Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e700031-cf4f-3e71-b1e3-17b5ba584d14.roa
File:                     2e700031-cf4f-3e71-b1e3-17b5ba584d14.roa (raw, json)
Hash identifier:          GJgiTnatp5JFFBcEnILdGkkejarUBr6NOu3prhIddws=
Subject key identifier:   2C:B4:45:DF:54:1F:83:B1:D6:E9:02:D0:8C:89:85:80:DC:61:1F:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC6BFAB7F5B60A3145CF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e700031-cf4f-3e71-b1e3-17b5ba584d14.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     397193
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:6b:fa:b7:f5:b6:0a:31:45:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=d88c686a-c0ff-4990-b547-10d011dff341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a2:dd:76:10:a3:41:ad:54:4a:20:0e:c8:5b:
                    d2:cb:4f:c1:f7:d1:a3:ae:e5:6f:9c:d0:b0:95:d3:
                    ee:bc:e4:8b:bd:19:eb:25:f8:16:8b:b5:4c:8d:f8:
                    55:aa:e0:01:19:e9:03:6f:0f:7f:ab:78:0b:88:1f:
                    21:28:01:04:41:3c:e5:bf:a6:ab:69:84:8e:1a:aa:
                    12:b5:8c:f0:94:78:fb:4f:b9:03:a9:51:fe:67:82:
                    ed:62:3c:c3:27:d3:a9:40:42:0c:ee:72:dc:96:da:
                    cb:9b:07:bb:90:08:60:af:42:ad:6b:78:b1:70:f0:
                    aa:7e:5f:c2:85:27:db:da:77:bd:14:1b:20:31:b4:
                    56:a0:c4:08:19:c1:7e:19:ba:30:29:67:83:44:33:
                    69:5e:8b:a2:a5:11:63:00:07:78:6d:c2:c9:0d:fa:
                    5a:1d:1d:ef:85:42:a5:f2:02:4a:3a:c9:37:00:f5:
                    a1:b6:f6:89:0f:18:45:8e:68:4d:c5:9b:2b:87:96:
                    9d:49:73:39:bd:96:15:b3:8f:72:8b:95:1c:7f:f2:
                    61:b8:9c:6b:6c:2d:e7:f0:5f:4c:84:91:a7:94:5d:
                    ac:ef:ca:98:2a:14:ab:dd:97:62:57:24:b7:99:8d:
                    3c:7b:89:43:73:35:51:b1:8f:c6:e5:4f:74:55:a9:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B4:45:DF:54:1F:83:B1:D6:E9:02:D0:8C:89:85:80:DC:61:1F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e700031-cf4f-3e71-b1e3-17b5ba584d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9c:58:bd:5a:71:f3:a2:c8:5c:66:49:0e:a2:3e:92:6a:d3:
         29:89:28:9d:da:ff:43:f6:56:2e:92:19:5a:79:35:ff:b2:08:
         12:52:c2:7c:b6:3f:5d:ea:6b:bc:2a:12:04:06:ef:80:d0:7c:
         2d:d4:f2:70:e2:99:1b:a1:91:de:39:4a:9c:08:73:8b:1f:18:
         fe:87:62:3a:54:93:df:bc:4d:62:3a:66:8c:56:79:8d:2a:d0:
         b0:01:0b:3b:5d:4f:f7:75:3b:65:3b:1d:bb:0d:d0:c5:3d:ad:
         12:ab:79:70:f6:b1:5e:c1:8a:7d:77:07:09:44:c2:41:d0:0c:
         8e:57:a6:eb:0b:81:e9:82:71:8a:0c:16:e1:aa:93:3f:66:61:
         5c:e1:40:df:57:f0:98:e3:af:b4:ae:32:1a:8a:56:6e:12:dd:
         f3:f4:5d:6b:4b:73:fb:72:31:a9:cf:96:c9:6d:65:dc:7b:19:
         db:05:a2:02:61:99:5f:05:45:4b:6a:dd:1e:a5:a7:2f:21:8f:
         40:a3:79:e6:52:41:bf:b2:da:ee:cc:ca:48:7d:05:4c:da:96:
         f9:ab:fd:d2:fa:8d:1b:90:ee:ab:33:6d:9f:b0:58:6a:42:f9:
         b0:6e:c4:b7:12:53:25:5b:af:e5:ba:a3:43:86:67:a5:3f:74:
         34:b0:a7:6c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrGv6t/W2CjFFzwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
ZDg4YzY4NmEtYzBmZi00OTkwLWI1NDctMTBkMDExZGZmMzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqLddhCjQa1USiAOyFvSy0/B99GjruVvnNCw
ldPuvOSLvRnrJfgWi7VMjfhVquABGekDbw9/q3gLiB8hKAEEQTzlv6araYSOGqoS
tYzwlHj7T7kDqVH+Z4LtYjzDJ9OpQEIM7nLcltrLmwe7kAhgr0Kta3ixcPCqfl/C
hSfb2ne9FBsgMbRWoMQIGcF+GbowKWeDRDNpXouipRFjAAd4bcLJDfpaHR3vhUKl
8gJKOsk3APWhtvaJDxhFjmhNxZsrh5adSXM5vZYVs49yi5Ucf/JhuJxrbC3n8F9M
hJGnlF2s78qYKhSr3ZdiVyS3mY08e4lDczVRsY/G5U90VanfGQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCy0Rd9UH4Ox1ukC0IyJhYDcYR/rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmU3MDAwMzEtY2Y0Zi0z
ZTcxLWIxZTMtMTdiNWJhNTg0ZDE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAFnFi9WnHzoshcZkkOoj6SatMpiSid2v9D9lYu
khlaeTX/sggSUsJ8tj9d6mu8KhIEBu+A0Hwt1PJw4pkboZHeOUqcCHOLHxj+h2I6
VJPfvE1iOmaMVnmNKtCwAQs7XU/3dTtlOx27DdDFPa0Sq3lw9rFewYp9dwcJRMJB
0AyOV6brC4HpgnGKDBbhqpM/ZmFc4UDfV/CY46+0rjIailZuEt3z9F1rS3P7cjGp
z5bJbWXcexnbBaICYZlfBUVLat0epacvIY9Ao3nmUkG/struzMpIfQVM2pb5q/3S
+o0bkO6rM22fsFhqQvmwbsS3ElMlW6/luqNDhmelP3Q0sKds
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:12:50 2025 by rpki-client