Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3a7560f-9ed3-335e-b871-88e4ea234749.roa
File:                     e3a7560f-9ed3-335e-b871-88e4ea234749.roa (raw, json)
Hash identifier:          j27QUiFOcr0Httr4SpwtGQqaXM0T/K1MbfP6u2O7Puo=
Subject key identifier:   9A:E0:42:FA:F1:3A:8A:B7:DC:17:D8:EF:03:E6:09:CC:A1:0F:47:28
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D4A916BB85DB7EE5A40C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3a7560f-9ed3-335e-b871-88e4ea234749.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     397193
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:4a:91:6b:b8:5d:b7:ee:5a:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=56ebdd40-b8a7-4f2b-bc64-c8496da6e2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d5:3f:d3:d2:e7:7c:61:e6:8a:85:93:fd:df:
                    10:a4:a3:8b:a2:18:ec:23:48:9c:ef:94:a3:6d:e8:
                    fd:aa:b1:38:74:e3:3e:48:42:47:cb:e2:97:81:97:
                    35:21:65:72:b4:e1:49:fc:82:f1:49:08:1d:ab:81:
                    62:29:94:47:ed:54:0c:11:54:64:a8:e8:9c:47:e8:
                    7a:b3:45:7c:43:c3:6c:59:2c:e5:57:06:52:fa:dd:
                    a8:26:bd:18:7c:55:34:35:69:1f:5e:d0:61:08:96:
                    85:ce:4f:80:28:a4:b9:b7:af:91:12:eb:84:c6:33:
                    2f:17:34:dc:85:72:30:d4:91:71:8b:1e:86:13:b3:
                    19:26:27:6e:78:96:3b:10:06:60:70:00:9b:54:d7:
                    d9:5c:02:51:45:d5:2f:9a:b8:d4:62:06:a3:ad:50:
                    22:1f:e8:27:29:af:58:5f:f2:62:7b:d8:26:ca:34:
                    80:a7:24:4d:56:67:d4:26:be:fb:b3:d6:12:7d:ba:
                    06:6f:6c:cb:05:c0:9a:aa:d0:73:bd:a0:91:fe:3a:
                    22:38:dc:fd:ba:ef:a2:a4:5f:ef:19:1e:f4:a8:82:
                    8a:76:0f:3f:a0:ab:10:95:ca:51:c9:4f:f5:09:71:
                    a0:cf:9a:65:97:ec:1d:6d:29:94:b3:46:04:d9:3e:
                    5d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:42:FA:F1:3A:8A:B7:DC:17:D8:EF:03:E6:09:CC:A1:0F:47:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3a7560f-9ed3-335e-b871-88e4ea234749.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:e2:ce:17:81:0f:bc:b8:46:e0:6e:41:ee:22:69:2b:30:3a:
         f9:ad:bc:14:82:69:cd:79:69:cc:3c:33:01:c2:3f:f4:7b:5a:
         8b:59:ba:e0:86:4f:15:b6:54:14:44:2c:5c:08:e0:ff:f1:9d:
         3b:8e:f4:9f:c6:22:7d:d1:2c:0c:e5:92:92:d0:8e:7b:3a:df:
         67:2f:23:9b:cb:08:32:36:de:ad:68:df:7a:18:c5:0d:47:2e:
         88:a6:69:4e:7f:69:4e:02:62:2b:4a:a9:b5:a6:3d:09:ea:e5:
         7c:60:94:d5:d7:7b:7c:b9:f8:1a:a9:9c:b3:72:c7:25:6a:e2:
         80:73:d8:11:7d:78:7d:4b:2e:a2:70:07:4f:11:b4:12:e1:75:
         bf:8d:2d:b5:a6:67:63:ef:e0:f6:64:72:e0:95:75:c4:e3:75:
         2a:c0:e4:2d:92:9d:8e:15:85:4c:8f:b7:03:f6:f8:07:36:31:
         53:d9:9f:72:86:6b:a8:1d:e8:a3:9b:2e:bd:a9:06:bb:66:cb:
         e2:5e:7c:60:f0:d5:a5:ef:fd:52:b7:62:c3:3e:36:9c:de:c0:
         a1:71:5b:b9:a1:4e:83:f7:e4:52:55:97:f1:96:98:a4:89:58:
         27:0d:82:ec:38:fe:b3:56:a0:a0:72:e9:bc:a7:bb:36:d4:94:
         89:f4:7a:57
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUqRa7hdt+5aQMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
NTZlYmRkNDAtYjhhNy00ZjJiLWJjNjQtYzg0OTZkYTZlMmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9U/09LnfGHmioWT/d8QpKOLohjsI0ic75Sj
bej9qrE4dOM+SEJHy+KXgZc1IWVytOFJ/ILxSQgdq4FiKZRH7VQMEVRkqOicR+h6
s0V8Q8NsWSzlVwZS+t2oJr0YfFU0NWkfXtBhCJaFzk+AKKS5t6+REuuExjMvFzTc
hXIw1JFxix6GE7MZJidueJY7EAZgcACbVNfZXAJRRdUvmrjUYgajrVAiH+gnKa9Y
X/Jie9gmyjSApyRNVmfUJr77s9YSfboGb2zLBcCaqtBzvaCR/joiONz9uu+ipF/v
GR70qIKKdg8/oKsQlcpRyU/1CXGgz5pll+wdbSmUs0YE2T5dZwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJrgQvrxOoq33BfY7wPmCcyhD0coMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTNhNzU2MGYtOWVkMy0z
MzVlLWI4NzEtODhlNGVhMjM0NzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAg4s4XgQ+8uEbgbkHuImkrMDr5rbwUgmnNeWnM
PDMBwj/0e1qLWbrghk8VtlQURCxcCOD/8Z07jvSfxiJ90SwM5ZKS0I57Ot9nLyOb
ywgyNt6taN96GMUNRy6IpmlOf2lOAmIrSqm1pj0J6uV8YJTV13t8ufgaqZyzcscl
auKAc9gRfXh9Sy6icAdPEbQS4XW/jS21pmdj7+D2ZHLglXXE43UqwOQtkp2OFYVM
j7cD9vgHNjFT2Z9yhmuoHeijmy69qQa7ZsviXnxg8NWl7/1St2LDPjac3sChcVu5
oU6D9+RSVZfxlpikiVgnDYLsOP6zVqCgcum8p7s21JSJ9HpX
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:10:29 2025 by rpki-client