Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/210d4d14-2a06-3f69-b6aa-fef29ada604f.roa
File:                     210d4d14-2a06-3f69-b6aa-fef29ada604f.roa (raw, json)
Hash identifier:          I37SQBHT1tk9VM2cCC/mEEmt12jqcsxvOEmITdA5ldg=
Subject key identifier:   25:97:F2:96:2C:88:41:A5:07:7D:80:DE:11:76:6C:F7:FC:4C:92:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2CF7129DF1510F5832CA0980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/210d4d14-2a06-3f69-b6aa-fef29ada604f.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     396563
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:12:9d:f1:51:0f:58:32:ca:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=0d5befd4-be4f-473b-8f1a-e171314c6753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f2:c7:c9:df:f4:37:e5:c5:4c:2b:a8:da:d4:
                    40:77:a7:14:bf:3b:9b:4e:4b:e7:62:96:5d:80:9e:
                    3e:14:df:ae:ff:c0:dd:d7:fa:01:f6:9a:50:f2:aa:
                    e7:42:20:1a:8c:bc:dc:8d:c9:1b:c3:a5:76:b4:67:
                    b6:72:eb:8e:30:07:c8:9b:66:e5:bd:52:ef:2e:23:
                    0d:e9:43:99:46:0e:2b:c3:13:61:df:d5:ec:01:57:
                    a7:95:85:9d:a0:08:1f:f7:6d:37:2e:f4:99:16:9b:
                    8c:6f:dc:4d:3a:73:05:3d:62:3b:a8:7c:ba:b7:ba:
                    5c:18:9b:ed:f9:89:f5:05:9d:1d:d2:f2:55:8d:aa:
                    64:74:20:0d:f5:77:cb:78:10:b6:97:4d:df:0f:2e:
                    3e:5a:ec:29:4c:bb:0c:f3:e4:f1:c5:82:ae:95:50:
                    c4:93:2f:07:43:c8:f4:5e:5f:1e:f7:bc:70:50:5e:
                    c4:66:45:02:53:a8:7e:f2:f6:9a:56:fa:52:1c:5f:
                    7b:d5:4a:71:c4:0c:a4:34:d5:06:a2:0d:02:5a:9e:
                    97:c3:ea:53:86:12:4a:f5:ea:5d:4b:b3:87:dd:a4:
                    aa:3c:17:39:be:09:45:f2:6e:a1:e4:f6:36:8b:b7:
                    28:de:56:92:a9:94:ff:28:62:43:6b:cc:e5:93:7f:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:97:F2:96:2C:88:41:A5:07:7D:80:DE:11:76:6C:F7:FC:4C:92:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/210d4d14-2a06-3f69-b6aa-fef29ada604f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:1e:ab:df:f0:11:48:fc:29:38:2e:9f:ea:cd:1a:6a:f9:45:
         12:51:cd:c1:90:d8:6b:bd:6a:69:c4:5c:33:fc:9f:35:7e:e1:
         e4:7c:71:b3:c3:52:62:dd:eb:5e:b9:bb:c3:c9:5d:c6:81:57:
         4b:40:08:21:a5:9e:a1:dc:57:cf:12:be:9e:e9:b9:f8:16:c8:
         91:3d:1d:f7:e6:88:52:38:6d:d6:97:58:73:17:d8:e0:43:39:
         a7:cd:1d:8d:57:7c:3c:0d:76:b4:0f:84:02:1d:66:ad:fb:69:
         0b:fe:94:30:2f:8f:1f:6c:7e:44:44:c8:79:6b:2f:31:c6:f6:
         27:39:d6:8d:76:b2:dc:33:62:83:4b:f6:4e:97:c7:9f:81:37:
         9d:65:70:cc:73:8f:98:98:60:b7:2a:32:5f:37:b8:f7:fa:e8:
         20:33:00:3a:5f:d9:25:ee:2b:7e:aa:bf:e2:0b:09:eb:c5:98:
         1a:bb:74:d0:21:b2:c7:d1:e2:25:92:b6:7a:30:71:b9:40:ac:
         08:41:ef:5b:0a:b3:ed:73:f2:b2:56:09:79:7f:ae:8f:52:21:
         60:78:ee:a3:e7:72:39:15:7b:7a:18:70:ef:b6:90:5c:4d:a5:
         35:be:e7:71:90:9b:7f:fe:0b:a3:7c:39:a6:fb:e3:7a:f7:62:
         a7:87:39:c9
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEss9xKd8VEPWDLKCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk
MGQ1YmVmZDQtYmU0Zi00NzNiLThmMWEtZTE3MTMxNGM2NzUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfLHyd/0N+XFTCuo2tRAd6cUvzubTkvnYpZd
gJ4+FN+u/8Dd1/oB9ppQ8qrnQiAajLzcjckbw6V2tGe2cuuOMAfIm2blvVLvLiMN
6UOZRg4rwxNh39XsAVenlYWdoAgf9203LvSZFpuMb9xNOnMFPWI7qHy6t7pcGJvt
+Yn1BZ0d0vJVjapkdCAN9XfLeBC2l03fDy4+WuwpTLsM8+TxxYKulVDEky8HQ8j0
Xl8e97xwUF7EZkUCU6h+8vaaVvpSHF971UpxxAykNNUGog0CWp6Xw+pThhJK9epd
S7OH3aSqPBc5vglF8m6h5PY2i7co3laSqZT/KGJDa8zlk3+ydQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCWX8pYsiEGlB32A3hF2bPf8TJIrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjEwZDRkMTQtMmEwNi0z
ZjY5LWI2YWEtZmVmMjlhZGE2MDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQByHqvf8BFI/Ck4Lp/qzRpq+UUSUc3BkNhrvWpp
xFwz/J81fuHkfHGzw1Ji3eteubvDyV3GgVdLQAghpZ6h3FfPEr6e6bn4FsiRPR33
5ohSOG3Wl1hzF9jgQzmnzR2NV3w8DXa0D4QCHWat+2kL/pQwL48fbH5ERMh5ay8x
xvYnOdaNdrLcM2KDS/ZOl8efgTedZXDMc4+YmGC3KjJfN7j3+uggMwA6X9kl7it+
qr/iCwnrxZgau3TQIbLH0eIlkrZ6MHG5QKwIQe9bCrPtc/KyVgl5f66PUiFgeO6j
53I5FXt6GHDvtpBcTaU1vudxkJt//gujfDmm++N692KnhznJ
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:24:35 2025 by rpki-client