Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c76ecf2-2297-3c26-9f04-12848583062a.roa
File:                     7c76ecf2-2297-3c26-9f04-12848583062a.roa (raw, json)
Hash identifier:          bubNwh2+nVxxDEvvS0yKljZTcOBn6RVMY2bK55LP9fU=
Subject key identifier:   7D:34:67:4A:44:F0:BD:D7:1E:E4:A3:B7:8C:9E:84:1A:2A:98:77:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9636998D7933098529ED17C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c76ecf2-2297-3c26-9f04-12848583062a.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     7342
IP address blocks:        2001:502:8c25::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:99:8d:79:33:09:85:29:ed:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=9576a689-18cd-43f3-a3a1-663ce9080010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f7:17:b1:aa:6b:51:ee:e9:e3:ae:b1:a5:53:
                    d8:b5:6f:25:45:92:af:0c:76:fc:27:23:e8:aa:96:
                    65:c7:a3:af:65:f5:12:11:38:77:49:ed:ec:5b:97:
                    a4:31:0d:66:22:90:73:60:e2:04:e7:fb:91:fc:b2:
                    ca:8a:e0:14:3d:4a:e0:3f:11:81:cc:ef:97:43:ec:
                    52:9e:10:f5:dc:dc:76:41:8c:4f:5c:83:cf:a4:67:
                    4e:d6:06:89:ae:09:64:5b:f7:d1:b8:42:94:28:83:
                    a6:d4:44:f4:b8:b7:4e:ed:57:3b:e8:8d:40:8f:e8:
                    87:03:bf:08:a0:98:2d:45:96:d4:2e:b3:80:c6:d8:
                    b0:43:82:60:62:37:35:8c:ad:2b:88:f6:ad:2e:87:
                    08:a8:4f:a1:5e:ee:40:94:6b:15:8e:6f:5d:fa:b9:
                    ab:37:52:7f:ca:00:3f:eb:31:d5:3e:20:e9:49:a7:
                    e1:a8:3b:c8:69:73:da:6d:e3:67:f2:f1:1d:e2:4f:
                    05:ca:e5:b8:60:5e:ed:e1:a1:34:59:6f:4d:49:5a:
                    19:51:3d:88:ab:63:ca:85:51:cd:4b:69:8d:96:f9:
                    c1:09:31:4f:a1:2a:a2:a8:94:32:71:8f:16:c9:58:
                    24:e0:0e:63:a3:8e:ca:30:84:12:08:3f:67:0a:71:
                    50:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:34:67:4A:44:F0:BD:D7:1E:E4:A3:B7:8C:9E:84:1A:2A:98:77:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7c76ecf2-2297-3c26-9f04-12848583062a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8c25::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:47:26:23:c6:af:7e:71:a0:4c:c4:e5:45:cd:32:15:53:0a:
         da:91:24:88:d7:28:2c:0f:c3:00:ea:6a:09:fa:68:f1:61:40:
         ff:e8:64:07:08:7d:3c:1a:fe:b9:a6:0f:9f:81:a5:e6:14:e4:
         d8:a3:0b:13:56:3b:68:75:7e:e5:88:93:fc:89:63:82:5f:93:
         07:d4:c0:5f:50:31:1a:cd:75:ea:ae:23:22:67:e5:55:e6:51:
         40:50:e1:f6:4d:51:14:b8:a9:a4:99:79:f2:07:0e:63:4b:16:
         2e:0c:7d:5d:4e:72:07:14:e7:37:ed:34:ab:77:07:5e:63:34:
         f5:c6:71:b4:93:c9:fa:e9:e6:c9:14:80:4d:7f:35:04:f0:e8:
         f7:7b:fd:d5:e0:80:ea:f4:d5:6d:4e:e9:03:9b:2c:86:db:89:
         2a:7b:b7:82:f3:c0:94:46:36:35:d5:f2:53:6b:d0:15:d4:fd:
         d7:78:a8:bb:16:00:7b:ee:a2:31:11:59:7b:b8:73:59:fb:e8:
         30:57:a9:4c:27:62:93:09:62:36:7e:38:04:30:d4:24:3a:84:
         99:c1:31:6a:8e:95:7f:21:4d:ae:3f:90:07:79:8d:73:97:56:
         99:3c:71:c7:c1:14:34:1b:d9:bb:b7:0b:d4:75:71:49:7e:31:
         0c:ed:ea:83
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqWNpmNeTMJhSntF8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
OTU3NmE2ODktMThjZC00M2YzLWEzYTEtNjYzY2U5MDgwMDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvcXsaprUe7p466xpVPYtW8lRZKvDHb8JyPo
qpZlx6OvZfUSETh3Se3sW5ekMQ1mIpBzYOIE5/uR/LLKiuAUPUrgPxGBzO+XQ+xS
nhD13Nx2QYxPXIPPpGdO1gaJrglkW/fRuEKUKIOm1ET0uLdO7Vc76I1Aj+iHA78I
oJgtRZbULrOAxtiwQ4JgYjc1jK0riPatLocIqE+hXu5AlGsVjm9d+rmrN1J/ygA/
6zHVPiDpSafhqDvIaXPabeNn8vEd4k8FyuW4YF7t4aE0WW9NSVoZUT2Iq2PKhVHN
S2mNlvnBCTFPoSqiqJQycY8WyVgk4A5jo47KMIQSCD9nCnFQrwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFH00Z0pE8L3XHuSjt4yehBoqmHeQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2M3NmVjZjItMjI5Ny0z
YzI2LTlmMDQtMTI4NDg1ODMwNjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAowl
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALpHJiPGr35xoEzE5UXNMhVTCtqRJIjXKCwPwwDqagn6aPFhQP/o
ZAcIfTwa/rmmD5+BpeYU5NijCxNWO2h1fuWIk/yJY4JfkwfUwF9QMRrNdequIyJn
5VXmUUBQ4fZNURS4qaSZefIHDmNLFi4MfV1OcgcU5zftNKt3B15jNPXGcbSTyfrp
5skUgE1/NQTw6Pd7/dXggOr01W1O6QObLIbbiSp7t4LzwJRGNjXV8lNr0BXU/dd4
qLsWAHvuojERWXu4c1n76DBXqUwnYpMJYjZ+OAQw1CQ6hJnBMWqOlX8hTa4/kAd5
jXOXVpk8ccfBFDQb2bu3C9R1cUl+MQzt6oM=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:57:32 2025 by rpki-client