Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efb59253-4313-3d79-8460-2ff12f546ec1.roa
File:                     efb59253-4313-3d79-8460-2ff12f546ec1.roa (raw, json)
Hash identifier:          qqom/WlkFtzHeyhVmIY3xzomrDs+RFGIt6iTnkSemkI=
Subject key identifier:   D2:0D:E9:B0:EF:46:65:92:E4:B5:EE:2A:51:83:71:C1:7B:E7:B4:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A84124B0AEA7372264C558A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efb59253-4313-3d79-8460-2ff12f546ec1.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36629
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:4b:0a:ea:73:72:26:4c:55:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=40691268-83bb-49ef-8f5c-10520bfe6784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:10:9d:b7:81:db:2a:d3:19:e1:84:cf:43:29:
                    e1:fe:42:61:f0:12:aa:11:b5:b0:a1:5a:63:f2:6e:
                    ad:2d:a0:e9:75:e7:d4:c9:1c:ce:d1:e3:30:83:8b:
                    e3:e0:20:3f:12:85:71:32:15:ec:8c:42:b5:de:87:
                    ae:5e:8d:90:32:21:db:b1:e3:da:fb:45:25:e8:f0:
                    d7:fd:97:ab:48:55:21:21:06:00:6f:3c:70:e8:fe:
                    3e:b3:ad:0b:18:ec:e0:c8:ae:d7:6a:e0:ea:5e:11:
                    43:a4:8b:cc:61:58:e7:a3:d9:19:26:51:96:1d:6c:
                    06:8b:bb:3a:59:b2:f5:a4:38:93:42:8e:a6:8b:24:
                    a1:36:29:2c:7f:c3:b2:d7:82:22:7c:a6:e7:7c:c9:
                    0f:0f:eb:ac:3d:f1:06:e5:57:b1:34:cf:01:48:ff:
                    c0:91:ce:00:95:7a:3f:63:d5:07:38:65:f7:ff:79:
                    5b:a4:6f:ed:04:bf:54:c9:cf:a9:ab:3a:9c:f0:34:
                    93:22:ce:47:35:63:dd:75:80:7b:be:d7:31:0c:7d:
                    e8:dc:62:04:37:71:b8:c9:4e:24:d6:75:c9:c8:22:
                    dd:6f:6b:b3:92:45:1c:c5:e5:5a:67:f6:7f:5a:a7:
                    df:14:6a:00:79:b3:dc:0c:a8:b7:76:59:14:04:e6:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0D:E9:B0:EF:46:65:92:E4:B5:EE:2A:51:83:71:C1:7B:E7:B4:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/efb59253-4313-3d79-8460-2ff12f546ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:57:0e:fc:be:bd:ef:22:17:e2:a9:95:7e:30:b4:d6:3a:20:
         c7:a0:93:e5:86:9c:67:4e:98:36:39:a7:f2:14:89:c1:29:bd:
         67:4a:f6:00:da:fc:b6:5c:91:89:54:01:e7:06:7a:91:fb:b4:
         0b:9c:44:0d:34:fc:bf:ba:0c:cb:a1:27:f4:ff:1b:04:3c:8b:
         c3:f2:5a:5f:01:e9:79:98:2d:e2:48:4e:e3:32:b5:6c:8b:1f:
         74:39:06:3f:ba:07:f9:b4:bf:15:ac:1c:1c:c8:bf:8a:51:9d:
         b2:1e:75:8d:c6:6c:e9:b5:57:5c:0b:dd:38:d4:90:3a:25:2e:
         6c:09:44:8c:fa:0d:0f:72:19:be:db:e9:15:6e:c8:16:15:78:
         cb:e6:05:68:ff:ed:66:4f:6a:45:61:df:f0:61:0a:c7:e2:7e:
         e5:41:96:8f:8f:4b:ad:37:56:47:23:d6:f5:1c:b2:a7:3c:52:
         a9:a9:06:02:65:2d:2d:ed:9b:dc:6c:ac:ea:64:89:91:0c:87:
         3a:10:a1:74:da:54:2d:e7:2c:de:41:aa:f7:f1:8c:6b:4a:0c:
         ca:fe:19:41:03:3c:c0:a0:c3:fc:eb:95:9d:5b:16:d6:3b:da:
         1c:ec:73:1c:83:b5:ab:48:ee:b5:55:c0:2e:44:53:b2:98:c2:
         59:67:57:18
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqEEksK6nNyJkxVioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NDA2OTEyNjgtODNiYi00OWVmLThmNWMtMTA1MjBiZmU2Nzg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhCdt4HbKtMZ4YTPQynh/kJh8BKqEbWwoVpj
8m6tLaDpdefUyRzO0eMwg4vj4CA/EoVxMhXsjEK13oeuXo2QMiHbsePa+0Ul6PDX
/ZerSFUhIQYAbzxw6P4+s60LGOzgyK7XauDqXhFDpIvMYVjno9kZJlGWHWwGi7s6
WbL1pDiTQo6miyShNiksf8Oy14IifKbnfMkPD+usPfEG5VexNM8BSP/Akc4AlXo/
Y9UHOGX3/3lbpG/tBL9Uyc+pqzqc8DSTIs5HNWPddYB7vtcxDH3o3GIEN3G4yU4k
1nXJyCLdb2uzkkUcxeVaZ/Z/WqffFGoAebPcDKi3dlkUBOb10QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNIN6bDvRmWS5LXuKlGDccF757RsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWZiNTkyNTMtNDMxMy0z
ZDc5LTg0NjAtMmZmMTJmNTQ2ZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBXVw78vr3vIhfiqZV+MLTWOiDHoJPlhpxnTpg2
OafyFInBKb1nSvYA2vy2XJGJVAHnBnqR+7QLnEQNNPy/ugzLoSf0/xsEPIvD8lpf
Ael5mC3iSE7jMrVsix90OQY/ugf5tL8VrBwcyL+KUZ2yHnWNxmzptVdcC9041JA6
JS5sCUSM+g0Pchm+2+kVbsgWFXjL5gVo/+1mT2pFYd/wYQrH4n7lQZaPj0utN1ZH
I9b1HLKnPFKpqQYCZS0t7ZvcbKzqZImRDIc6EKF02lQt5yzeQar38YxrSgzK/hlB
AzzAoMP865WdWxbWO9oc7HMcg7WrSO61VcAuRFOymMJZZ1cY
-----END CERTIFICATE-----
Generated at Fri Jul 25 01:03:28 2025 by rpki-client