Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/463ed5ee-a0af-3a90-9e8a-725d719ad558.roa
File:                     463ed5ee-a0af-3a90-9e8a-725d719ad558.roa (raw, json)
Hash identifier:          q0dyt700pXHDoWlFkvvr+cc2KDpdGv9SeHrLRGBOHg0=
Subject key identifier:   B9:4A:60:1C:8F:4B:CD:7F:A9:50:6E:FC:C7:7A:92:6F:12:8D:9C:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B52A7867867EBD353B7852000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/463ed5ee-a0af-3a90-9e8a-725d719ad558.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     36620
IP address blocks:        2001:503:ba3e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:86:78:67:eb:d3:53:b7:85:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=be9c2b67-5027-4a30-a900-96df15cfead9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:53:08:52:5b:c9:c6:7f:25:3e:a9:22:b2:1a:
                    07:a2:26:15:09:ef:03:2d:3c:1b:98:9b:65:b5:8b:
                    e1:97:70:fe:c7:9e:6e:3b:2f:f3:01:d6:64:7e:63:
                    79:c5:de:49:fd:87:82:d2:be:e1:2a:68:09:44:da:
                    21:a3:cb:8e:8d:8a:76:4a:5e:a4:31:2c:91:95:06:
                    95:37:b7:14:58:55:f1:0b:19:32:eb:f1:8d:4e:4d:
                    9e:a0:65:f8:40:89:9b:9f:61:41:20:53:71:98:0e:
                    f9:c6:5a:91:cc:2a:c1:f3:ac:5f:95:77:94:cc:7d:
                    e4:82:c6:a2:5f:de:b7:f3:a5:2e:f6:f4:3f:c4:8a:
                    a9:12:3c:1a:37:8d:1b:2e:62:89:04:ee:05:c5:51:
                    3a:e2:0b:d9:fe:9c:97:4e:26:7e:94:8e:ee:42:93:
                    b3:d6:6d:78:18:db:62:6c:a6:5e:e3:04:93:5f:84:
                    9f:fc:aa:92:4f:fc:c4:2f:a5:a5:c7:c3:04:16:a7:
                    35:e6:c0:11:8c:1e:7c:91:88:7a:90:15:ec:2c:f5:
                    2d:a5:11:21:6a:51:8d:21:f3:be:7b:48:0f:9a:79:
                    ac:47:1e:e7:5d:81:b2:46:f8:c7:8e:45:cc:18:ce:
                    fd:e5:7f:1c:5b:94:aa:d0:a2:ff:4c:90:1a:f5:2f:
                    3c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4A:60:1C:8F:4B:CD:7F:A9:50:6E:FC:C7:7A:92:6F:12:8D:9C:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/463ed5ee-a0af-3a90-9e8a-725d719ad558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:ba3e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:86:2a:b2:40:61:35:c2:79:45:c2:10:10:fd:62:b9:98:d0:
         93:0a:5a:70:0c:d5:c9:ed:24:7c:2f:3c:d6:b2:a4:31:04:4f:
         bf:e4:24:d4:1d:d2:94:91:2c:23:6c:95:68:90:b1:3c:f4:5d:
         97:00:cd:03:6e:14:65:9d:37:fd:08:51:15:d1:7a:50:ed:de:
         be:7c:dd:bf:e1:6b:f6:a1:ce:5f:9d:6c:0c:ee:f4:37:b3:82:
         ca:fb:24:27:77:56:51:58:93:14:c7:88:0a:bb:b7:0d:e0:8f:
         2e:f8:ea:fb:90:0e:fd:2a:80:79:0d:7c:9d:2b:b1:de:43:9e:
         97:58:28:28:6d:e2:95:ff:3a:67:c0:69:17:b3:fc:2b:d3:9d:
         7f:32:62:bc:84:cd:dc:e1:3d:f3:4c:da:67:18:4a:65:74:de:
         f9:06:d6:0c:c8:ba:3c:bc:77:35:bb:44:ce:e4:52:24:ea:73:
         b1:c4:d9:b4:db:99:b2:1f:ed:02:fc:4f:eb:ff:45:05:6a:f5:
         3b:1a:49:93:88:3a:ee:c8:e5:6d:fa:50:fb:3e:23:15:39:03:
         26:37:45:80:3d:f7:18:b9:8a:13:99:9d:68:a5:ae:96:8d:4a:
         af:5a:2d:2b:11:1d:49:f0:20:01:e1:02:85:c4:0f:bf:c2:56:
         d7:fd:71:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtSp4Z4Z+vTU7eFIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk
YmU5YzJiNjctNTAyNy00YTMwLWE5MDAtOTZkZjE1Y2ZlYWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVMIUlvJxn8lPqkishoHoiYVCe8DLTwbmJtl
tYvhl3D+x55uOy/zAdZkfmN5xd5J/YeC0r7hKmgJRNoho8uOjYp2Sl6kMSyRlQaV
N7cUWFXxCxky6/GNTk2eoGX4QImbn2FBIFNxmA75xlqRzCrB86xflXeUzH3kgsai
X96386Uu9vQ/xIqpEjwaN40bLmKJBO4FxVE64gvZ/pyXTiZ+lI7uQpOz1m14GNti
bKZe4wSTX4Sf/KqST/zEL6Wlx8MEFqc15sARjB58kYh6kBXsLPUtpREhalGNIfO+
e0gPmnmsRx7nXYGyRvjHjkXMGM795X8cW5Sq0KL/TJAa9S88GQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLlKYByPS81/qVBu/Md6km8SjZw+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDYzZWQ1ZWUtYTBhZi0z
YTkwLTllOGEtNzI1ZDcxOWFkNTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJ+GKrJAYTXCeUXCEBD9YrmY0JMKWnAM1cntJHwvPNaypDEET7/k
JNQd0pSRLCNslWiQsTz0XZcAzQNuFGWdN/0IURXRelDt3r583b/ha/ahzl+dbAzu
9Dezgsr7JCd3VlFYkxTHiAq7tw3gjy746vuQDv0qgHkNfJ0rsd5DnpdYKCht4pX/
OmfAaRez/CvTnX8yYryEzdzhPfNM2mcYSmV03vkG1gzIujy8dzW7RM7kUiTqc7HE
2bTbmbIf7QL8T+v/RQVq9TsaSZOIOu7I5W36UPs+IxU5AyY3RYA99xi5ihOZnWil
rpaNSq9aLSsRHUnwIAHhAoXED7/CVtf9cQk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:36:35 2025 by rpki-client