Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e4e388a-7493-34d6-bd14-c0fbce3adf8f.roa
File:                     0e4e388a-7493-34d6-bd14-c0fbce3adf8f.roa (raw, json)
Hash identifier:          3U+k2z0bBEJaaLKjOsYGiTZ3k6rBFTqa/FAL77gozMs=
Subject key identifier:   EE:F9:79:6E:F5:6D:CB:01:2B:C3:09:FD:1A:B1:54:DE:77:0D:D5:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2CF715100D8D5FC4B5739380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e4e388a-7493-34d6-bd14-c0fbce3adf8f.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     396562
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:15:10:0d:8d:5f:c4:b5:73:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=a075fb53-bc4c-4f5d-8a90-8fb1caead561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:94:6a:ab:4a:0b:61:2e:2f:f8:ae:f2:4a:
                    a8:12:73:e6:b5:ae:18:30:8a:7f:92:a3:98:26:5d:
                    f7:95:e1:4e:8b:26:b4:8f:e3:89:7f:e7:f5:66:f8:
                    77:80:41:a6:e4:51:5f:d2:72:20:01:24:85:f8:ed:
                    fa:52:1a:07:6a:d6:a8:40:8c:44:f0:08:42:c3:19:
                    33:9b:88:ca:18:eb:6e:16:76:f5:fd:8e:44:a2:44:
                    f5:37:91:4b:c9:17:2a:5b:42:75:04:80:d3:80:02:
                    44:a1:41:b5:06:e7:79:a3:67:fd:20:09:0e:b7:13:
                    30:4f:dc:fb:4e:a2:c1:1f:78:2e:2d:e3:aa:e3:4d:
                    24:12:c8:be:5d:b1:cb:fa:25:fe:35:f3:1c:8d:a2:
                    b0:99:18:6c:13:b1:c5:52:19:51:8d:35:b3:70:c5:
                    1d:2d:31:f5:dd:be:b6:61:5e:68:3b:40:9e:ed:84:
                    7d:b0:85:a2:71:fa:fb:84:6b:e5:d0:0a:b0:ad:bb:
                    6f:b3:e0:42:e1:32:3f:fb:b1:aa:46:6d:47:f9:ac:
                    5f:64:85:72:06:df:e8:c0:1c:c1:7a:ab:f9:3b:ca:
                    af:03:c3:47:3b:56:a6:1e:8b:db:33:5a:12:bf:14:
                    f1:63:24:fc:1a:bc:ab:6a:aa:97:39:9b:3c:c4:b4:
                    cf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F9:79:6E:F5:6D:CB:01:2B:C3:09:FD:1A:B1:54:DE:77:0D:D5:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0e4e388a-7493-34d6-bd14-c0fbce3adf8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:57:d1:54:13:8e:1d:f2:b9:10:b6:6f:f4:ee:3a:46:fc:23:
         06:fc:44:1d:03:e0:bc:54:df:12:85:88:d4:45:8f:9d:f5:23:
         ed:af:d3:99:d1:e4:d0:48:26:ff:f3:e3:15:30:88:b1:a5:2f:
         08:e0:61:f6:e8:b2:cd:96:3f:e1:d2:f6:75:05:98:8c:f1:98:
         1a:18:d3:85:8d:a7:6f:5f:eb:11:66:f6:a7:c4:ee:45:3f:38:
         7b:4b:1b:2f:63:db:bb:84:37:6a:a6:45:a2:8d:43:8c:21:9f:
         b4:60:62:80:67:cd:91:12:b4:10:db:1a:00:1c:41:50:a1:60:
         b8:41:68:3f:14:85:3c:13:44:ab:88:a3:6e:eb:bd:c2:6a:13:
         1e:2c:d0:fe:2d:b0:d7:35:7a:b8:64:3d:df:73:8c:a5:bf:4b:
         fe:9c:63:1a:12:ef:db:40:78:24:07:9a:ed:c4:1d:c4:17:6e:
         3e:f8:81:b3:56:18:9a:f0:83:2f:be:2e:9a:e6:6a:95:40:e8:
         99:2d:90:1c:e8:01:8e:23:55:8e:b6:ae:19:bf:22:b0:83:42:
         20:50:c3:25:7f:90:b1:97:cb:16:a4:f6:3d:2e:46:f9:4a:76:
         8d:24:dc:4c:59:9d:2b:d9:a8:f3:9a:2c:87:bb:9a:34:04:4a:
         30:8e:4a:c0
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEss9xUQDY1fxLVzk4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk
YTA3NWZiNTMtYmM0Yy00ZjVkLThhOTAtOGZiMWNhZWFkNTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs2UaqtKC2EuL/iu8kqoEnPmta4YMIp/kqOY
Jl33leFOiya0j+OJf+f1Zvh3gEGm5FFf0nIgASSF+O36UhoHataoQIxE8AhCwxkz
m4jKGOtuFnb1/Y5EokT1N5FLyRcqW0J1BIDTgAJEoUG1Bud5o2f9IAkOtxMwT9z7
TqLBH3guLeOq400kEsi+XbHL+iX+NfMcjaKwmRhsE7HFUhlRjTWzcMUdLTH13b62
YV5oO0Ce7YR9sIWicfr7hGvl0Aqwrbtvs+BC4TI/+7GqRm1H+axfZIVyBt/owBzB
eqv5O8qvA8NHO1amHovbM1oSvxTxYyT8GryraqqXOZs8xLTPwwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFO75eW71bcsBK8MJ/RqxVN53DdX9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGU0ZTM4OGEtNzQ5My0z
NGQ2LWJkMTQtYzBmYmNlM2FkZjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBSV9FUE44d8rkQtm/07jpG/CMG/EQdA+C8VN8S
hYjURY+d9SPtr9OZ0eTQSCb/8+MVMIixpS8I4GH26LLNlj/h0vZ1BZiM8ZgaGNOF
jadvX+sRZvanxO5FPzh7SxsvY9u7hDdqpkWijUOMIZ+0YGKAZ82RErQQ2xoAHEFQ
oWC4QWg/FIU8E0SriKNu673CahMeLND+LbDXNXq4ZD3fc4ylv0v+nGMaEu/bQHgk
B5rtxB3EF24++IGzVhia8IMvvi6a5mqVQOiZLZAc6AGOI1WOtq4ZvyKwg0IgUMMl
f5Cxl8sWpPY9Lkb5SnaNJNxMWZ0r2ajzmiyHu5o0BEowjkrA
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:46:53 2025 by rpki-client