Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09aa7bcc-10eb-39b2-a2fb-e0c010131636.roa
File:                     09aa7bcc-10eb-39b2-a2fb-e0c010131636.roa (raw, json)
Hash identifier:          Dx5G/kIfq+V9yUtMLrf7RWE3rB855Qe34e6dT+B6gJw=
Subject key identifier:   CB:26:B6:AA:C6:5B:E5:C5:9E:5F:5D:63:A0:C2:11:4E:07:02:2E:A0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1AD1B8BB7CE2838AF456B600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09aa7bcc-10eb-39b2-a2fb-e0c010131636.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     396583
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:b8:bb:7c:e2:83:8a:f4:56:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=085c9beb-3a72-4244-8545-b1b6b70f4aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c6:fb:8a:90:ae:47:2f:0f:c0:8f:d9:41:d7:
                    1c:b0:3d:c4:bf:1a:c0:da:15:0b:d2:fc:b8:d3:13:
                    46:74:28:18:13:8b:75:f5:57:d9:9c:70:2b:5e:ae:
                    bd:57:16:ec:ef:f5:0d:3c:63:8b:b6:24:88:01:a9:
                    0d:32:a1:fb:4b:16:f3:7f:66:98:d4:df:1c:2f:50:
                    8e:42:52:4a:17:f0:ca:8c:ec:2c:a0:4a:c0:ea:e8:
                    da:29:a0:1c:21:73:fa:6e:59:55:cd:ec:5f:d4:c5:
                    12:43:2f:66:d3:4e:c1:f2:37:9f:fd:f2:f0:31:30:
                    c9:a1:e4:09:63:03:7a:50:7a:d5:09:53:db:fd:4e:
                    7d:d8:89:88:9b:fb:6f:43:02:ce:96:71:ea:71:f5:
                    b7:cb:bb:58:a3:26:a7:a5:f2:24:80:33:2f:45:b4:
                    0c:f3:13:ab:29:1c:46:d6:de:ee:16:40:1d:fe:f0:
                    78:d1:8b:ed:0e:c3:50:b1:6c:c6:24:07:68:50:32:
                    a2:6b:88:c1:ab:ec:f6:4a:f8:dc:03:ae:15:61:cd:
                    1b:8b:89:4a:fb:c0:88:5e:ae:eb:fa:e1:87:e0:a7:
                    df:05:69:82:86:37:20:7c:23:13:98:18:47:9c:50:
                    58:12:82:50:ee:4e:48:f4:e6:e6:38:a1:40:ef:3b:
                    88:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:26:B6:AA:C6:5B:E5:C5:9E:5F:5D:63:A0:C2:11:4E:07:02:2E:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09aa7bcc-10eb-39b2-a2fb-e0c010131636.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:c2:08:e8:aa:9a:4d:94:e0:cb:76:f7:d1:41:15:28:3f:c8:
         9b:a9:a6:f3:c8:5f:f0:b1:01:c6:ac:bc:07:27:6e:7a:3d:2f:
         5d:6a:c4:bf:62:28:91:53:d8:e7:22:16:53:31:f2:fa:28:ca:
         5f:84:fd:95:f1:59:30:f6:24:45:8e:28:42:b9:86:0e:aa:53:
         5a:08:53:a9:1f:fe:e5:40:95:55:8f:e2:f1:45:23:39:7a:94:
         15:4d:84:99:f7:99:7d:25:0d:9a:4d:d1:09:9b:09:ac:25:0a:
         05:bc:02:e0:e1:81:db:90:0a:3d:e0:60:d7:5c:21:88:d9:cd:
         88:d0:a0:7b:6a:e1:f8:0e:25:2a:fd:a0:69:1f:5c:c7:8c:bd:
         5e:bf:46:4f:6f:3f:45:1a:0f:de:21:ed:31:37:cd:b0:a2:a9:
         35:60:e2:5c:57:cd:a6:85:92:38:49:91:d8:e0:db:02:e1:5c:
         76:4e:3d:b2:51:2c:18:b7:ab:16:30:d3:4e:83:52:80:41:cd:
         84:60:dc:1d:64:75:11:da:22:d1:e1:1b:1e:1b:bc:99:06:23:
         87:dc:38:05:b2:80:cc:26:81:92:80:b1:4c:d5:fc:8f:1f:2a:
         1b:9b:eb:08:bb:1e:b1:93:19:4a:19:c1:8e:18:21:88:c5:f8:
         76:ec:9e:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0bi7fOKDivRWtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
MDg1YzliZWItM2E3Mi00MjQ0LTg1NDUtYjFiNmI3MGY0YWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsb7ipCuRy8PwI/ZQdccsD3EvxrA2hUL0vy4
0xNGdCgYE4t19VfZnHArXq69Vxbs7/UNPGOLtiSIAakNMqH7Sxbzf2aY1N8cL1CO
QlJKF/DKjOwsoErA6ujaKaAcIXP6bllVzexf1MUSQy9m007B8jef/fLwMTDJoeQJ
YwN6UHrVCVPb/U592ImIm/tvQwLOlnHqcfW3y7tYoyanpfIkgDMvRbQM8xOrKRxG
1t7uFkAd/vB40YvtDsNQsWzGJAdoUDKia4jBq+z2SvjcA64VYc0bi4lK+8CIXq7r
+uGH4KffBWmChjcgfCMTmBhHnFBYEoJQ7k5I9ObmOKFA7zuIgwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMsmtqrGW+XFnl9dY6DCEU4HAi6gMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDlhYTdiY2MtMTBlYi0z
OWIyLWEyZmItZTBjMDEwMTMxNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADbCCOiqmk2U4Mt299FBFSg/yJuppvPIX/CxAcasvAcnbno9L11q
xL9iKJFT2OciFlMx8vooyl+E/ZXxWTD2JEWOKEK5hg6qU1oIU6kf/uVAlVWP4vFF
Izl6lBVNhJn3mX0lDZpN0QmbCawlCgW8AuDhgduQCj3gYNdcIYjZzYjQoHtq4fgO
JSr9oGkfXMeMvV6/Rk9vP0UaD94h7TE3zbCiqTVg4lxXzaaFkjhJkdjg2wLhXHZO
PbJRLBi3qxYw006DUoBBzYRg3B1kdRHaItHhGx4bvJkGI4fcOAWygMwmgZKAsUzV
/I8fKhub6wi7HrGTGUoZwY4YIYjF+Hbsnu0=
-----END CERTIFICATE-----
Generated at Thu Sep 11 06:08:08 2025 by rpki-client