Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2aac561-04f2-3650-bcbe-844d7a9e370f.roa
File:                     c2aac561-04f2-3650-bcbe-844d7a9e370f.roa (raw, json)
Hash identifier:          dAiJ4zYFrvHJ9vqjEeLKGAezsDCItx3idZN0cxgA8EY=
Subject key identifier:   4A:8E:09:20:4F:71:6A:C3:8E:C7:06:3B:04:35:F0:33:56:CF:7F:37
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F4328584B821CC8F1E0AF2530C265E1C0
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2aac561-04f2-3650-bcbe-844d7a9e370f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     11537
IP address blocks:        2001:468:c07::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c8:f1:e0:af:25:30:c2:65:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=b20dd91b-20b2-488d-ab43-132970f8e798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:64:94:49:b0:fb:48:41:d3:0e:c1:67:f1:56:
                    59:ee:dd:a1:8d:63:a5:7d:bd:9c:88:8e:74:f3:b2:
                    0a:42:e2:d4:7c:e7:7b:76:51:dc:ed:c5:0d:52:72:
                    57:41:9e:02:62:3b:79:f6:a9:26:86:3c:39:f6:2e:
                    ec:4a:34:35:fb:ba:10:19:74:80:7b:7c:d1:e0:f9:
                    e7:12:69:13:69:9b:87:54:47:5a:7c:17:cf:18:33:
                    2e:89:b9:9f:f8:14:74:fd:9f:39:ea:ad:f4:bb:5e:
                    e1:42:7c:06:64:d2:31:f8:65:0a:1f:a3:92:ea:c4:
                    45:7f:c6:0b:40:bc:18:b9:f1:3f:ab:0b:d3:0d:0c:
                    15:6f:d6:36:53:9b:17:ef:21:11:03:37:d0:0d:ca:
                    cc:54:6a:31:c1:3b:ad:11:6c:37:83:06:0b:f4:07:
                    d3:78:cf:43:9a:71:10:f3:f4:af:a4:7f:2c:0f:b7:
                    95:98:c8:7f:78:5c:02:96:ba:5b:f4:5d:61:69:f4:
                    26:58:34:35:4d:bd:24:0c:bf:c7:90:53:4f:32:79:
                    da:0d:ed:c3:67:74:8c:67:01:a3:ff:03:14:83:52:
                    f0:0b:62:d7:84:62:b5:ea:84:2b:bf:ec:86:4f:2b:
                    8d:58:30:c7:86:4d:f3:a8:0d:82:32:5e:af:70:d5:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8E:09:20:4F:71:6A:C3:8E:C7:06:3B:04:35:F0:33:56:CF:7F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/c2aac561-04f2-3650-bcbe-844d7a9e370f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:468:c07::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:93:e3:b5:93:8a:7a:96:5e:6a:91:bb:3d:fe:87:51:7b:7a:
         3f:59:72:23:f0:d6:1a:16:b5:f9:b9:24:e5:4f:38:62:63:cf:
         93:22:93:87:d1:e8:a9:90:40:92:36:0c:6b:da:92:43:40:c1:
         79:d8:bc:e6:52:5b:c5:d9:c8:36:6b:70:2d:48:a2:6c:11:5b:
         0b:6a:fd:1b:03:47:9f:ed:8f:52:5d:a0:c4:88:ac:dc:b2:b5:
         72:9c:94:27:0e:fd:cd:53:68:2e:37:bd:99:28:1c:30:2d:46:
         14:8a:ca:c4:65:dc:0f:97:f6:c5:44:7b:4e:e5:e2:fc:cd:70:
         70:f0:bd:08:e8:c3:78:eb:08:8b:18:67:b7:43:22:7c:38:65:
         d3:0c:74:fb:70:1f:81:4b:66:46:8a:44:79:f3:9d:98:2d:a7:
         54:fa:ce:8c:b7:aa:0f:02:a3:cc:2d:4f:f2:78:74:b5:38:da:
         d1:41:50:05:7d:09:6c:ac:6f:52:bc:bb:6d:b4:f6:65:1d:6c:
         8e:7b:d4:d7:49:cb:34:87:61:44:03:5a:fe:23:e5:6a:d6:31:
         fa:b7:4f:fc:90:e6:b4:a0:ce:88:d9:fc:c4:41:f6:f6:9e:7c:
         02:69:80:90:ee:9f:75:02:cf:55:44:44:65:26:0c:b6:fd:4b:
         11:09:fb:a1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuCHMjx4K8lMMJl4cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
YjIwZGQ5MWItMjBiMi00ODhkLWFiNDMtMTMyOTcwZjhlNzk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGSUSbD7SEHTDsFn8VZZ7t2hjWOlfb2ciI50
87IKQuLUfOd7dlHc7cUNUnJXQZ4CYjt59qkmhjw59i7sSjQ1+7oQGXSAe3zR4Pnn
EmkTaZuHVEdafBfPGDMuibmf+BR0/Z856q30u17hQnwGZNIx+GUKH6OS6sRFf8YL
QLwYufE/qwvTDQwVb9Y2U5sX7yERAzfQDcrMVGoxwTutEWw3gwYL9AfTeM9DmnEQ
8/SvpH8sD7eVmMh/eFwClrpb9F1hafQmWDQ1Tb0kDL/HkFNPMnnaDe3DZ3SMZwGj
/wMUg1LwC2LXhGK16oQrv+yGTyuNWDDHhk3zqA2CMl6vcNVAFQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEqOCSBPcWrDjscGOwQ18DNWz383MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvYzJhYWM1NjEtMDRmMi0z
NjUwLWJjYmUtODQ0ZDdhOWUzNzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEaAwH
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEST47WTinqWXmqRuz3+h1F7ej9ZciPw1hoWtfm5JOVPOGJjz5Mi
k4fR6KmQQJI2DGvakkNAwXnYvOZSW8XZyDZrcC1IomwRWwtq/RsDR5/tj1JdoMSI
rNyytXKclCcO/c1TaC43vZkoHDAtRhSKysRl3A+X9sVEe07l4vzNcHDwvQjow3jr
CIsYZ7dDInw4ZdMMdPtwH4FLZkaKRHnznZgtp1T6zoy3qg8Co8wtT/J4dLU42tFB
UAV9CWysb1K8u2209mUdbI571NdJyzSHYUQDWv4j5WrWMfq3T/yQ5rSgzojZ/MRB
9vaefAJpgJDun3UCz1VERGUmDLb9SxEJ+6E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:24:48 2025 by rpki-client