Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5520fa3-b085-3d91-842b-0ff507919cc8.roa
File:                     b5520fa3-b085-3d91-842b-0ff507919cc8.roa (raw, json)
Hash identifier:          +nOO1o4sY3RK5WPwKOcledauOlzLHMQh/idCsroh7ek=
Subject key identifier:   D7:11:9D:D2:C9:18:D6:71:FC:34:2A:35:4D:F3:80:49:75:DD:8F:A2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF08BAAE5169B79FE8A0D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5520fa3-b085-3d91-842b-0ff507919cc8.roa
Signing time:             Thu 24 Jul 2025 12:38:58 +0000
ROA not before:           Thu 24 Jul 2025 12:38:58 +0000
ROA not after:            Wed 22 Oct 2025 12:38:58 +0000
asID:                     396597
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:8b:aa:e5:16:9b:79:fe:8a:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:58 2025 GMT
            Not After : Oct 22 12:38:58 2025 GMT
        Subject: CN=7d00fb45-0fb1-4798-b949-1d865060774c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a6:8f:d6:d8:92:55:5a:20:07:3a:1f:50:8d:
                    6e:41:00:1a:1f:e9:c0:a9:1c:08:27:c3:0f:41:48:
                    41:c4:2d:c7:79:8e:23:d8:46:cc:e4:70:fb:d5:29:
                    66:d3:65:66:08:2c:ec:72:ab:2e:5d:00:45:f7:3f:
                    21:3a:bd:5c:84:62:82:e1:c6:2a:e4:2b:c5:6d:f7:
                    e9:b8:e6:79:ca:de:c1:59:23:34:40:c6:f1:ce:7c:
                    76:de:8f:a4:8d:37:2b:08:16:c2:33:3a:5d:f1:db:
                    b3:9b:d5:a6:24:d9:f9:e3:64:14:18:58:82:02:84:
                    7d:24:2a:45:bd:f1:50:a7:7c:57:fd:a6:82:4e:b6:
                    00:e9:7e:45:22:dc:b6:cd:6c:34:79:a5:c5:51:2e:
                    68:02:a2:be:73:8d:f3:8e:23:c8:73:46:dc:d4:37:
                    1c:7c:5b:a8:a9:cc:60:a8:bc:a8:84:35:3c:da:cb:
                    db:ed:5c:80:00:51:55:8b:d1:24:72:2b:55:70:3e:
                    73:0f:c2:b5:c3:87:b3:64:74:52:db:7a:a7:75:02:
                    27:3a:21:4b:dd:e7:fb:49:16:87:f3:73:88:c2:c4:
                    ec:0f:42:e2:bc:9e:a6:84:f2:ca:0f:82:f5:b6:66:
                    3f:65:a5:cf:38:c4:c3:cf:a4:79:73:88:f8:da:8a:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:11:9D:D2:C9:18:D6:71:FC:34:2A:35:4D:F3:80:49:75:DD:8F:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5520fa3-b085-3d91-842b-0ff507919cc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:89:22:97:37:d4:a8:7e:b7:f4:69:71:3a:e5:12:ba:ae:e5:
         1d:de:2a:41:1a:65:3b:f4:6e:93:a0:8b:22:fa:88:e9:24:d6:
         70:80:57:00:f1:85:27:06:70:97:f3:e0:f2:ba:42:ba:4c:d1:
         d0:c2:8f:ca:f5:ce:f5:2b:3e:96:66:dd:62:ce:50:ca:13:e4:
         10:4a:22:23:a6:5a:5f:5c:84:70:75:2d:9a:55:ba:c9:57:af:
         57:e6:11:5b:06:1b:cf:72:e0:9c:3f:fc:b0:a3:8c:da:67:83:
         6c:05:c7:3a:26:90:81:81:66:84:d1:57:1b:ab:05:f1:6b:72:
         9c:73:ed:30:f6:77:df:83:cb:f6:7b:59:5a:c5:9d:23:b8:c8:
         40:84:d6:67:08:60:07:8a:fe:18:b4:e2:45:db:91:1d:09:25:
         05:c0:3c:e2:ea:59:3c:ce:06:60:07:fc:85:ab:a2:0d:e2:1f:
         84:6e:b9:19:e1:45:c2:94:dd:e2:95:ac:9a:3f:ae:1a:88:cc:
         95:e7:3b:3b:3d:e5:40:05:fc:ac:30:b1:d5:dc:ea:c8:8b:51:
         db:e2:1a:98:89:48:c5:03:f6:1c:97:e2:bf:fc:ce:a7:3d:0c:
         68:2d:de:23:d7:ae:d3:42:91:f3:20:7f:78:b6:4f:0d:29:82:
         44:fd:c5:e6
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf8Iuq5Rabef6KDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyNDEyMzg1OFoXDTI1MTAyMjEyMzg1OFowLzEtMCsGA1UEAxMk
N2QwMGZiNDUtMGZiMS00Nzk4LWI5NDktMWQ4NjUwNjA3NzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6aP1tiSVVogBzofUI1uQQAaH+nAqRwIJ8MP
QUhBxC3HeY4j2EbM5HD71Slm02VmCCzscqsuXQBF9z8hOr1chGKC4cYq5CvFbffp
uOZ5yt7BWSM0QMbxznx23o+kjTcrCBbCMzpd8duzm9WmJNn542QUGFiCAoR9JCpF
vfFQp3xX/aaCTrYA6X5FIty2zWw0eaXFUS5oAqK+c43zjiPIc0bc1DccfFuoqcxg
qLyohDU82svb7VyAAFFVi9EkcitVcD5zD8K1w4ezZHRS23qndQInOiFL3ef7SRaH
83OIwsTsD0LivJ6mhPLKD4L1tmY/ZaXPOMTDz6R5c4j42oo7JwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNcRndLJGNZx/DQqNU3zgEl13Y+iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjU1MjBmYTMtYjA4NS0z
ZDkxLTg0MmItMGZmNTA3OTE5Y2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHmJIpc31Kh+t/RpcTrlErqu5R3eKkEaZTv0bpOgiyL6iOkk1nCA
VwDxhScGcJfz4PK6QrpM0dDCj8r1zvUrPpZm3WLOUMoT5BBKIiOmWl9chHB1LZpV
uslXr1fmEVsGG89y4Jw//LCjjNpng2wFxzomkIGBZoTRVxurBfFrcpxz7TD2d9+D
y/Z7WVrFnSO4yECE1mcIYAeK/hi04kXbkR0JJQXAPOLqWTzOBmAH/IWrog3iH4Ru
uRnhRcKU3eKVrJo/rhqIzJXnOzs95UAF/KwwsdXc6siLUdviGpiJSMUD9hyX4r/8
zqc9DGgt3iPXrtNCkfMgf3i2Tw0pgkT9xeY=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:14:08 2025 by rpki-client