Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb244be9-dd8a-378a-ba8f-c5f53025ad13.roa
File:                     eb244be9-dd8a-378a-ba8f-c5f53025ad13.roa (raw, json)
Hash identifier:          enD41nOxkJGbkgNeCJz8Z0PLd4oDQuQgPWpfSR8lb20=
Subject key identifier:   DB:D7:A4:65:37:05:1D:77:8E:1F:48:BC:CF:49:E5:3C:87:E4:C4:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C5FB08D0863D6248A4500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb244be9-dd8a-378a-ba8f-c5f53025ad13.roa
Signing time:             Tue 22 Jul 2025 12:41:22 +0000
ROA not before:           Tue 22 Jul 2025 12:41:22 +0000
ROA not after:            Mon 20 Oct 2025 12:41:22 +0000
asID:                     396603
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:5f:b0:8d:08:63:d6:24:8a:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:22 2025 GMT
            Not After : Oct 20 12:41:22 2025 GMT
        Subject: CN=23d10806-829e-44c8-8e29-af9122059b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:93:13:5e:24:50:9f:04:69:77:8c:ac:36:b6:
                    21:56:aa:51:e2:3b:f3:d9:6f:16:31:64:66:25:d2:
                    52:c4:87:7e:33:62:ce:db:57:08:89:72:96:1b:7d:
                    48:4c:93:06:76:35:89:ee:21:ce:78:8c:d2:6f:6c:
                    a4:b6:5d:2d:81:40:4f:20:2c:de:2b:e1:4e:35:17:
                    67:33:56:cc:ba:a6:d8:45:2a:dc:a2:35:3c:66:d4:
                    55:ad:3c:36:7f:8d:12:d4:89:36:45:5d:93:23:ea:
                    c1:7c:24:bb:51:f3:dc:c1:af:0a:6d:31:e5:67:82:
                    c2:a1:b9:68:b5:c8:bf:82:5b:9c:0a:20:08:23:f5:
                    c1:34:fc:98:48:74:c4:bf:81:ca:6b:f8:69:38:a0:
                    9b:f6:f1:ed:22:da:93:ae:73:c3:88:5f:10:6b:32:
                    dd:9d:eb:e9:e1:94:68:2a:8c:df:fd:39:d5:cd:e1:
                    1e:38:3e:13:11:97:fd:81:7d:bc:11:28:c7:73:de:
                    a7:7e:52:f8:e7:74:de:34:60:cf:b6:9f:ed:89:1f:
                    2d:2c:38:fb:63:26:8e:bf:ba:e1:75:e7:4c:4f:7f:
                    d2:6e:25:97:52:53:fc:cd:cf:35:c6:44:b6:b8:03:
                    26:97:6b:6c:e4:52:84:2f:a1:a6:ab:53:3a:5e:77:
                    0b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D7:A4:65:37:05:1D:77:8E:1F:48:BC:CF:49:E5:3C:87:E4:C4:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb244be9-dd8a-378a-ba8f-c5f53025ad13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:6a:68:54:82:c2:a4:23:5e:63:51:68:09:28:80:61:11:32:
         11:ce:83:d2:0a:e8:43:6f:c5:f4:44:b1:de:09:c2:b2:06:a1:
         36:d1:6e:a7:97:6f:cb:1b:9c:bc:10:14:e8:d8:59:d6:ee:d0:
         d7:e7:6b:9f:bb:da:4f:4d:50:90:2f:f5:51:9a:49:45:2f:2f:
         2c:14:3c:c5:5d:b2:51:aa:b4:68:13:86:78:53:04:0b:a7:62:
         f5:ba:a3:f9:2e:27:f2:fb:fa:71:f7:e4:72:00:73:90:8f:70:
         53:bc:99:05:a3:63:6e:65:e4:bf:24:82:f5:86:2b:dc:f2:5a:
         ed:38:f3:d1:2e:d3:e6:2a:5a:73:30:4f:ad:0a:15:10:bd:fb:
         1b:77:a0:35:b8:a9:e0:f5:12:43:bf:19:85:44:37:54:53:bd:
         3c:b4:a5:b4:6a:25:e5:13:09:06:08:d0:bb:24:1d:66:50:97:
         02:38:c1:d8:c3:4e:4d:49:ad:ce:68:8c:21:a2:91:31:64:0c:
         b2:dd:b1:cf:68:3f:3a:d4:11:c4:5a:00:35:64:d5:52:0b:15:
         33:4b:a7:6d:25:9e:97:1d:9a:18:ac:a3:89:df:fe:b3:b3:b7:
         68:fc:e9:45:4a:23:04:bc:32:a3:9e:7c:5f:f7:86:0a:a0:a2:
         a2:07:ee:0f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXF+wjQhj1iSKRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyMjEyNDEyMloXDTI1MTAyMDEyNDEyMlowLzEtMCsGA1UEAxMk
MjNkMTA4MDYtODI5ZS00NGM4LThlMjktYWY5MTIyMDU5YjUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpMTXiRQnwRpd4ysNrYhVqpR4jvz2W8WMWRm
JdJSxId+M2LO21cIiXKWG31ITJMGdjWJ7iHOeIzSb2yktl0tgUBPICzeK+FONRdn
M1bMuqbYRSrcojU8ZtRVrTw2f40S1Ik2RV2TI+rBfCS7UfPcwa8KbTHlZ4LCoblo
tci/glucCiAII/XBNPyYSHTEv4HKa/hpOKCb9vHtItqTrnPDiF8QazLdnevp4ZRo
Kozf/TnVzeEeOD4TEZf9gX28ESjHc96nflL453TeNGDPtp/tiR8tLDj7YyaOv7rh
dedMT3/SbiWXUlP8zc81xkS2uAMml2ts5FKEL6Gmq1M6XncLFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNvXpGU3BR13jh9IvM9J5TyH5MTKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWIyNDRiZTktZGQ4YS0z
NzhhLWJhOGYtYzVmNTMwMjVhZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA1qaFSCwqQjXmNRaAkogGERMhHOg9IK6ENvxfREsd4JwrIGoTbR
bqeXb8sbnLwQFOjYWdbu0Nfna5+72k9NUJAv9VGaSUUvLywUPMVdslGqtGgThnhT
BAunYvW6o/kuJ/L7+nH35HIAc5CPcFO8mQWjY25l5L8kgvWGK9zyWu0489Eu0+Yq
WnMwT60KFRC9+xt3oDW4qeD1EkO/GYVEN1RTvTy0pbRqJeUTCQYI0LskHWZQlwI4
wdjDTk1Jrc5ojCGikTFkDLLdsc9oPzrUEcRaADVk1VILFTNLp20lnpcdmhiso4nf
/rOzt2j86UVKIwS8MqOefF/3hgqgoqIH7g8=
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:19:57 2025 by rpki-client