Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bef2a72-fe37-30e4-9e93-584ff40315bf.roa
File:                     9bef2a72-fe37-30e4-9e93-584ff40315bf.roa (raw, json)
Hash identifier:          Gfa5HogzBNwTAYrKQMEcTtendYnXmmDktKDuhLrrUj8=
Subject key identifier:   42:31:91:B9:97:80:CE:63:6C:C5:0C:48:39:7B:B3:7F:23:5D:AE:1C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5FDD5DFECD992C205C6412C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bef2a72-fe37-30e4-9e93-584ff40315bf.roa
Signing time:             Tue 01 Jul 2025 13:48:35 +0000
ROA not before:           Tue 01 Jul 2025 13:48:35 +0000
ROA not after:            Mon 29 Sep 2025 13:48:35 +0000
asID:                     396542
IP address blocks:        2001:503:ba3e::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:dd:5d:fe:cd:99:2c:20:5c:64:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  1 13:48:35 2025 GMT
            Not After : Sep 29 13:48:35 2025 GMT
        Subject: CN=a80e6879-c2fc-4c47-b0aa-27094dfcb1c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5a:78:d3:fa:66:19:2e:53:61:1b:66:aa:34:
                    92:4b:6f:25:a5:33:f7:62:1e:32:7b:c0:32:d2:46:
                    d7:85:a5:81:d4:65:34:45:0e:80:ea:15:6f:5d:08:
                    1f:b2:f0:45:a3:de:b7:42:92:33:30:8e:61:d0:63:
                    d5:c2:76:bb:37:c5:9a:30:de:c2:a7:6d:6e:c4:41:
                    f3:2c:9a:62:e6:2b:42:25:cf:da:f3:ce:a0:84:69:
                    d6:95:ba:1d:08:63:34:e5:29:bc:13:8b:59:b8:14:
                    94:0b:f6:bf:d3:ba:ac:1e:2d:8f:48:01:1d:53:a8:
                    ab:49:fe:4e:5b:44:08:0b:0d:d4:24:7b:89:eb:a0:
                    25:0a:fd:e9:47:fb:5a:51:6c:78:ce:b2:b6:40:02:
                    03:2d:be:8a:ba:dc:41:1b:68:92:87:48:bf:6a:cc:
                    a2:e2:6e:75:7a:c4:fa:4d:ac:54:8a:68:f6:77:85:
                    8d:ff:de:8f:a1:fa:28:4b:f4:f5:b8:17:37:ab:da:
                    af:17:7f:f7:52:50:9c:7e:a1:e7:f3:25:99:61:38:
                    f8:a9:25:25:b1:85:ba:7f:76:b0:c5:12:24:fc:f7:
                    98:2f:0b:70:f3:c1:3a:ee:c5:15:d2:c0:a7:4e:55:
                    66:48:2e:1b:e3:18:68:2c:0d:14:99:87:f8:e3:3c:
                    8f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:31:91:B9:97:80:CE:63:6C:C5:0C:48:39:7B:B3:7F:23:5D:AE:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9bef2a72-fe37-30e4-9e93-584ff40315bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:99:d3:df:6c:b2:7e:63:38:d6:0c:5d:db:67:6b:c6:71:48:
         3d:7b:db:39:9b:2c:83:c7:9f:0c:2a:30:36:34:81:ea:ac:dd:
         85:4c:fe:14:a0:65:e3:d3:9b:2f:0c:ed:a6:73:5d:0a:e1:6b:
         8a:87:2f:f3:74:b1:be:8b:f6:bc:ac:ad:ec:4b:71:f0:23:97:
         33:f3:0d:b3:9e:30:8f:f1:06:a0:be:1b:13:8c:2c:7f:5e:ba:
         9e:c9:3a:5e:72:0e:8e:56:09:e0:74:c7:4c:7c:c4:18:84:53:
         7a:e3:81:29:c0:58:f8:76:b4:0e:1c:ef:01:01:aa:4a:d7:51:
         9e:09:32:67:15:10:f0:85:ff:4c:8f:83:7a:de:44:35:bf:d4:
         af:cf:3b:ae:65:c8:03:b5:af:e8:38:66:6f:fa:76:32:d0:13:
         1a:86:8c:ac:e1:b5:23:d8:60:25:91:2c:f4:6d:26:d3:6f:54:
         bd:21:e5:14:04:9c:02:69:9e:30:9a:27:2c:73:3b:c8:42:39:
         ef:8f:e4:de:62:eb:b0:30:65:28:18:26:6e:a0:1c:ef:82:2a:
         7f:45:ac:ec:e0:ca:dc:9e:b4:6a:df:06:f5:02:ad:9d:10:e4:
         17:83:7c:d6:a2:ce:b4:b4:99:eb:76:5b:a0:c5:a3:e3:4b:89:
         21:79:33:d2
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpf3V3+zZksIFxkEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwMTEzNDgzNVoXDTI1MDkyOTEzNDgzNVowLzEtMCsGA1UEAxMk
YTgwZTY4NzktYzJmYy00YzQ3LWIwYWEtMjcwOTRkZmNiMWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVp40/pmGS5TYRtmqjSSS28lpTP3Yh4ye8Ay
0kbXhaWB1GU0RQ6A6hVvXQgfsvBFo963QpIzMI5h0GPVwna7N8WaMN7Cp21uxEHz
LJpi5itCJc/a886ghGnWlbodCGM05Sm8E4tZuBSUC/a/07qsHi2PSAEdU6irSf5O
W0QICw3UJHuJ66AlCv3pR/taUWx4zrK2QAIDLb6KutxBG2iSh0i/asyi4m51esT6
TaxUimj2d4WN/96PofooS/T1uBc3q9qvF3/3UlCcfqHn8yWZYTj4qSUlsYW6f3aw
xRIk/PeYLwtw88E67sUV0sCnTlVmSC4b4xhoLA0UmYf44zyPKQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEIxkbmXgM5jbMUMSDl7s38jXa4cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWJlZjJhNzItZmUzNy0z
MGU0LTllOTMtNTg0ZmY0MDMxNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA7o+
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB7mdPfbLJ+YzjWDF3bZ2vGcUg9e9s5myyDx58M
KjA2NIHqrN2FTP4UoGXj05svDO2mc10K4WuKhy/zdLG+i/a8rK3sS3HwI5cz8w2z
njCP8QagvhsTjCx/XrqeyTpecg6OVgngdMdMfMQYhFN644EpwFj4drQOHO8BAapK
11GeCTJnFRDwhf9Mj4N63kQ1v9SvzzuuZcgDta/oOGZv+nYy0BMahoys4bUj2GAl
kSz0bSbTb1S9IeUUBJwCaZ4wmicsczvIQjnvj+TeYuuwMGUoGCZuoBzvgip/Razs
4MrcnrRq3wb1Aq2dEOQXg3zWos60tJnrdlugxaPjS4kheTPS
-----END CERTIFICATE-----
Generated at Thu Jul 10 07:20:18 2025 by rpki-client