Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0031bc5c-e67d-36bc-8bc5-4aaec905051d.roa
File:                     0031bc5c-e67d-36bc-8bc5-4aaec905051d.roa (raw, json)
Hash identifier:          +NaHSwKTjKnKpnvU8gfEhQ/xPBixn7WH72zkZNNlWm8=
Subject key identifier:   1F:24:1D:D7:BD:F4:BF:43:01:F1:22:62:B2:26:6A:95:31:42:42:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849D758A5CAB9B600B04CDC1D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0031bc5c-e67d-36bc-8bc5-4aaec905051d.roa
Signing time:             Tue 13 May 2025 16:11:14 +0000
ROA not before:           Tue 13 May 2025 16:11:14 +0000
ROA not after:            Mon 11 Aug 2025 16:11:14 +0000
asID:                     396584
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d7:58:a5:ca:b9:b6:00:b0:4c:dc:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 13 16:11:14 2025 GMT
            Not After : Aug 11 16:11:14 2025 GMT
        Subject: CN=363d3371-4528-4004-8564-ac6ea368064a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a8:ae:23:e2:9a:76:18:9e:c2:6b:c1:cd:1b:
                    c3:82:7c:c5:1e:db:09:fa:bc:78:3e:75:9e:b5:39:
                    4a:d6:0c:81:ad:49:db:ba:ec:34:74:3a:c0:a3:b0:
                    19:14:15:11:cf:f4:8a:be:9e:46:ac:ec:ba:75:df:
                    29:91:bf:9f:9d:bc:db:eb:52:8e:fe:46:db:92:08:
                    51:6f:9b:6f:6b:78:72:84:99:ee:d4:50:89:a6:f4:
                    b1:61:9c:3f:cd:f7:fe:68:97:cf:41:5c:10:b4:6d:
                    a2:a2:44:4f:3e:6f:21:e9:b3:50:e2:64:32:c3:d6:
                    cb:e9:08:bb:59:fe:d0:34:11:d9:6b:de:4f:9d:8f:
                    c1:8c:2b:3b:a9:6e:95:6f:47:24:ba:86:06:b6:04:
                    84:fd:85:e1:58:06:55:88:c3:48:9b:1d:1d:4a:d5:
                    78:15:50:c6:02:50:d9:70:15:47:1f:e3:17:19:e8:
                    07:97:d1:5a:24:94:d4:04:a8:15:7b:3e:f5:3d:aa:
                    f3:ef:01:be:25:5d:bc:30:c3:13:ab:a7:b5:f5:0b:
                    93:37:12:2e:c1:31:04:93:9c:da:4c:ef:90:c2:79:
                    23:e4:92:db:e3:d3:e5:57:dc:a0:57:55:d3:35:45:
                    f0:b2:70:46:62:1d:f1:5f:5a:41:8e:ea:56:7a:ae:
                    a3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:24:1D:D7:BD:F4:BF:43:01:F1:22:62:B2:26:6A:95:31:42:42:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0031bc5c-e67d-36bc-8bc5-4aaec905051d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:e6:45:36:72:31:26:88:1d:45:3a:72:7d:be:27:b3:90:
         79:c8:26:bd:b7:91:ac:a2:13:51:a5:d8:b5:3a:86:af:eb:8a:
         f4:43:32:cf:a7:7c:4f:fc:c0:58:77:fd:9b:31:c5:6f:20:e6:
         fe:2e:9a:e3:d6:65:ce:d5:0d:57:43:6a:95:47:04:3b:cb:d3:
         23:e1:54:a7:f9:ec:b0:29:7a:b9:1c:fe:b0:e4:53:82:23:89:
         dc:ba:cb:df:45:69:ca:03:c7:d4:6f:82:cb:c3:8e:fd:e7:6e:
         a3:df:1d:69:9a:f5:69:c9:ee:dc:7a:84:c7:8c:9a:6d:4f:c5:
         b3:95:f1:14:fb:00:ca:24:25:36:35:c5:3d:7a:37:50:d4:92:
         de:ca:e8:4a:ac:a0:c9:11:71:4b:32:b2:c8:79:bc:2b:6c:90:
         eb:2c:bb:9e:8c:a4:03:c1:2d:d7:c5:e2:51:79:34:8a:f4:7e:
         a5:ac:16:2b:8f:5f:b0:dd:89:83:fe:f0:a9:ae:6f:9c:41:9f:
         7b:bd:a6:ec:90:65:a2:11:6b:e6:b8:3e:88:67:c7:41:33:e3:
         60:a1:95:3c:1d:cc:7e:f3:c7:2e:50:30:b7:7c:b9:ea:ca:30:
         f2:d4:05:f7:ab:a7:af:88:f3:e9:4d:59:f3:17:48:8c:57:f0:
         c0:42:18:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEnXWKXKubYAsEzcHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDUxMzE2MTExNFoXDTI1MDgxMTE2MTExNFowLzEtMCsGA1UEAxMk
MzYzZDMzNzEtNDUyOC00MDA0LTg1NjQtYWM2ZWEzNjgwNjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aiuI+KadhiewmvBzRvDgnzFHtsJ+rx4PnWe
tTlK1gyBrUnbuuw0dDrAo7AZFBURz/SKvp5GrOy6dd8pkb+fnbzb61KO/kbbkghR
b5tva3hyhJnu1FCJpvSxYZw/zff+aJfPQVwQtG2iokRPPm8h6bNQ4mQyw9bL6Qi7
Wf7QNBHZa95PnY/BjCs7qW6Vb0ckuoYGtgSE/YXhWAZViMNImx0dStV4FVDGAlDZ
cBVHH+MXGegHl9FaJJTUBKgVez71Parz7wG+JV28MMMTq6e19QuTNxIuwTEEk5za
TO+Qwnkj5JLb49PlV9ygV1XTNUXwsnBGYh3xX1pBjupWeq6jBwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFB8kHde99L9DAfEiYrImapUxQkKiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDAzMWJjNWMtZTY3ZC0z
NmJjLThiYzUtNGFhZWM5MDUwNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHnQ5kU2cjEmiB1FOnJ9viezkHnIJr23kayiE1Gl2LU6hq/rivRD
Ms+nfE/8wFh3/ZsxxW8g5v4umuPWZc7VDVdDapVHBDvL0yPhVKf57LAperkc/rDk
U4Ijidy6y99FacoDx9RvgsvDjv3nbqPfHWma9WnJ7tx6hMeMmm1PxbOV8RT7AMok
JTY1xT16N1DUkt7K6EqsoMkRcUsyssh5vCtskOssu56MpAPBLdfF4lF5NIr0fqWs
FiuPX7DdiYP+8Kmub5xBn3u9puyQZaIRa+a4Pohnx0Ez42ChlTwdzH7zxy5QMLd8
uerKMPLUBferp6+I8+lNWfMXSIxX8MBCGCU=
-----END CERTIFICATE-----
Generated at Tue Jun 17 17:26:48 2025 by rpki-client