25:e0:16:17:7b:87:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:21 2025 GMT
            Not After : Oct 20 12:41:21 2025 GMT
        Subject: CN=1e3be5a6-fe0d-4eda-8649-08a396a40442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:b1:68:2c:93:34:a4:ce:69:35:62:16:2e:
                    8b:5d:2c:f2:b3:d8:02:1d:30:1c:25:9a:6b:d8:a9:
                    b8:e7:75:82:d2:db:1e:7e:99:cd:03:c9:75:fb:1d:
                    82:2f:ba:f7:8b:d8:65:c3:03:66:2e:d2:ae:ca:05:
                    45:f9:30:6d:40:b5:80:15:cf:af:2f:79:93:67:b3:
                    fc:29:9c:d6:af:5a:ab:e6:4d:2c:87:d2:a7:3d:1a:
                    75:4e:58:cf:4a:b3:ed:8d:33:10:09:fe:af:69:0d:
                    df:4a:c0:9f:99:ed:e0:1f:2a:d7:cc:93:43:4f:30:
                    18:c6:ab:0a:d1:14:d7:ef:a7:29:ab:21:d0:34:84:
                    32:65:e4:e6:6a:87:06:47:39:78:02:91:59:72:2a:
                    2d:98:37:47:f1:9a:d5:2d:6b:f5:b9:d4:6c:83:4f:
                    5f:2c:a9:90:cb:79:9f:00:41:75:24:b8:0e:e4:46:
                    31:2d:0e:ba:c2:61:30:98:3e:38:d3:49:1a:20:0e:
                    d0:94:73:f7:a3:15:fd:a0:c2:be:81:8e:79:b0:84:
                    4e:ea:7d:7a:d8:b1:e7:a6:55:93:64:b1:c3:a3:75:
                    3e:69:84:a9:c7:c4:22:b6:dd:c9:c8:d1:f5:3f:6e:
                    ec:ba:b8:ed:c4:99:84:cc:03:55:d4:b6:c7:8b:81:
                    38:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:94:59:11:21:E4:2F:3D:48:54:7E:41:54:BC:AF:38:45:69:77:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8ecae6c-4778-387d-88a6-7131036ca703.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:92:ba:e9:c8:50:fa:1c:85:73:1c:03:48:20:6b:32:91:d5:
         5d:b3:5b:a9:5f:32:a5:0b:9f:63:ef:a2:63:b1:15:e6:51:ab:
         81:2d:12:ba:06:3a:0a:9b:0b:35:19:b2:d1:84:c0:17:94:77:
         e2:52:c7:91:32:80:59:3e:ef:0d:29:fa:22:84:ce:fa:25:c0:
         fd:ef:69:1e:8b:50:81:9f:68:d6:3c:ea:f2:ec:a7:13:fb:e3:
         80:fe:12:c6:51:df:f0:70:04:0a:e2:70:0e:88:67:14:7b:9e:
         ad:cb:9f:b0:cf:e6:a5:d7:fc:63:01:d8:12:73:bb:a2:66:34:
         28:c1:5f:7d:83:9a:c3:61:34:4f:6a:52:66:c2:b6:79:9a:4b:
         ab:bf:82:23:fe:9c:35:17:4b:ae:6d:fe:5a:f1:98:34:81:41:
         8c:a2:65:e6:2b:58:37:b3:69:fa:dd:02:d1:78:d8:66:9c:01:
         f6:b5:9a:dc:a7:f8:26:02:47:e9:2c:7e:21:90:93:6b:30:cf:
         50:d5:6e:ab:cf:a4:f3:88:9b:09:45:39:e4:e1:03:c3:73:3d:
         90:4c:1b:49:92:5b:0d:ed:01:90:95:75:71:ee:95:08:d1:06:
         6a:a8:3e:24:e6:95:9f:04:10:ba:f3:fb:d8:9a:5e:5f:e6:74:
         7a:46:1d:37
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXF0hJeAWF3uHT4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyMjEyNDEyMVoXDTI1MTAyMDEyNDEyMVowLzEtMCsGA1UEAxMk
MWUzYmU1YTYtZmUwZC00ZWRhLTg2NDktMDhhMzk2YTQwNDQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYaxaCyTNKTOaTViFi6LXSzys9gCHTAcJZpr
2Km453WC0tsefpnNA8l1+x2CL7r3i9hlwwNmLtKuygVF+TBtQLWAFc+vL3mTZ7P8
KZzWr1qr5k0sh9KnPRp1TljPSrPtjTMQCf6vaQ3fSsCfme3gHyrXzJNDTzAYxqsK
0RTX76cpqyHQNIQyZeTmaocGRzl4ApFZciotmDdH8ZrVLWv1udRsg09fLKmQy3mf
AEF1JLgO5EYxLQ66wmEwmD4400kaIA7QlHP3oxX9oMK+gY55sIRO6n162LHnplWT
ZLHDo3U+aYSpx8Qitt3JyNH1P27surjtxJmEzANV1LbHi4E4LwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGCUWREh5C89SFR+QVS8rzhFaXdBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZThlY2FlNmMtNDc3OC0z
ODdkLTg4YTYtNzEzMTAzNmNhNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADSSuunIUPochXMcA0ggazKR1V2zW6lfMqULn2PvomOxFeZRq4Et
EroGOgqbCzUZstGEwBeUd+JSx5EygFk+7w0p+iKEzvolwP3vaR6LUIGfaNY86vLs
pxP744D+EsZR3/BwBAricA6IZxR7nq3Ln7DP5qXX/GMB2BJzu6JmNCjBX32DmsNh
NE9qUmbCtnmaS6u/giP+nDUXS65t/lrxmDSBQYyiZeYrWDezafrdAtF42GacAfa1
mtyn+CYCR+ksfiGQk2swz1DVbqvPpPOImwlFOeThA8NzPZBMG0mSWw3tAZCVdXHu
lQjRBmqoPiTmlZ8EELrz+9iaXl/mdHpGHTc=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:42 2025 by rpki-client