Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c8075f0-09dc-31e0-b215-681e44655579.roa
File:                     4c8075f0-09dc-31e0-b215-681e44655579.roa (raw, json)
Hash identifier:          3fRmahZRmKdJLVw1CJN4ZU2wwaTYK30yBHr8ajYi+E0=
Subject key identifier:   40:D8:7A:D0:95:54:75:E9:3F:AE:B6:0D:23:31:5E:F7:2D:CC:1B:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AEB8B919FEA403429FBDA4E80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c8075f0-09dc-31e0-b215-681e44655579.roa
Signing time:             Wed 20 Aug 2025 14:36:56 +0000
ROA not before:           Wed 20 Aug 2025 14:36:56 +0000
ROA not after:            Tue 18 Nov 2025 15:36:56 +0000
asID:                     36627
IP address blocks:        2001:502:7094::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:eb:8b:91:9f:ea:40:34:29:fb:da:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 14:36:56 2025 GMT
            Not After : Nov 18 15:36:56 2025 GMT
        Subject: CN=7da7db15-01c8-46b9-ac15-43908cb85161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:22:7c:6b:db:6b:49:f9:b1:15:8a:2c:37:
                    36:88:77:0f:a0:a5:c6:ee:92:2c:b6:7f:1b:c2:45:
                    49:8e:ee:0b:76:8d:52:75:5b:0c:59:bf:3f:28:52:
                    b4:b7:e8:e5:6b:68:25:1f:ce:03:c7:bc:5f:9d:cf:
                    19:56:7d:d9:44:c5:97:f6:85:1e:fb:d9:b6:90:77:
                    55:b3:0c:b9:6b:55:ac:e8:ed:ed:46:b3:3e:34:39:
                    1f:69:49:af:e3:3e:b2:56:a6:40:8e:5b:a9:2a:19:
                    c6:3a:a1:cd:7b:7e:82:e6:24:db:c3:4a:3e:e9:a5:
                    78:9f:af:4b:7b:3a:52:48:49:8a:5b:74:72:0f:28:
                    2a:5a:1f:5d:3a:8b:78:5b:fb:74:fc:1d:22:c1:57:
                    e8:01:40:c3:c2:09:cc:19:c5:84:bf:c6:6a:ac:16:
                    1d:13:f5:29:14:7a:91:03:d2:6d:32:61:8e:7c:76:
                    8a:2a:51:95:84:ff:49:4a:bf:cc:ff:df:b2:6b:ca:
                    4b:00:57:70:d3:68:c9:a1:1c:48:50:d2:6e:75:23:
                    b8:5e:af:68:12:e9:97:33:ce:88:8f:c2:24:ef:1f:
                    c1:37:38:ab:b0:a4:d3:05:4b:36:35:82:b4:d4:32:
                    31:82:ca:d5:ba:3a:cc:ad:8b:86:e8:39:f3:39:e8:
                    2e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D8:7A:D0:95:54:75:E9:3F:AE:B6:0D:23:31:5E:F7:2D:CC:1B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c8075f0-09dc-31e0-b215-681e44655579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:7094:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:67:de:36:a0:ff:bc:b8:c2:0c:77:9f:66:53:61:8e:0f:b4:
         21:4b:08:fc:cd:dc:f1:b7:45:1d:81:70:03:da:b1:2b:32:57:
         09:a4:62:10:84:e1:61:8e:ee:01:87:af:1b:d4:5c:4c:de:bf:
         80:c7:62:f6:31:fd:b1:96:0e:11:e5:48:89:38:92:d0:43:56:
         f8:79:ee:2e:6d:89:83:c8:c3:b7:da:94:c0:19:31:e8:e7:11:
         42:3b:49:25:3c:fd:d2:e8:08:52:1b:32:43:19:83:ca:30:b6:
         c5:b5:74:94:90:1d:96:46:dc:84:b2:0c:07:97:af:54:f4:b3:
         ad:79:56:5d:6e:7b:b8:98:9a:10:11:44:a1:50:06:62:b4:f8:
         d2:d7:4e:56:c1:25:0f:45:00:fd:2f:8e:2a:e5:aa:ee:9d:d0:
         c5:c1:c1:3e:15:0d:a6:d1:1f:15:da:22:9f:11:0a:19:ac:6e:
         2d:a7:80:25:75:c6:ea:81:ac:0c:e4:d7:4a:fe:3f:d8:69:a7:
         20:82:34:e3:82:0c:e8:97:57:fc:35:53:2f:54:05:7e:a1:10:
         76:c1:15:44:4e:d4:2d:a6:a8:a7:2e:6b:ea:d0:fe:b0:c7:b6:
         a9:a7:38:29:02:f1:a5:64:15:b8:cd:67:a8:cf:ee:55:fa:2f:
         52:ed:22:ff
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErri5Gf6kA0KfvaToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDE0MzY1NloXDTI1MTExODE1MzY1NlowLzEtMCsGA1UEAxMk
N2RhN2RiMTUtMDFjOC00NmI5LWFjMTUtNDM5MDhjYjg1MTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWUifGvba0n5sRWKLDc2iHcPoKXG7pIstn8b
wkVJju4Ldo1SdVsMWb8/KFK0t+jla2glH84Dx7xfnc8ZVn3ZRMWX9oUe+9m2kHdV
swy5a1Ws6O3tRrM+NDkfaUmv4z6yVqZAjlupKhnGOqHNe36C5iTbw0o+6aV4n69L
ezpSSEmKW3RyDygqWh9dOot4W/t0/B0iwVfoAUDDwgnMGcWEv8ZqrBYdE/UpFHqR
A9JtMmGOfHaKKlGVhP9JSr/M/9+ya8pLAFdw02jJoRxIUNJudSO4Xq9oEumXM86I
j8Ik7x/BNzirsKTTBUs2NYK01DIxgsrVujrMrYuG6DnzOeguGwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFEDYetCVVHXpP662DSMxXvctzBuzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGM4MDc1ZjAtMDlkYy0z
MWUwLWIyMTUtNjgxZTQ0NjU1NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAnCU
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAJZ942oP+8uMIMd59mU2GOD7QhSwj8zdzxt0Ud
gXAD2rErMlcJpGIQhOFhju4Bh68b1FxM3r+Ax2L2Mf2xlg4R5UiJOJLQQ1b4ee4u
bYmDyMO32pTAGTHo5xFCO0klPP3S6AhSGzJDGYPKMLbFtXSUkB2WRtyEsgwHl69U
9LOteVZdbnu4mJoQEUShUAZitPjS105WwSUPRQD9L44q5arundDFwcE+FQ2m0R8V
2iKfEQoZrG4tp4AldcbqgawM5NdK/j/YaacggjTjggzol1f8NVMvVAV+oRB2wRVE
TtQtpqinLmvq0P6wx7appzgpAvGlZBW4zWeoz+5V+i9S7SL/
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:24:32 2025 by rpki-client