Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/270046d2-1ace-34d7-99a9-f767dd9b546e.roa
File:                     270046d2-1ace-34d7-99a9-f767dd9b546e.roa (raw, json)
Hash identifier:          sVd7EtbvbsqrhqunCyyHL/tGPGnRw9ZdqV+8UMvHjx4=
Subject key identifier:   72:20:3C:B3:A6:AE:BE:D3:C5:28:9D:84:D5:58:DF:37:6B:2C:AA:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD9CC50173133A23A97D0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/270046d2-1ace-34d7-99a9-f767dd9b546e.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     397205
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d9:cc:50:17:31:33:a2:3a:97:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=fd049f16-3923-4993-876e-4aab59e6c7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:1f:6b:2d:28:00:39:e4:6b:77:a8:09:80:
                    52:aa:cb:26:73:09:b7:1b:1e:d9:cd:0e:b8:90:d7:
                    ec:c6:c7:79:21:9f:7a:75:9f:0c:f3:32:f1:01:d7:
                    a0:db:52:09:8a:6a:c0:e9:16:85:37:da:b5:65:e0:
                    7f:7d:75:8e:b9:9c:50:38:5d:01:a2:d3:74:7d:72:
                    1a:11:e4:80:d4:2a:5b:c5:29:e4:96:60:2c:9a:26:
                    8d:47:66:f6:61:16:32:fe:04:d4:93:17:da:89:b5:
                    8a:f2:f7:65:6e:ac:46:c0:21:10:b1:9d:e6:55:d9:
                    1a:91:2d:03:75:57:5f:16:75:10:17:50:f9:7b:0b:
                    c3:05:86:28:e0:9f:71:d2:c3:d4:75:58:15:32:0c:
                    61:02:a7:28:b7:ca:15:0e:74:c6:d5:f7:62:c2:e9:
                    5e:ae:13:a2:db:97:6c:c7:c3:95:06:18:3b:b6:e6:
                    69:f0:fd:b3:c8:74:34:dd:44:e9:07:0e:cd:5e:59:
                    11:3b:d8:9d:6c:55:3f:1f:e2:74:0d:55:ec:4c:c2:
                    55:3c:73:30:f2:88:2e:1f:96:ed:9d:29:43:37:e9:
                    63:d6:2c:1a:68:31:36:22:bc:2e:a5:70:34:2a:5f:
                    5e:8b:4f:d6:a0:66:8f:aa:72:5f:d6:1d:b3:22:1b:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:20:3C:B3:A6:AE:BE:D3:C5:28:9D:84:D5:58:DF:37:6B:2C:AA:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/270046d2-1ace-34d7-99a9-f767dd9b546e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0c:df:cc:44:14:c2:7b:2b:a0:d4:e9:63:13:93:a4:62:d4:
         86:8d:30:40:19:48:e6:89:c3:dd:81:5c:91:5a:44:24:0d:bd:
         2b:96:ff:5a:54:91:4f:56:d4:de:9a:03:18:0f:da:69:20:4b:
         2c:49:5c:12:d3:00:db:d0:e4:67:d2:f9:18:50:82:1d:2a:34:
         38:8b:6f:e8:11:97:8a:7e:62:6a:5b:4b:15:dd:8b:9b:da:a9:
         19:40:81:17:27:67:ba:5c:38:a3:bd:d1:53:e2:06:a6:b3:cb:
         dc:fc:24:09:95:bf:dc:a9:40:99:10:89:2a:b9:f6:04:3c:22:
         c4:02:b8:20:35:3f:61:c1:2d:70:27:fb:ce:c5:55:47:d0:79:
         40:42:49:21:8f:ec:ac:6b:b9:29:20:d6:64:94:a9:d3:03:57:
         d3:97:4d:61:69:f4:d9:4e:bc:aa:6a:42:1c:46:ae:52:a0:93:
         e5:5a:d6:7f:00:4c:fc:49:55:c3:9a:b8:11:71:bb:f0:28:25:
         77:ba:84:0d:91:84:79:dc:f4:ff:52:bb:db:fa:59:af:2b:50:
         f0:63:a1:3c:4e:63:6b:b1:1a:81:4c:39:91:4e:fa:79:f0:95:
         dc:e5:8b:f3:bd:ed:36:23:85:22:dd:be:3a:5d:45:56:5d:3d:
         74:f2:3e:13
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNnMUBcxM6I6l9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
ZmQwNDlmMTYtMzkyMy00OTkzLTg3NmUtNGFhYjU5ZTZjN2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosYfay0oADnka3eoCYBSqssmcwm3Gx7ZzQ64
kNfsxsd5IZ96dZ8M8zLxAdeg21IJimrA6RaFN9q1ZeB/fXWOuZxQOF0BotN0fXIa
EeSA1CpbxSnklmAsmiaNR2b2YRYy/gTUkxfaibWK8vdlbqxGwCEQsZ3mVdkakS0D
dVdfFnUQF1D5ewvDBYYo4J9x0sPUdVgVMgxhAqcot8oVDnTG1fdiwulerhOi25ds
x8OVBhg7tuZp8P2zyHQ03UTpBw7NXlkRO9idbFU/H+J0DVXsTMJVPHMw8oguH5bt
nSlDN+lj1iwaaDE2IrwupXA0Kl9ei0/WoGaPqnJf1h2zIhsgCwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHIgPLOmrr7TxSidhNVY3zdrLKpwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjcwMDQ2ZDItMWFjZS0z
NGQ3LTk5YTktZjc2N2RkOWI1NDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJEM38xEFMJ7K6DU6WMTk6Ri1IaNMEAZSOaJw92BXJFaRCQNvSuW
/1pUkU9W1N6aAxgP2mkgSyxJXBLTANvQ5GfS+RhQgh0qNDiLb+gRl4p+YmpbSxXd
i5vaqRlAgRcnZ7pcOKO90VPiBqazy9z8JAmVv9ypQJkQiSq59gQ8IsQCuCA1P2HB
LXAn+87FVUfQeUBCSSGP7KxruSkg1mSUqdMDV9OXTWFp9NlOvKpqQhxGrlKgk+Va
1n8ATPxJVcOauBFxu/AoJXe6hA2RhHnc9P9Su9v6Wa8rUPBjoTxOY2uxGoFMOZFO
+nnwldzli/O97TYjhSLdvjpdRVZdPXTyPhM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:15:26 2025 by rpki-client