Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31411385-2412-37d5-b780-7aa6bc7cdbe0.roa
File:                     31411385-2412-37d5-b780-7aa6bc7cdbe0.roa (raw, json)
Hash identifier:          Yso77zDYmcmNngWtGQsZw1mUPrGXr/ykQ/WXsPK7Yyk=
Subject key identifier:   76:9E:3A:C2:83:72:C9:D1:AC:C8:BC:D8:51:23:35:A6:5D:1A:8D:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A00DB0461E3D94077BA36CD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31411385-2412-37d5-b780-7aa6bc7cdbe0.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     397206
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:db:04:61:e3:d9:40:77:ba:36:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=507a6072-7678-419c-9c69-e593529be5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:47:6d:b1:48:48:86:cf:be:ec:3a:a8:e5:
                    17:cb:fb:e3:40:a0:13:ea:d6:39:5a:9c:82:70:c0:
                    c1:5f:d1:cc:18:6c:41:5f:32:0c:92:8a:c8:dd:94:
                    39:be:10:10:9b:39:a5:90:de:63:46:46:08:ee:fe:
                    cf:3b:73:bb:0f:87:24:e1:ba:6e:97:58:9d:72:8f:
                    e3:b0:6e:46:8c:43:62:68:02:a7:cd:6f:fe:cb:8d:
                    64:85:40:ec:d4:56:64:67:ff:98:18:b9:06:50:9d:
                    e8:37:ba:66:4c:db:a2:43:54:9b:a6:8c:28:9f:f3:
                    f0:5d:25:0a:6b:6b:46:16:4e:a6:c8:95:1b:18:dd:
                    b9:49:c5:03:00:9c:f6:cd:e6:0c:7f:bd:43:1f:07:
                    88:7a:f0:97:86:a7:7c:1d:93:8e:21:08:ba:3a:41:
                    38:e7:3e:7d:71:40:34:84:36:de:3f:d1:93:1d:80:
                    cf:bf:f7:55:b0:41:08:82:c5:4e:c9:b9:e0:42:53:
                    50:c8:fd:ae:92:31:bf:5f:77:ba:07:3b:6e:e6:84:
                    2f:33:fd:af:a1:79:05:73:45:28:7a:80:47:6d:ce:
                    50:31:4d:4e:85:fb:b4:2a:3d:05:91:f5:fa:c7:00:
                    bc:16:00:ed:36:03:ea:a5:5f:0a:a4:07:6f:9f:b8:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9E:3A:C2:83:72:C9:D1:AC:C8:BC:D8:51:23:35:A6:5D:1A:8D:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31411385-2412-37d5-b780-7aa6bc7cdbe0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:46:03:b5:5c:1f:62:3b:20:34:83:cf:94:fb:7b:0b:68:49:
         0a:1d:b4:4f:1f:f5:19:63:58:66:d7:6d:7b:af:2b:c1:ac:da:
         8e:ff:8e:7d:6d:58:ad:2a:59:dc:ca:6c:f9:9f:80:6a:8a:2b:
         24:07:47:8b:70:10:bd:db:4c:89:55:5a:0f:e1:59:32:0d:a2:
         d0:ba:7b:3e:de:c7:9a:14:bf:f8:a3:38:ce:84:84:16:bd:53:
         18:86:b5:99:15:9c:e3:f5:ac:97:10:7b:06:5e:1d:1c:2c:6c:
         13:84:3b:de:5f:0c:d3:39:5b:fc:70:0f:ae:0c:21:3d:8a:ec:
         77:e5:3c:00:4c:5c:65:b3:50:e3:17:38:d3:71:0d:e6:68:45:
         77:1c:31:50:be:48:54:58:55:05:d2:93:8e:22:cb:1b:c5:02:
         80:2b:91:96:f0:96:b1:37:2e:15:6b:27:9b:56:c5:e9:3e:05:
         64:5e:b0:df:2c:2c:db:57:2a:81:5c:b1:b6:4f:dc:04:37:07:
         e4:f4:3e:ec:66:f8:54:bd:87:b4:76:cc:95:f0:56:f4:d7:cc:
         41:9b:fa:01:27:f7:1b:c0:15:82:ab:68:d8:c4:b6:4f:ea:18:
         e9:bf:22:97:49:2c:30:a0:f7:af:82:61:89:41:db:6a:c8:4f:
         be:c9:88:36
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoA2wRh49lAd7o2zQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NTA3YTYwNzItNzY3OC00MTljLTljNjktZTU5MzUyOWJlNWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyRHbbFISIbPvuw6qOUXy/vjQKAT6tY5WpyC
cMDBX9HMGGxBXzIMkorI3ZQ5vhAQmzmlkN5jRkYI7v7PO3O7D4ck4bpul1idco/j
sG5GjENiaAKnzW/+y41khUDs1FZkZ/+YGLkGUJ3oN7pmTNuiQ1Sbpowon/PwXSUK
a2tGFk6myJUbGN25ScUDAJz2zeYMf71DHweIevCXhqd8HZOOIQi6OkE45z59cUA0
hDbeP9GTHYDPv/dVsEEIgsVOybngQlNQyP2ukjG/X3e6Bztu5oQvM/2voXkFc0Uo
eoBHbc5QMU1Ohfu0Kj0FkfX6xwC8FgDtNgPqpV8KpAdvn7gNSwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHaeOsKDcsnRrMi82FEjNaZdGo1xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzE0MTEzODUtMjQxMi0z
N2Q1LWI3ODAtN2FhNmJjN2NkYmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQA1RgO1XB9iOyA0g8+U+3sLaEkKHbRPH/UZY1hm
1217ryvBrNqO/459bVitKlncymz5n4BqiiskB0eLcBC920yJVVoP4VkyDaLQuns+
3seaFL/4ozjOhIQWvVMYhrWZFZzj9ayXEHsGXh0cLGwThDveXwzTOVv8cA+uDCE9
iux35TwATFxls1DjFzjTcQ3maEV3HDFQvkhUWFUF0pOOIssbxQKAK5GW8JaxNy4V
ayebVsXpPgVkXrDfLCzbVyqBXLG2T9wENwfk9D7sZvhUvYe0dsyV8Fb018xBm/oB
J/cbwBWCq2jYxLZP6hjpvyKXSSwwoPevgmGJQdtqyE++yYg2
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:11:24 2025 by rpki-client