Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b8bfd8-e11b-340a-937b-ad4c689a6b20.roa
File:                     16b8bfd8-e11b-340a-937b-ad4c689a6b20.roa (raw, json)
Hash identifier:          rpdcwlwkirseACkZiQBZBog0dMFXp4qTO4jJnBoCWH4=
Subject key identifier:   64:F6:0C:20:9F:64:B8:2C:FA:91:49:2E:53:74:C7:B2:56:00:EB:06
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B004C287AF308792384F83D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b8bfd8-e11b-340a-937b-ad4c689a6b20.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     20362
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4c:28:7a:f3:08:79:23:84:f8:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=263ede72-1d7f-4492-bb3a-f8811d91b7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c5:c8:c9:27:eb:c0:12:34:95:36:92:d1:70:
                    9a:ae:8f:d0:c8:a6:f3:5f:f7:ef:c2:b9:86:0f:a3:
                    aa:b2:f3:e0:43:f8:8e:64:8c:0c:5b:fa:5b:30:e5:
                    80:96:b3:79:0f:7c:bb:aa:19:bf:ed:89:6e:66:3f:
                    1a:41:3d:52:f1:96:51:32:5b:f5:dd:df:05:bf:31:
                    7f:22:68:15:be:04:f8:15:d1:e4:af:0e:e6:12:5d:
                    70:ae:b2:b2:e1:e7:19:22:77:17:ff:86:da:a4:d4:
                    ee:b7:13:ab:ff:95:93:5d:c3:46:67:07:2a:f7:dd:
                    d7:31:11:ce:62:fb:c8:a4:74:4c:9c:a0:88:0f:c9:
                    5c:59:fe:09:dd:0b:6b:8d:9a:bf:0d:a0:ec:8d:d5:
                    2b:f9:0f:a5:d1:d9:f9:38:bd:a2:1e:1d:47:44:96:
                    52:2c:ab:c7:b9:3c:f6:99:48:61:a8:23:24:6c:4e:
                    60:f1:11:f1:c5:4c:20:42:bf:a5:3a:e0:16:b6:fa:
                    40:bd:18:4b:84:fd:24:25:b7:dd:b0:49:a0:ab:58:
                    ab:81:bc:8c:db:b5:aa:63:8f:4f:31:f8:43:50:5e:
                    7f:25:f4:37:c8:ee:3d:03:ae:23:1e:b7:d2:e1:4d:
                    c4:85:0d:c8:40:4b:ef:92:4b:6a:ba:4f:d1:fc:b9:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F6:0C:20:9F:64:B8:2C:FA:91:49:2E:53:74:C7:B2:56:00:EB:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/16b8bfd8-e11b-340a-937b-ad4c689a6b20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:c1:af:bc:9a:bf:1e:a7:25:4a:8b:9f:66:1a:a9:d5:89:
         59:c3:f8:bf:ce:93:e3:c9:55:6d:7a:fb:08:4e:4b:15:71:46:
         38:5f:98:c8:c8:85:84:f5:4f:d9:34:5b:03:3f:eb:ba:b4:ce:
         e9:85:ef:72:0e:44:08:c0:bf:97:69:f5:e0:c2:db:9b:c3:d7:
         be:7c:89:b4:43:90:0a:2d:32:01:40:19:57:82:54:a8:aa:e4:
         b7:ed:5e:e9:0c:a9:75:d9:37:05:0a:f3:0e:be:7e:91:1b:87:
         e0:8d:06:9b:ac:37:0d:80:ba:8d:f8:79:1e:13:aa:71:06:68:
         9c:7c:d3:a4:24:58:16:59:05:88:b4:41:26:a0:e2:a7:4b:ce:
         4b:02:60:11:70:b3:f3:5e:79:d1:4e:58:3a:0b:c7:ff:a0:72:
         c7:3a:30:8d:40:62:a1:6b:f1:48:84:bf:7d:7f:17:10:94:c4:
         98:f1:8f:17:3e:0c:a3:3a:04:00:26:6a:7a:07:f5:8e:0c:32:
         4f:0d:e9:6c:b1:12:3c:bd:0d:55:91:ae:d7:05:80:15:2d:88:
         8a:e6:3a:0a:36:34:97:f4:8b:bb:e6:d9:11:b0:f3:21:82:bc:
         03:3a:db:9c:f0:d6:9f:9c:ca:a1:81:6f:0f:4d:9d:ce:ab:85:
         22:58:0d:fc
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsATCh68wh5I4T4PSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk
MjYzZWRlNzItMWQ3Zi00NDkyLWJiM2EtZjg4MTFkOTFiN2M5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMXIySfrwBI0lTaS0XCaro/QyKbzX/fvwrmG
D6OqsvPgQ/iOZIwMW/pbMOWAlrN5D3y7qhm/7YluZj8aQT1S8ZZRMlv13d8FvzF/
ImgVvgT4FdHkrw7mEl1wrrKy4ecZIncX/4bapNTutxOr/5WTXcNGZwcq993XMRHO
YvvIpHRMnKCID8lcWf4J3QtrjZq/DaDsjdUr+Q+l0dn5OL2iHh1HRJZSLKvHuTz2
mUhhqCMkbE5g8RHxxUwgQr+lOuAWtvpAvRhLhP0kJbfdsEmgq1irgbyM27WqY49P
MfhDUF5/JfQ3yO49A64jHrfS4U3EhQ3IQEvvkktquk/R/LlCxwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGT2DCCfZLgs+pFJLlN0x7JWAOsGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTZiOGJmZDgtZTExYi0z
NDBhLTkzN2ItYWQ0YzY4OWE2YjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBGnMGvvJq/HqclSoufZhqp1YlZw/i/zpPjyVVt
evsITksVcUY4X5jIyIWE9U/ZNFsDP+u6tM7phe9yDkQIwL+XafXgwtubw9e+fIm0
Q5AKLTIBQBlXglSoquS37V7pDKl12TcFCvMOvn6RG4fgjQabrDcNgLqN+HkeE6px
BmicfNOkJFgWWQWItEEmoOKnS85LAmARcLPzXnnRTlg6C8f/oHLHOjCNQGKha/FI
hL99fxcQlMSY8Y8XPgyjOgQAJmp6B/WODDJPDelssRI8vQ1Vka7XBYAVLYiK5joK
NjSX9Iu75tkRsPMhgrwDOtuc8NafnMqhgW8PTZ3Oq4UiWA38
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:31:03 2025 by rpki-client