Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28af308b-f981-38a8-9259-54549363d62d.roa
File:                     28af308b-f981-38a8-9259-54549363d62d.roa (raw, json)
Hash identifier:          Xx3jZSJQr5REcPUgTFnRLbmDyenayegBiRCCJGaP0o4=
Subject key identifier:   5E:20:CE:D9:4C:7A:50:57:AE:3F:23:6C:AC:86:EA:52:B2:D6:1B:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCD699327569B45A07D900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28af308b-f981-38a8-9259-54549363d62d.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     40717
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:d6:99:32:75:69:b4:5a:07:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=ea802adb-14a7-4051-8100-bacd643111ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:ea:d9:70:f4:1e:55:91:b6:c8:51:84:fc:
                    98:c3:7d:85:0b:ff:7c:94:7e:bb:ad:3d:a6:52:96:
                    21:11:a3:01:62:6a:48:30:71:f4:d0:0e:a9:ce:a9:
                    34:46:ae:06:89:7c:95:fc:ff:18:41:27:37:83:3f:
                    fb:05:0e:fd:34:f3:f1:5a:87:e7:6b:4e:91:2f:8a:
                    e2:9d:7d:2c:53:0c:94:60:1a:99:cd:b6:67:99:4e:
                    cc:20:8d:f6:17:cd:e1:9f:dc:35:f3:62:37:30:ce:
                    24:d2:c8:2b:25:87:9d:8b:cc:35:4c:c2:4b:ec:2d:
                    3d:9e:76:fc:71:03:0a:5f:d0:7f:51:bb:42:50:7d:
                    07:d7:4c:9d:65:2f:57:9f:14:d2:2f:77:81:15:f7:
                    b7:99:08:a5:53:93:93:62:b1:4b:6e:87:bb:98:28:
                    7c:7f:32:2d:2b:ee:d3:64:30:c6:0c:42:df:09:d6:
                    5e:7b:4a:7a:84:b3:51:9a:04:8c:cf:4f:a2:f3:bf:
                    92:4a:2c:78:90:87:1f:0f:c3:10:8f:07:f6:df:e5:
                    1a:b7:aa:b7:c6:9d:c7:1c:a3:d2:3b:5d:6c:95:41:
                    5e:dd:93:aa:e0:c1:6f:65:ff:0f:d1:c1:29:e6:04:
                    26:eb:87:1a:b0:59:97:f0:ac:b8:25:2b:49:6b:ef:
                    15:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:20:CE:D9:4C:7A:50:57:AE:3F:23:6C:AC:86:EA:52:B2:D6:1B:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28af308b-f981-38a8-9259-54549363d62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:44:e7:67:64:ed:ff:15:2c:ac:25:cc:e6:0c:93:84:10:06:
         71:51:de:5e:f4:e7:86:c5:15:70:b3:15:20:45:25:fa:4a:ea:
         54:5f:6c:7d:52:ad:a9:6d:49:ac:d2:c4:b2:8c:87:20:cc:fe:
         df:eb:d3:24:ba:52:2e:ba:68:b7:e4:35:a8:7c:71:ca:fb:28:
         4a:1a:3e:71:d1:0e:a4:c6:0d:6d:73:c4:15:84:7f:6c:e5:02:
         dd:84:6b:25:dd:41:a2:73:e7:94:7a:dd:7d:d9:05:8a:26:c7:
         a5:8d:6e:82:ef:8e:d3:76:44:b2:e2:c0:39:8b:d1:a6:84:ac:
         2a:ab:e2:6d:35:42:ed:7f:ee:50:7c:ec:00:79:b3:8c:c2:5a:
         3e:0d:fe:6b:41:73:2f:85:32:84:5e:13:45:b2:b4:5c:0d:a1:
         d0:c1:a0:db:8b:14:82:5d:ca:44:45:a1:b6:fa:a8:b8:0f:8a:
         f4:47:95:7b:11:c5:72:ad:c0:c4:42:8d:35:e6:e0:11:ef:b6:
         d7:79:9c:9f:23:7b:81:42:3e:cd:af:25:ec:c8:52:09:63:21:
         e3:35:ef:11:7e:ac:23:bd:56:2f:b6:fe:ee:30:32:d8:6a:4c:
         7a:26:2e:7e:b0:0a:d9:8d:7d:75:be:21:78:82:68:68:b3:d1:
         2b:88:e0:19
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vNaZMnVptFoH2QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
ZWE4MDJhZGItMTRhNy00MDUxLTgxMDAtYmFjZDY0MzExMWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mbq2XD0HlWRtshRhPyYw32FC/98lH67rT2m
UpYhEaMBYmpIMHH00A6pzqk0Rq4GiXyV/P8YQSc3gz/7BQ79NPPxWofna06RL4ri
nX0sUwyUYBqZzbZnmU7MII32F83hn9w182I3MM4k0sgrJYedi8w1TMJL7C09nnb8
cQMKX9B/UbtCUH0H10ydZS9XnxTSL3eBFfe3mQilU5OTYrFLboe7mCh8fzItK+7T
ZDDGDELfCdZee0p6hLNRmgSMz0+i87+SSix4kIcfD8MQjwf23+Uat6q3xp3HHKPS
O11slUFe3ZOq4MFvZf8P0cEp5gQm64casFmX8Ky4JStJa+8VxwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFF4gztlMelBXrj8jbKyG6lKy1huEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjhhZjMwOGItZjk4MS0z
OGE4LTkyNTktNTQ1NDkzNjNkNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKtE52dk7f8VLKwlzOYMk4QQBnFR3l7054bFFXCzFSBFJfpK6lRf
bH1SraltSazSxLKMhyDM/t/r0yS6Ui66aLfkNah8ccr7KEoaPnHRDqTGDW1zxBWE
f2zlAt2EayXdQaJz55R63X3ZBYomx6WNboLvjtN2RLLiwDmL0aaErCqr4m01Qu1/
7lB87AB5s4zCWj4N/mtBcy+FMoReE0WytFwNodDBoNuLFIJdykRFobb6qLgPivRH
lXsRxXKtwMRCjTXm4BHvttd5nJ8je4FCPs2vJezIUgljIeM17xF+rCO9Vi+2/u4w
MthqTHomLn6wCtmNfXW+IXiCaGiz0SuI4Bk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:33:53 2025 by rpki-client