Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8eee757c-4b1f-30ec-b9d3-e4ae27589bb4.roa
File:                     8eee757c-4b1f-30ec-b9d3-e4ae27589bb4.roa (raw, json)
Hash identifier:          xJELJz7eaUtu/csQ6tRzA8bAb89yl3siDDCSwm4o3EQ=
Subject key identifier:   20:D8:FD:7F:4A:F4:0D:38:80:D5:FE:94:71:2C:85:E8:26:D6:89:A9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1AD1BAD909D4AA8B54E57000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8eee757c-4b1f-30ec-b9d3-e4ae27589bb4.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     396600
IP address blocks:        2001:503:39c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:ba:d9:09:d4:aa:8b:54:e5:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=e1b6f430-2851-45c5-bbc4-b6ab73eaa2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a2:37:77:95:64:89:6f:6e:80:54:ba:42:b2:
                    be:a7:5c:e5:ab:66:a2:90:3a:3c:0a:fb:d9:bf:e6:
                    38:22:4c:ee:5a:f1:35:d5:50:16:1e:d0:24:60:70:
                    49:3d:33:d5:a2:47:bf:b9:91:be:1f:c2:8e:63:e9:
                    4a:f5:db:90:eb:ab:b2:fa:db:2b:37:7e:86:63:df:
                    e1:b3:0c:89:38:c5:6b:a3:ae:ee:7d:9a:0e:dc:ea:
                    df:5f:8e:0c:25:d3:19:61:0a:76:dc:03:0d:81:b3:
                    39:c1:a2:9e:25:d7:33:3a:91:d1:46:38:39:89:d4:
                    99:ea:71:3a:4b:82:57:db:f9:31:92:2d:30:aa:a4:
                    41:ea:c6:37:93:ed:26:7a:09:cf:ed:f0:a5:f1:9d:
                    be:4e:a5:23:93:9e:60:6f:c1:bc:24:0e:6d:37:75:
                    6e:09:58:7b:ed:b2:76:cd:17:0d:73:e4:1e:e8:28:
                    05:46:87:21:75:69:47:70:51:d9:0a:7c:f7:94:a0:
                    4e:cf:94:30:a0:66:2f:29:2c:6e:d4:5d:02:4c:30:
                    4f:57:f2:0e:d5:7c:b7:f2:fb:f9:b3:4a:02:5d:be:
                    fd:91:6d:87:39:5b:65:f4:3f:e6:34:34:4a:a2:19:
                    84:2a:07:08:54:42:94:24:35:89:34:ab:d8:d9:a3:
                    bd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D8:FD:7F:4A:F4:0D:38:80:D5:FE:94:71:2C:85:E8:26:D6:89:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8eee757c-4b1f-30ec-b9d3-e4ae27589bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:1f:0f:8c:9b:b8:42:4c:cb:1a:f8:31:a8:3e:47:4f:1a:c1:
         15:1b:d3:eb:3a:5b:6c:cc:b0:be:b2:28:11:56:f0:cb:87:fe:
         c2:14:f2:ae:7d:48:fd:88:a0:55:62:bb:1c:3c:c3:cb:51:c9:
         05:5e:3b:f4:8b:5a:56:16:65:8f:39:55:a1:30:47:3d:9c:2a:
         35:60:85:eb:5b:83:44:e8:fc:3e:b7:c8:02:d8:ec:c5:1e:bf:
         d9:8e:5d:44:f9:29:34:09:e2:65:93:0f:6c:1f:b3:51:c8:38:
         2c:33:83:34:9a:ed:a7:e1:e1:14:62:9e:69:58:f7:5a:ea:5f:
         0c:84:cb:87:ba:39:53:09:c2:43:88:78:ba:17:68:b4:2d:e4:
         fb:f1:16:d9:5e:6c:a3:51:59:41:73:e4:a1:71:ea:d7:a9:e2:
         c4:08:96:3e:cf:07:c5:75:fc:ab:a1:f3:3e:28:c8:48:16:f9:
         ec:71:6d:27:f6:5d:33:fc:37:d2:94:03:61:6f:8f:11:15:16:
         51:85:0c:e9:2d:55:13:3a:ca:10:cf:16:8e:a8:4d:25:16:68:
         a7:c4:5b:61:57:c6:cb:3c:47:b5:ea:3e:8f:8a:41:9a:f2:ab:
         81:7a:e7:23:ab:36:62:d1:69:45:f1:a0:13:7c:b3:8b:e2:99:
         c9:21:61:c5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsa0brZCdSqi1TlcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk
ZTFiNmY0MzAtMjg1MS00NWM1LWJiYzQtYjZhYjczZWFhMmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqI3d5VkiW9ugFS6QrK+p1zlq2aikDo8CvvZ
v+Y4IkzuWvE11VAWHtAkYHBJPTPVoke/uZG+H8KOY+lK9duQ66uy+tsrN36GY9/h
swyJOMVro67ufZoO3OrfX44MJdMZYQp23AMNgbM5waKeJdczOpHRRjg5idSZ6nE6
S4JX2/kxki0wqqRB6sY3k+0megnP7fCl8Z2+TqUjk55gb8G8JA5tN3VuCVh77bJ2
zRcNc+Qe6CgFRochdWlHcFHZCnz3lKBOz5QwoGYvKSxu1F0CTDBPV/IO1Xy38vv5
s0oCXb79kW2HOVtl9D/mNDRKohmEKgcIVEKUJDWJNKvY2aO9vQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCDY/X9K9A04gNX+lHEshegm1ompMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGVlZTc1N2MtNGIxZi0z
MGVjLWI5ZDMtZTRhZTI3NTg5YmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAznB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAA4fD4ybuEJMyxr4Mag+R08awRUb0+s6W2zMsL6yKBFW8MuH/sIU
8q59SP2IoFViuxw8w8tRyQVeO/SLWlYWZY85VaEwRz2cKjVghetbg0To/D63yALY
7MUev9mOXUT5KTQJ4mWTD2wfs1HIOCwzgzSa7afh4RRinmlY91rqXwyEy4e6OVMJ
wkOIeLoXaLQt5PvxFtlebKNRWUFz5KFx6tep4sQIlj7PB8V1/Kuh8z4oyEgW+exx
bSf2XTP8N9KUA2FvjxEVFlGFDOktVRM6yhDPFo6oTSUWaKfEW2FXxss8R7XqPo+K
QZryq4F65yOrNmLRaUXxoBN8s4vimckhYcU=
-----END CERTIFICATE-----
Generated at Wed Sep 10 20:43:18 2025 by rpki-client