Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa
File:                     3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa (raw, json)
Hash identifier:          HRrTVtHKUUwhIHS40YoHb5qf22T3bSPPnfYMQqBLhok=
Subject key identifier:   F6:60:B1:9F:9F:F7:37:BF:70:53:EA:32:3F:F7:D0:A2:D2:2A:24:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA68439E24BB21B25A02D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396710
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:84:39:e2:4b:b2:1b:25:a0:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=3d7a3b29-1c1d-493d-92f4-da0bd68492dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cf:dd:b5:c2:cf:b3:2a:a5:c2:cd:1a:2e:cd:
                    d6:7b:de:25:65:bd:68:25:f9:e3:6b:60:d9:da:d9:
                    1b:77:37:13:7b:2b:76:ad:de:bb:47:92:2e:7b:7a:
                    24:9f:cc:47:b8:80:26:c4:1b:77:d2:fd:0e:85:4f:
                    ec:3c:7c:bd:b2:fa:ff:8d:92:d9:15:8b:f7:3f:02:
                    58:fa:31:d4:1c:0c:cf:88:e1:7c:24:8b:71:9f:70:
                    91:e1:78:b8:70:59:db:60:dc:91:07:47:7f:93:4a:
                    63:5e:95:c6:f0:31:cb:05:c5:06:4a:64:40:29:aa:
                    d1:3e:5b:f0:ae:3d:a4:6a:84:e0:3e:62:e7:f7:22:
                    32:99:54:79:25:da:d5:73:d3:b0:45:1e:cd:59:05:
                    47:38:1b:b5:89:75:a6:e6:00:38:92:f0:02:bf:bc:
                    94:41:66:e8:15:83:e0:19:4c:03:11:c7:cd:15:7b:
                    6f:e3:2d:d4:2a:3a:fa:fe:af:cc:fb:cf:18:2a:42:
                    70:0f:51:d2:93:07:45:e7:13:e7:23:a5:b7:1d:7f:
                    98:2d:4a:ef:c9:df:56:8d:be:05:82:73:9d:22:1c:
                    77:3c:ec:8f:bf:19:87:b8:5b:e6:7e:78:b1:5e:0c:
                    3d:49:27:53:99:17:1f:fb:00:ef:29:cf:4a:c3:28:
                    6b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:60:B1:9F:9F:F7:37:BF:70:53:EA:32:3F:F7:D0:A2:D2:2A:24:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3d41a0e8-6429-38f2-9bd0-d2a0a00cdc73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:1c:80:34:34:17:52:9d:fa:d1:f5:80:de:ef:51:21:72:a3:
         7d:02:76:fa:6d:e7:6f:fb:9d:0d:f2:cd:8a:14:9b:a8:d8:a7:
         c9:64:41:46:8b:c3:46:8c:77:37:6f:93:6f:55:88:cd:e2:aa:
         0e:31:b8:f2:9d:b6:15:90:96:c7:f1:72:ef:cf:9f:69:4e:da:
         2d:28:45:a3:be:f5:ee:59:9c:9d:92:be:9f:bf:ce:aa:97:ba:
         72:bc:53:47:cb:5e:c8:71:18:5b:f2:81:15:60:aa:a2:d9:a0:
         b5:39:29:7a:4f:5d:7b:43:32:0d:ac:31:f1:b7:5e:61:97:5e:
         7f:48:b6:a4:39:aa:9e:5b:6b:58:10:2c:4b:64:2c:66:09:67:
         46:a8:eb:70:78:d4:fd:c3:6a:19:f2:94:ca:23:a0:0a:3f:8a:
         6d:36:ca:bd:1e:21:68:3c:d9:45:0e:d4:a7:27:bd:e5:3a:da:
         55:bf:ba:f5:f8:d1:da:4c:84:41:42:41:71:8c:d0:68:48:8e:
         5a:a5:a6:43:18:52:81:1f:ca:a5:ad:9f:bd:8e:40:f5:66:69:
         2f:c4:58:ec:e7:ab:77:27:06:a1:ec:7d:0b:b6:c9:17:25:2c:
         64:42:eb:6f:c5:b7:7b:62:39:d1:58:d8:18:1d:7c:94:87:19:
         4f:28:9e:fc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErMpoQ54kuyGyWgLQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk
M2Q3YTNiMjktMWMxZC00OTNkLTkyZjQtZGEwYmQ2ODQ5MmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic/dtcLPsyqlws0aLs3We94lZb1oJfnja2DZ
2tkbdzcTeyt2rd67R5Iue3okn8xHuIAmxBt30v0OhU/sPHy9svr/jZLZFYv3PwJY
+jHUHAzPiOF8JItxn3CR4Xi4cFnbYNyRB0d/k0pjXpXG8DHLBcUGSmRAKarRPlvw
rj2kaoTgPmLn9yIymVR5JdrVc9OwRR7NWQVHOBu1iXWm5gA4kvACv7yUQWboFYPg
GUwDEcfNFXtv4y3UKjr6/q/M+88YKkJwD1HSkwdF5xPnI6W3HX+YLUrvyd9Wjb4F
gnOdIhx3POyPvxmHuFvmfnixXgw9SSdTmRcf+wDvKc9KwyhrRQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPZgsZ+f9ze/cFPqMj/30KLSKiQ3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Q0MWEwZTgtNjQyOS0z
OGYyLTliZDAtZDJhMGEwMGNkYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEYcgDQ0F1Kd+tH1gN7vUSFyo30Cdvpt52/7nQ3yzYoUm6jYp8lk
QUaLw0aMdzdvk29ViM3iqg4xuPKdthWQlsfxcu/Pn2lO2i0oRaO+9e5ZnJ2Svp+/
zqqXunK8U0fLXshxGFvygRVgqqLZoLU5KXpPXXtDMg2sMfG3XmGXXn9ItqQ5qp5b
a1gQLEtkLGYJZ0ao63B41P3DahnylMojoAo/im02yr0eIWg82UUO1KcnveU62lW/
uvX40dpMhEFCQXGM0GhIjlqlpkMYUoEfyqWtn72OQPVmaS/EWOznq3cnBqHsfQu2
yRclLGRC62/Ft3tiOdFY2BgdfJSHGU8onvw=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:48:01 2025 by rpki-client