Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3066b42-0790-3a6d-909c-8526aab61d52.roa
File:                     c3066b42-0790-3a6d-909c-8526aab61d52.roa (raw, json)
Hash identifier:          pGFtpsfn5UVGS7n4hdnSPfyHRIt3tY+IhXYqWzw31As=
Subject key identifier:   A8:7E:BE:59:29:E0:49:53:C1:EF:12:1F:5B:28:22:1B:43:4E:F4:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849998F478E9D8328EFED950380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3066b42-0790-3a6d-909c-8526aab61d52.roa
Signing time:             Mon 21 Apr 2025 13:00:59 +0000
ROA not before:           Mon 21 Apr 2025 13:00:59 +0000
ROA not after:            Sun 20 Jul 2025 13:00:59 +0000
asID:                     396560
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:99:8f:47:8e:9d:83:28:ef:ed:95:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 13:00:59 2025 GMT
            Not After : Jul 20 13:00:59 2025 GMT
        Subject: CN=dc83aa1e-47d9-4c9f-b462-95d61542c91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:95:3a:23:b1:e5:1b:2c:85:57:59:67:34:
                    60:00:34:6f:98:bf:b8:5a:60:c2:59:03:23:14:62:
                    3d:23:64:fa:40:f6:d4:91:13:50:16:7a:2c:38:cf:
                    e4:f7:8e:ac:3d:01:e7:20:b6:37:70:52:79:bc:01:
                    ea:60:43:6f:ce:28:5b:7d:b8:2d:ec:8e:91:84:75:
                    89:52:3e:e7:e5:8c:6c:1d:71:8e:b9:6c:58:22:72:
                    60:a9:9b:c9:56:1f:9f:41:9a:31:08:d6:73:a3:6a:
                    3f:ac:5c:8e:70:13:0c:fe:ad:71:e8:55:de:8d:a3:
                    65:23:8a:e9:7f:f1:b2:c0:5c:6b:ec:61:77:39:48:
                    f2:05:07:05:4b:40:5f:bb:18:43:c0:52:5c:ed:34:
                    07:52:40:e9:76:98:99:ff:8b:fd:17:08:3b:00:41:
                    23:ea:81:d3:15:01:4e:04:7f:c7:43:c7:e3:95:fd:
                    98:85:d1:3a:30:ed:37:12:a9:1a:64:41:20:ff:51:
                    77:fb:f6:22:93:43:e3:04:46:71:d0:55:9b:fd:d0:
                    a7:51:ac:4f:3c:15:7b:85:43:e0:ee:69:c6:9d:9a:
                    d8:a7:54:93:93:fb:e6:35:ff:b0:26:64:99:5e:0d:
                    03:23:0d:16:4d:3c:e6:0e:33:1f:df:d8:5e:ce:6f:
                    72:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7E:BE:59:29:E0:49:53:C1:EF:12:1F:5B:28:22:1B:43:4E:F4:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c3066b42-0790-3a6d-909c-8526aab61d52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:36:3c:e3:eb:6c:20:31:28:85:51:36:0b:0e:e8:1e:84:ec:
         2d:6a:60:f3:90:18:73:da:33:5a:88:16:51:5e:ff:51:99:da:
         21:d2:2c:7d:08:f4:66:6e:25:c3:ad:9d:1f:f6:9e:52:c3:05:
         3b:96:ae:6d:c8:d8:9f:5e:74:25:6b:81:7b:a9:ca:fb:34:73:
         ce:12:65:df:21:a4:ca:bb:36:a7:7f:f0:41:69:02:8c:1a:f4:
         52:78:68:7f:ee:5b:39:de:50:5a:54:de:99:e2:d3:02:f3:6d:
         e6:f2:45:5e:ef:89:25:ed:cc:55:f1:2b:44:b7:f7:4a:c6:14:
         66:13:b8:f7:90:bd:f2:2e:c7:19:3d:a4:f5:d7:b9:85:5d:a9:
         f0:6a:b1:36:51:c3:25:1c:2e:cb:0b:84:6d:78:17:b9:86:bc:
         a9:8c:43:62:7f:75:9c:02:55:31:34:27:d6:2e:ad:b2:d8:e5:
         b6:a6:04:a5:e2:d5:89:7e:a2:ea:df:33:22:b5:e5:49:50:85:
         ab:06:72:c3:48:5e:01:64:75:03:a8:d0:8a:f2:67:69:81:f8:
         2f:3d:65:63:c2:1d:67:cd:4e:37:ae:97:9c:04:30:fe:56:14:
         c2:a8:23:dd:e6:26:50:a9:78:c3:85:c3:e7:9e:c8:c7:24:48:
         45:e8:3a:ad
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEmZj0eOnYMo7+2VA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDQyMTEzMDA1OVoXDTI1MDcyMDEzMDA1OVowLzEtMCsGA1UEAxMk
ZGM4M2FhMWUtNDdkOS00YzlmLWI0NjItOTVkNjE1NDJjOTFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNCVOiOx5RsshVdZZzRgADRvmL+4WmDCWQMj
FGI9I2T6QPbUkRNQFnosOM/k946sPQHnILY3cFJ5vAHqYENvzihbfbgt7I6RhHWJ
Uj7n5YxsHXGOuWxYInJgqZvJVh+fQZoxCNZzo2o/rFyOcBMM/q1x6FXejaNlI4rp
f/GywFxr7GF3OUjyBQcFS0BfuxhDwFJc7TQHUkDpdpiZ/4v9Fwg7AEEj6oHTFQFO
BH/HQ8fjlf2YhdE6MO03EqkaZEEg/1F3+/Yik0PjBEZx0FWb/dCnUaxPPBV7hUPg
7mnGnZrYp1STk/vmNf+wJmSZXg0DIw0WTTzmDjMf39hezm9yDwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKh+vlkp4ElTwe8SH1soIhtDTvTgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzMwNjZiNDItMDc5MC0z
YTZkLTkwOWMtODUyNmFhYjYxZDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBHNjzj62wgMSiFUTYLDugehOwtamDzkBhz2jNa
iBZRXv9Rmdoh0ix9CPRmbiXDrZ0f9p5SwwU7lq5tyNifXnQla4F7qcr7NHPOEmXf
IaTKuzanf/BBaQKMGvRSeGh/7ls53lBaVN6Z4tMC823m8kVe74kl7cxV8StEt/dK
xhRmE7j3kL3yLscZPaT117mFXanwarE2UcMlHC7LC4RteBe5hrypjENif3WcAlUx
NCfWLq2y2OW2pgSl4tWJfqLq3zMiteVJUIWrBnLDSF4BZHUDqNCK8mdpgfgvPWVj
wh1nzU43rpecBDD+VhTCqCPd5iZQqXjDhcPnnsjHJEhF6Dqt
-----END CERTIFICATE-----
Generated at Sun Apr 27 20:17:48 2025 by rpki-client