Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f4b9b2d-020e-39c5-8952-9e6823a7c96e.roa
File:                     7f4b9b2d-020e-39c5-8952-9e6823a7c96e.roa (raw, json)
Hash identifier:          WHQ8bbU6ZRZ251tEOb+drofmvwZeGM2n4O2FUTobx0Y=
Subject key identifier:   86:C1:46:DB:FF:43:20:A5:3D:74:A7:01:F1:58:49:2B:18:63:EE:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A03A568BD646D2D6DECB6A7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f4b9b2d-020e-39c5-8952-9e6823a7c96e.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     22547
IP address blocks:        2001:500:122::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:68:bd:64:6d:2d:6d:ec:b6:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=4213ced5-0113-468a-b5bd-e923d90adf23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:51:e8:23:83:ed:29:17:cc:36:98:0e:79:7a:
                    2d:79:c6:2f:93:a3:0a:68:d7:17:78:2d:14:b4:eb:
                    9b:2d:38:02:84:8e:d2:26:31:2d:05:58:98:ea:9e:
                    0b:af:0c:eb:d6:6f:ac:5e:9f:b7:cb:af:57:85:5f:
                    32:55:47:7a:9a:b6:ce:56:f2:fd:39:66:9f:0a:32:
                    74:3e:80:fe:a9:d3:bf:ab:71:76:e9:10:66:cd:7a:
                    6c:78:91:48:fa:b3:57:40:bd:33:99:f0:3c:06:ef:
                    96:0e:76:c8:de:84:36:bd:62:ce:a9:ce:7e:fb:7f:
                    dd:5a:75:2b:98:57:18:4b:34:63:02:62:1d:0b:8f:
                    11:f6:18:f5:b4:8b:19:90:d3:ca:2a:7a:9a:66:1a:
                    d2:67:5a:f6:45:03:df:42:31:d8:6f:5d:dc:da:69:
                    ab:07:29:b9:d3:70:d4:af:13:be:74:64:9c:c0:4d:
                    58:52:29:5f:1d:64:ab:7c:a3:c5:ab:83:a3:bd:ed:
                    a6:91:d2:fb:e0:2d:33:6a:3b:4d:61:51:82:70:ea:
                    91:a4:a6:f7:4d:fe:2d:b6:22:f4:28:d0:52:a8:6a:
                    73:10:d3:86:71:e2:33:f4:03:c4:09:7f:19:31:4d:
                    2c:52:ba:78:1e:3d:3f:cf:3d:2c:5e:a8:93:8c:64:
                    8a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C1:46:DB:FF:43:20:A5:3D:74:A7:01:F1:58:49:2B:18:63:EE:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f4b9b2d-020e-39c5-8952-9e6823a7c96e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:122:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:bf:06:fa:b0:b1:61:de:0b:fa:88:af:06:60:3e:a6:3d:
         63:eb:19:62:08:48:72:4e:4a:3b:0e:f1:34:a2:28:2b:f1:d4:
         4a:cf:f0:f8:8d:df:23:8d:c8:a8:a7:ca:7a:cd:c7:e3:ce:3a:
         a8:fb:27:72:2b:bd:42:03:89:28:03:8f:b9:d7:d6:82:13:85:
         54:a1:76:43:37:21:9d:93:4a:7f:13:77:91:ab:92:2c:72:1a:
         aa:87:39:a5:d8:fa:33:b2:49:95:7d:60:7e:61:e2:3d:4b:68:
         07:03:f9:37:68:ed:99:4e:e2:ee:a1:25:ac:ac:1c:7a:71:55:
         1f:44:1d:88:6e:f3:e2:13:59:a4:6d:40:6f:98:37:1e:c1:4b:
         12:98:b9:8f:80:52:b7:95:21:2f:e0:75:8f:23:69:e7:f4:42:
         9c:93:4b:3f:38:b5:c2:e8:67:32:fb:a2:12:35:c1:a9:8a:1c:
         5c:77:d1:70:f5:61:11:89:47:55:da:de:fd:18:c6:45:65:ff:
         1d:6d:7b:b1:5c:0d:45:79:a2:65:d2:f0:73:71:40:5d:5c:f1:
         de:b8:3b:85:f0:f4:fb:56:4c:57:cc:f8:39:6f:85:67:7c:c2:
         31:5e:52:19:ac:ec:7f:cb:fe:5b:02:cf:a2:a5:d9:72:1b:b2:
         6e:8e:1b:54
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEoDpWi9ZG0tbey2p8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
NDIxM2NlZDUtMDExMy00NjhhLWI1YmQtZTkyM2Q5MGFkZjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1HoI4PtKRfMNpgOeXotecYvk6MKaNcXeC0U
tOubLTgChI7SJjEtBViY6p4Lrwzr1m+sXp+3y69XhV8yVUd6mrbOVvL9OWafCjJ0
PoD+qdO/q3F26RBmzXpseJFI+rNXQL0zmfA8Bu+WDnbI3oQ2vWLOqc5++3/dWnUr
mFcYSzRjAmIdC48R9hj1tIsZkNPKKnqaZhrSZ1r2RQPfQjHYb13c2mmrBym503DU
rxO+dGScwE1YUilfHWSrfKPFq4Ojve2mkdL74C0zajtNYVGCcOqRpKb3Tf4ttiL0
KNBSqGpzENOGceIz9APECX8ZMU0sUrp4Hj0/zz0sXqiTjGSKPwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIbBRtv/QyClPXSnAfFYSSsYY+7IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2Y0YjliMmQtMDIwZS0z
OWM1LTg5NTItOWU2ODIzYTdjOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEi
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBh/b8G+rCxYd4L+oivBmA+pj1j6xliCEhyTko7
DvE0oigr8dRKz/D4jd8jjciop8p6zcfjzjqo+ydyK71CA4koA4+519aCE4VUoXZD
NyGdk0p/E3eRq5Ischqqhzml2PozskmVfWB+YeI9S2gHA/k3aO2ZTuLuoSWsrBx6
cVUfRB2IbvPiE1mkbUBvmDcewUsSmLmPgFK3lSEv4HWPI2nn9EKck0s/OLXC6Gcy
+6ISNcGpihxcd9Fw9WERiUdV2t79GMZFZf8dbXuxXA1FeaJl0vBzcUBdXPHeuDuF
8PT7VkxXzPg5b4VnfMIxXlIZrOx/y/5bAs+ipdlyG7JujhtU
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:28:38 2025 by rpki-client