Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e29151c-48fa-337f-bf19-af06cddd54cc.roa
File:                     4e29151c-48fa-337f-bf19-af06cddd54cc.roa (raw, json)
Hash identifier:          IfP/WwijtN9m9R4sSKdJBNUGAFF5nSKAUHEYzwHdnLE=
Subject key identifier:   B7:9F:70:03:17:EB:88:12:98:F0:BA:13:B2:52:22:2B:CC:67:7E:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC6E2D5F50C6ACB27C9D50
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e29151c-48fa-337f-bf19-af06cddd54cc.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     396583
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:6e:2d:5f:50:c6:ac:b2:7c:9d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=0217935a-f26b-4072-acd6-e1b60613eb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:16:c0:a7:83:2b:9e:ef:62:58:37:82:32:
                    05:90:95:60:71:4d:01:4c:9d:de:30:dc:74:17:6a:
                    e0:46:e7:4b:88:7f:2c:f9:15:5c:89:4a:2f:a7:45:
                    fc:c1:04:2c:fd:f7:a9:92:b0:05:b2:76:4f:7a:b5:
                    94:92:53:b4:22:e9:4d:68:9b:8b:ed:f0:64:8c:4e:
                    fa:cd:45:4e:07:38:ce:c1:db:01:0b:f5:e8:53:6b:
                    f5:ed:f4:c9:7e:69:4e:63:02:aa:33:2f:83:ed:01:
                    7f:0a:7d:56:0a:f8:ea:e1:a9:d1:ac:0f:34:4b:ef:
                    18:09:97:fa:b4:d0:e5:e5:9b:31:ed:bf:2a:b3:41:
                    32:62:f4:aa:8d:f7:57:a2:bd:93:2b:bc:41:d7:2b:
                    c6:90:d7:f3:57:08:53:c3:48:dc:9a:27:1c:53:47:
                    fa:a6:3e:2d:ac:16:58:be:80:29:d4:58:b7:ce:2e:
                    ef:25:36:36:3c:88:80:16:c4:3e:72:98:67:b8:37:
                    1e:f2:ce:3a:4c:fd:2b:80:13:7a:44:15:a0:c7:bf:
                    ed:cf:a0:7a:f9:9e:4a:24:a0:23:38:79:15:82:5c:
                    18:cf:60:11:42:3e:17:31:3b:97:9a:4d:9b:95:f7:
                    df:fc:30:12:13:c3:52:86:69:1f:79:87:23:85:40:
                    ef:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9F:70:03:17:EB:88:12:98:F0:BA:13:B2:52:22:2B:CC:67:7E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e29151c-48fa-337f-bf19-af06cddd54cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:4f:b1:c0:8c:49:37:a1:10:f1:6b:84:8a:96:4a:7d:b2:e4:
         33:78:5b:f9:ca:5f:e9:08:e2:bf:15:ef:ee:5a:7d:a9:eb:47:
         92:25:a0:fd:37:ab:25:be:2b:6b:49:ba:c4:d2:be:7a:e2:26:
         c2:8f:a2:4e:fe:96:93:e7:97:36:d1:e9:4c:a9:92:47:c2:6a:
         d8:a7:ac:22:e4:48:73:06:a0:93:9a:47:c7:59:98:ff:07:55:
         66:bb:0d:41:02:e8:59:a6:bb:d5:72:c3:20:9a:03:ce:64:41:
         61:4f:7c:5c:c8:e9:3f:cc:c9:c2:a2:e8:e9:62:ab:27:1b:89:
         6a:a0:7c:a9:f5:9d:78:bd:2e:7b:07:bd:02:1d:7e:fa:2f:0f:
         91:f3:ea:15:ea:bd:bd:3d:3a:26:dd:d3:f5:84:8f:e4:fb:83:
         66:6a:83:73:4a:f7:ad:b2:38:bd:1b:b1:17:2e:78:ae:57:94:
         fd:a0:2d:56:99:0a:11:95:27:1f:ac:ba:7f:65:a2:6b:25:f2:
         24:fa:8d:80:ee:87:f6:be:1a:f6:46:de:f9:5d:be:f6:a1:ce:
         32:2e:ef:f9:35:e2:13:41:fd:a8:4a:dd:9a:ba:62:e3:88:f9:
         4f:57:d8:bf:c5:25:f7:7d:1e:ea:64:28:cf:f0:11:b3:47:01:
         44:07:2b:97
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrG4tX1DGrLJ8nVAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
MDIxNzkzNWEtZjI2Yi00MDcyLWFjZDYtZTFiNjA2MTNlYjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMoWwKeDK57vYlg3gjIFkJVgcU0BTJ3eMNx0
F2rgRudLiH8s+RVciUovp0X8wQQs/fepkrAFsnZPerWUklO0IulNaJuL7fBkjE76
zUVOBzjOwdsBC/XoU2v17fTJfmlOYwKqMy+D7QF/Cn1WCvjq4anRrA80S+8YCZf6
tNDl5Zsx7b8qs0EyYvSqjfdXor2TK7xB1yvGkNfzVwhTw0jcmiccU0f6pj4trBZY
voAp1Fi3zi7vJTY2PIiAFsQ+cphnuDce8s46TP0rgBN6RBWgx7/tz6B6+Z5KJKAj
OHkVglwYz2ARQj4XMTuXmk2blfff/DASE8NShmkfeYcjhUDvywIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLefcAMX64gSmPC6E7JSIivMZ37IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGUyOTE1MWMtNDhmYS0z
MzdmLWJmMTktYWYwNmNkZGQ1NGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAtT7HAjEk3oRDxa4SKlkp9suQzeFv5yl/pCOK/
Fe/uWn2p60eSJaD9N6slvitrSbrE0r564ibCj6JO/paT55c20elMqZJHwmrYp6wi
5EhzBqCTmkfHWZj/B1Vmuw1BAuhZprvVcsMgmgPOZEFhT3xcyOk/zMnCoujpYqsn
G4lqoHyp9Z14vS57B70CHX76Lw+R8+oV6r29PTom3dP1hI/k+4NmaoNzSvetsji9
G7EXLniuV5T9oC1WmQoRlScfrLp/ZaJrJfIk+o2A7of2vhr2Rt75Xb72oc4yLu/5
NeITQf2oSt2aumLjiPlPV9i/xSX3fR7qZCjP8BGzRwFEByuX
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:35:59 2025 by rpki-client