Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/258d71b9-f760-36ea-90b1-f9035bc9ff71.roa
File:                     258d71b9-f760-36ea-90b1-f9035bc9ff71.roa (raw, json)
Hash identifier:          c9D+AWbz7dvLnuwHCHBKi9n0rrEbaa1rjvvy8cHEWWE=
Subject key identifier:   25:18:3A:1B:C5:A6:5D:3E:89:9F:38:CD:43:05:E7:EE:B4:13:A2:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD49BA77DACDD0B6AAA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/258d71b9-f760-36ea-90b1-f9035bc9ff71.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396737
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d4:9b:a7:7d:ac:dd:0b:6a:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=3c1082ec-9ce4-429f-8d81-586ed67da887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:a6:9b:ef:62:69:d5:29:1a:15:ba:dc:cb:
                    80:07:ef:b2:a9:9d:44:ee:15:5c:76:4c:95:80:e8:
                    b6:97:86:5c:3c:d7:b3:86:8d:7e:2c:15:e8:21:4a:
                    a9:bd:11:e7:fd:aa:e1:f8:47:17:dd:cf:50:f9:41:
                    cb:65:1d:08:5e:ca:6d:46:4b:9c:a0:81:46:0a:52:
                    ff:75:8e:84:c4:77:18:46:b0:27:a4:49:1a:d7:b7:
                    c0:24:68:ca:7f:d2:07:e6:5c:d5:c1:ca:58:63:19:
                    a3:f4:a2:2b:21:b4:ab:30:da:bb:d2:60:d6:7e:dc:
                    65:87:f1:77:9a:b6:5e:67:38:cb:f6:c3:b1:81:a6:
                    c4:b7:c4:3b:2a:0d:a6:a7:77:c1:1f:39:1e:de:7e:
                    cf:58:87:69:c1:0b:da:c8:53:ad:77:03:b8:f1:82:
                    8c:fa:fa:47:6f:52:ee:ff:fa:79:64:9d:f9:b9:ec:
                    b0:3d:a5:bf:15:1a:48:c7:4b:17:f9:33:f4:7b:dc:
                    0b:2e:e9:74:52:fb:56:94:fc:c4:40:69:5b:1a:ed:
                    25:fd:c5:d2:36:86:01:65:76:ba:00:89:a7:95:5d:
                    81:4d:09:fa:39:1d:ac:f0:d7:c3:da:83:b4:45:d6:
                    14:dc:73:a4:18:d7:d7:33:c6:84:3c:bd:7c:1b:7b:
                    fb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:18:3A:1B:C5:A6:5D:3E:89:9F:38:CD:43:05:E7:EE:B4:13:A2:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/258d71b9-f760-36ea-90b1-f9035bc9ff71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:5b:9e:ce:b3:05:ea:a8:8d:7c:3f:aa:cc:9b:d7:1d:2e:9d:
         0b:9e:eb:db:58:3c:a7:e5:24:8f:67:5f:41:5f:02:48:e0:af:
         e3:a6:e8:ce:1e:61:ee:60:1b:1c:12:21:08:da:c9:f6:89:34:
         53:93:cc:1f:26:ca:81:d2:59:37:a1:c1:99:b0:17:f1:e1:e6:
         21:5e:ff:f4:f1:ce:c1:19:9f:12:82:8f:21:d8:f4:97:8a:2f:
         a0:e8:41:8d:52:2b:3c:b2:a9:9a:a6:eb:84:bf:56:a5:0b:fb:
         42:04:c8:fb:06:95:bc:ed:6e:c9:be:a9:e7:20:fa:25:83:71:
         1b:31:a6:55:1c:48:a2:b8:ed:de:51:91:b1:a1:02:6a:28:d9:
         65:01:11:bf:2f:89:8c:8e:97:54:5c:23:82:f0:21:db:e1:c0:
         95:4c:c2:05:3e:ca:8d:2a:85:44:b7:e5:a9:0f:5c:77:56:ec:
         d0:2c:a2:4c:31:c7:08:09:9b:cc:82:57:3c:61:2e:51:4a:8a:
         98:12:a6:17:78:de:ce:75:b3:b4:50:6a:7c:7e:06:08:36:61:
         6c:1d:c4:63:93:00:06:1f:02:74:14:f0:75:ae:b3:b0:29:c8:
         4c:23:4e:5b:bf:d7:d5:76:a4:7d:90:32:2f:31:b1:61:fc:61:
         48:88:4b:a4
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNSbp32s3QtqqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
M2MxMDgyZWMtOWNlNC00MjlmLThkODEtNTg2ZWQ2N2RhODg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4Kmm+9iadUpGhW63MuAB++yqZ1E7hVcdkyV
gOi2l4ZcPNezho1+LBXoIUqpvRHn/arh+EcX3c9Q+UHLZR0IXsptRkucoIFGClL/
dY6ExHcYRrAnpEka17fAJGjKf9IH5lzVwcpYYxmj9KIrIbSrMNq70mDWftxlh/F3
mrZeZzjL9sOxgabEt8Q7Kg2mp3fBHzke3n7PWIdpwQvayFOtdwO48YKM+vpHb1Lu
//p5ZJ35ueywPaW/FRpIx0sX+TP0e9wLLul0UvtWlPzEQGlbGu0l/cXSNoYBZXa6
AImnlV2BTQn6OR2s8NfD2oO0RdYU3HOkGNfXM8aEPL18G3v7qQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCUYOhvFpl0+iZ84zUMF5+60E6J7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjU4ZDcxYjktZjc2MC0z
NmVhLTkwYjEtZjkwMzViYzlmZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJZbns6zBeqojXw/qsyb1x0unQue69tYPKflJI9nX0FfAkjgr+Om
6M4eYe5gGxwSIQjayfaJNFOTzB8myoHSWTehwZmwF/Hh5iFe//TxzsEZnxKCjyHY
9JeKL6DoQY1SKzyyqZqm64S/VqUL+0IEyPsGlbztbsm+qecg+iWDcRsxplUcSKK4
7d5RkbGhAmoo2WUBEb8viYyOl1RcI4LwIdvhwJVMwgU+yo0qhUS35akPXHdW7NAs
okwxxwgJm8yCVzxhLlFKipgSphd43s51s7RQanx+Bgg2YWwdxGOTAAYfAnQU8HWu
s7ApyEwjTlu/19V2pH2QMi8xsWH8YUiIS6Q=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:09:51 2025 by rpki-client