Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18360bb5-757c-332b-b94b-f1779f771899.roa
File:                     18360bb5-757c-332b-b94b-f1779f771899.roa (raw, json)
Hash identifier:          V3g3dlu1jISylcs6nZJB7e40tasH0R+OrfurVv6odn4=
Subject key identifier:   43:59:F2:73:65:D5:AE:A3:E6:5C:F8:AA:02:AD:2E:4D:E0:66:54:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEE17C80A9124CACBB6D6C900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18360bb5-757c-332b-b94b-f1779f771899.roa
Signing time:             Thu 21 Aug 2025 12:31:04 +0000
ROA not before:           Thu 21 Aug 2025 12:31:04 +0000
ROA not after:            Wed 19 Nov 2025 13:31:04 +0000
asID:                     396561
IP address blocks:        2001:502:8cc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:17:c8:0a:91:24:ca:cb:b6:d6:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 21 12:31:04 2025 GMT
            Not After : Nov 19 13:31:04 2025 GMT
        Subject: CN=435e480d-f396-4042-8fa5-b9162e2ee0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:46:38:ce:d3:dd:e7:c2:9f:db:d3:a3:88:
                    ef:4b:52:ed:97:1f:a6:02:dd:94:48:a1:9d:c6:b0:
                    c5:2e:b2:fe:68:a0:78:30:3a:d4:57:a6:f2:17:f5:
                    43:74:f6:78:de:80:50:88:34:09:15:fd:21:62:9a:
                    1a:7f:95:29:d1:6d:5f:66:d6:75:47:7c:09:af:a8:
                    ca:a8:ff:17:8a:4e:8d:a7:ee:a3:a3:23:65:dd:a9:
                    aa:ce:e9:b3:16:80:db:e6:98:84:2f:f1:89:32:fc:
                    e7:e3:ae:be:24:20:c1:b5:43:15:08:67:68:bd:38:
                    21:a1:cf:af:af:4b:4a:49:48:a4:6d:31:6b:36:a6:
                    94:24:99:91:0c:bd:b3:95:93:b2:6c:40:33:79:87:
                    9b:66:43:0f:74:8d:f1:b2:6a:c2:c2:1a:6d:48:3a:
                    59:c9:3f:87:22:e4:1c:dc:26:2b:d9:f8:92:ba:43:
                    a2:28:c0:84:39:46:77:d6:e3:5a:6f:41:11:04:59:
                    07:30:3a:9f:83:43:89:cc:da:64:91:9d:fd:fe:d0:
                    72:b2:2e:8d:68:d2:de:71:ec:4b:de:5e:90:d8:41:
                    ce:05:26:f9:f4:2a:84:31:ed:4b:0b:bb:e7:bd:2f:
                    08:b5:0e:2c:6e:5a:2f:d8:9e:ad:0b:8f:e2:85:fd:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:59:F2:73:65:D5:AE:A3:E6:5C:F8:AA:02:AD:2E:4D:E0:66:54:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18360bb5-757c-332b-b94b-f1779f771899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2f:77:25:3f:e1:37:bf:8e:49:d4:86:a2:c8:00:e2:d4:af:
         63:0c:76:05:67:7d:b2:25:fc:e6:b5:2c:08:c4:37:34:fb:34:
         1a:5b:b6:ce:1e:88:3b:c5:f0:01:82:5f:2d:1f:56:90:63:a8:
         40:fe:64:fd:76:f9:70:eb:b5:05:34:b7:3d:d2:e2:ce:c3:ba:
         e6:a0:bf:39:67:58:cc:cf:48:21:0a:02:45:fe:40:0e:78:34:
         66:1b:69:95:cc:4b:d5:90:2f:41:74:7a:77:be:d0:d0:e4:21:
         d2:7b:61:18:59:18:fc:07:ab:60:6d:d7:40:b8:f9:c5:03:30:
         18:04:65:89:73:2d:1e:f4:79:93:79:2b:28:cb:88:b5:1a:75:
         2a:d1:8c:4f:1c:57:38:da:38:1e:7c:ff:c9:c5:b4:4f:7e:08:
         bb:cb:a1:9c:74:03:5b:3b:4a:db:36:b9:67:cf:58:8d:f2:c2:
         b0:0c:16:33:12:09:3e:ad:3a:68:ba:17:b9:37:71:28:35:27:
         c3:4f:79:86:24:8c:75:5c:8a:7f:c8:a1:0e:15:1b:7d:3c:d6:
         3f:a3:09:a8:62:57:31:d8:8b:e0:24:02:1f:93:6e:70:1f:59:
         9b:d2:4d:b7:ae:e8:4d:b5:ae:d6:7c:ca:53:f6:e6:3b:f9:e9:
         c6:17:3b:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEruF8gKkSTKy7bWyQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMTEyMzEwNFoXDTI1MTExOTEzMzEwNFowLzEtMCsGA1UEAxMk
NDM1ZTQ4MGQtZjM5Ni00MDQyLThmYTUtYjkxNjJlMmVlMGVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys9GOM7T3efCn9vTo4jvS1Ltlx+mAt2USKGd
xrDFLrL+aKB4MDrUV6byF/VDdPZ43oBQiDQJFf0hYpoaf5Up0W1fZtZ1R3wJr6jK
qP8Xik6Np+6joyNl3amqzumzFoDb5piEL/GJMvzn466+JCDBtUMVCGdovTghoc+v
r0tKSUikbTFrNqaUJJmRDL2zlZOybEAzeYebZkMPdI3xsmrCwhptSDpZyT+HIuQc
3CYr2fiSukOiKMCEOUZ31uNab0ERBFkHMDqfg0OJzNpkkZ39/tBysi6NaNLecexL
3l6Q2EHOBSb59CqEMe1LC7vnvS8ItQ4sblov2J6tC4/ihf1koQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFENZ8nNl1a6j5lz4qgKtLk3gZlSDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTgzNjBiYjUtNzU3Yy0z
MzJiLWI5NGItZjE3NzlmNzcxODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF0vdyU/4Te/jknUhqLIAOLUr2MMdgVnfbIl/Oa1LAjENzT7NBpb
ts4eiDvF8AGCXy0fVpBjqED+ZP12+XDrtQU0tz3S4s7DuuagvzlnWMzPSCEKAkX+
QA54NGYbaZXMS9WQL0F0ene+0NDkIdJ7YRhZGPwHq2Bt10C4+cUDMBgEZYlzLR70
eZN5KyjLiLUadSrRjE8cVzjaOB58/8nFtE9+CLvLoZx0A1s7Sts2uWfPWI3ywrAM
FjMSCT6tOmi6F7k3cSg1J8NPeYYkjHVcin/IoQ4VG3081j+jCahiVzHYi+AkAh+T
bnAfWZvSTbeu6E21rtZ8ylP25jv56cYXO88=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:18 2025 by rpki-client