Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49481b46-f735-36ae-84ae-87738cc4c084.roa
File:                     49481b46-f735-36ae-84ae-87738cc4c084.roa (raw, json)
Hash identifier:          yZjSYcLSMgjKmSu8ZqmO1jnB4uFAZ/zyc7Z/xkHJUTY=
Subject key identifier:   E9:6A:45:D2:91:55:F4:6F:59:6E:45:AC:FA:0E:DD:4E:79:2B:A8:9C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC700365740CF5F7BFB6C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49481b46-f735-36ae-84ae-87738cc4c084.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     396566
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:70:03:65:74:0c:f5:f7:bf:b6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=4ade1467-d060-40ff-af89-136ff332627e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:43:cf:68:65:67:0e:14:26:3b:6e:41:69:f9:
                    ec:d8:68:2a:44:79:9e:f7:f7:b0:87:77:4f:49:42:
                    13:1a:3e:dd:20:a3:0a:47:33:40:31:77:2d:d5:cb:
                    1d:ad:92:ec:2c:6e:8b:87:a6:fb:bb:08:f3:be:a5:
                    30:74:f7:85:8f:d2:11:82:d3:69:11:02:d8:a8:79:
                    86:8a:f8:39:55:c8:51:59:b5:82:78:69:9f:6a:5f:
                    51:c4:9f:66:ba:d3:c5:5d:cc:29:d0:4c:29:83:62:
                    68:ab:18:2a:07:14:50:23:14:b3:ef:30:b6:15:a5:
                    68:fa:09:50:7c:a1:cf:66:85:1c:1a:1e:b8:0b:05:
                    bb:7e:17:92:8f:93:f6:47:38:b5:6e:8e:d6:31:7e:
                    39:de:25:f4:f5:70:1d:a2:03:c1:82:a2:3c:48:6b:
                    6b:f6:02:7b:b9:d1:11:4e:09:32:25:6a:f5:e6:88:
                    5a:8c:60:c8:d3:d2:cf:2f:08:ab:41:f1:dd:ac:fd:
                    da:be:37:f9:3d:5f:9e:a8:a3:c9:28:74:8d:b4:2f:
                    db:28:e7:6b:6a:6e:69:60:a5:cd:d6:95:05:82:58:
                    c8:67:1d:f1:5f:0d:9b:8e:4e:f6:67:ae:8f:26:2b:
                    c9:ae:c8:92:e8:a4:80:6b:8a:cb:b4:f6:c6:a1:44:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6A:45:D2:91:55:F4:6F:59:6E:45:AC:FA:0E:DD:4E:79:2B:A8:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/49481b46-f735-36ae-84ae-87738cc4c084.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:37:6a:61:70:16:af:8a:bb:8f:99:22:9f:ee:0e:b7:5a:4f:
         4e:73:90:81:ce:d4:d8:57:9e:16:0b:67:8f:b8:71:5b:5f:86:
         ce:12:db:d2:c5:b9:13:ae:e0:09:bc:c6:3c:37:cf:3e:c2:de:
         32:ca:6f:c4:5e:72:3e:b0:53:f9:12:2d:3a:cd:c3:fe:6e:88:
         d5:37:dc:7c:49:50:4e:14:63:a6:0f:e2:f3:bf:2d:43:ba:b9:
         06:cc:67:ae:4a:a0:1a:59:4e:b6:67:48:e3:80:83:90:4f:bc:
         ae:e6:82:c7:ca:90:14:a3:b2:7e:39:93:8c:33:61:f8:b9:5a:
         3a:ce:98:2e:06:57:46:96:6e:55:ef:04:de:ad:05:77:ac:ae:
         c6:8d:84:58:4c:73:09:8d:61:0f:21:a1:ef:2f:eb:c0:ad:bc:
         fa:35:11:bb:02:23:a4:e2:a6:79:81:35:30:aa:08:db:9b:53:
         9a:26:7f:a5:6c:3f:ed:5b:d3:28:36:9a:fe:cc:9e:76:98:df:
         f0:38:c5:99:f1:39:b5:d3:de:4d:95:ef:b1:6b:32:22:14:60:
         4d:13:b0:7c:a7:90:18:7a:09:b7:e8:0f:57:ff:cc:96:ef:49:
         ba:6c:5d:cd:99:2f:d8:a7:62:36:8e:7d:80:4d:bc:9e:68:c5:
         34:c7:23:f6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrHADZXQM9fe/tsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
NGFkZTE0NjctZDA2MC00MGZmLWFmODktMTM2ZmYzMzI2MjdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUPPaGVnDhQmO25Bafns2GgqRHme9/ewh3dP
SUITGj7dIKMKRzNAMXct1csdrZLsLG6Lh6b7uwjzvqUwdPeFj9IRgtNpEQLYqHmG
ivg5VchRWbWCeGmfal9RxJ9mutPFXcwp0Ewpg2JoqxgqBxRQIxSz7zC2FaVo+glQ
fKHPZoUcGh64CwW7fheSj5P2Rzi1bo7WMX453iX09XAdogPBgqI8SGtr9gJ7udER
TgkyJWr15ohajGDI09LPLwirQfHdrP3avjf5PV+eqKPJKHSNtC/bKOdram5pYKXN
1pUFgljIZx3xXw2bjk72Z66PJivJrsiS6KSAa4rLtPbGoUSt0QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOlqRdKRVfRvWW5FrPoO3U55K6icMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDk0ODFiNDYtZjczNS0z
NmFlLTg0YWUtODc3MzhjYzRjMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAlN2phcBaviruPmSKf7g63Wk9Oc5CBztTYV54W
C2ePuHFbX4bOEtvSxbkTruAJvMY8N88+wt4yym/EXnI+sFP5Ei06zcP+bojVN9x8
SVBOFGOmD+Lzvy1DurkGzGeuSqAaWU62Z0jjgIOQT7yu5oLHypAUo7J+OZOMM2H4
uVo6zpguBldGlm5V7wTerQV3rK7GjYRYTHMJjWEPIaHvL+vArbz6NRG7AiOk4qZ5
gTUwqgjbm1OaJn+lbD/tW9MoNpr+zJ52mN/wOMWZ8Tm1095Nle+xazIiFGBNE7B8
p5AYegm36A9X/8yW70m6bF3NmS/Yp2I2jn2ATbyeaMU0xyP2
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:25:21 2025 by rpki-client