Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a0ba09-894d-3dde-aa62-1f1c12b52b0d.roa
File:                     55a0ba09-894d-3dde-aa62-1f1c12b52b0d.roa (raw, json)
Hash identifier:          OSlwQdfSZXEGCUYN4VuwiYZitBu7MLABMb9rVwzBG6U=
Subject key identifier:   D8:DF:6A:9E:6B:92:39:23:8A:86:B2:2C:39:78:30:7E:73:B4:AB:32
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883FD3DD226BD7780578880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a0ba09-894d-3dde-aa62-1f1c12b52b0d.roa
Signing time:             Tue 19 Aug 2025 12:34:14 +0000
ROA not before:           Tue 19 Aug 2025 12:34:14 +0000
ROA not after:            Mon 17 Nov 2025 13:34:14 +0000
asID:                     396579
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:fd:3d:d2:26:bd:77:80:57:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:14 2025 GMT
            Not After : Nov 17 13:34:14 2025 GMT
        Subject: CN=43fca4eb-6cfa-4e4d-a27c-db5c72d53214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:08:2f:15:13:d1:51:f7:f8:f8:8c:f5:38:
                    a0:9b:86:0c:dd:19:74:d8:68:b7:ab:7b:dd:5b:a3:
                    2e:95:46:c1:4b:0f:5c:f0:52:eb:61:da:25:bf:81:
                    b3:cd:54:c0:d6:2b:8f:9a:b7:fc:fd:0a:90:cf:ff:
                    a6:26:c5:f0:5e:42:3b:f0:b2:44:77:a7:81:52:a8:
                    18:35:e5:8d:a9:a5:0f:13:73:ff:44:c9:d4:98:35:
                    26:91:08:b9:ae:b5:06:23:2f:29:11:23:04:fc:76:
                    b7:3b:ba:41:81:e0:f3:50:c7:f3:dd:eb:77:72:be:
                    15:cb:68:b7:4f:55:b4:fe:c7:ae:75:ad:9e:06:3a:
                    90:b5:26:9d:40:d4:eb:10:64:40:73:14:b1:46:c6:
                    b5:99:2d:04:a4:a7:47:d7:c2:03:3e:8d:86:b4:ce:
                    14:e4:67:b6:de:63:08:72:f2:a1:b8:9f:90:69:f5:
                    54:ff:53:fb:d4:c9:50:1d:d2:96:8a:7e:50:15:18:
                    fe:c4:02:5b:e2:7c:e9:78:a4:42:c1:84:76:31:92:
                    3c:41:06:6e:c2:d3:64:fc:28:11:01:45:05:95:53:
                    87:a7:7c:6e:0c:08:23:7a:72:ce:ae:38:aa:10:8e:
                    ad:0e:ce:09:eb:01:95:d2:0c:43:0b:00:2b:a1:28:
                    2b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:6A:9E:6B:92:39:23:8A:86:B2:2C:39:78:30:7E:73:B4:AB:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55a0ba09-894d-3dde-aa62-1f1c12b52b0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:92:be:d2:4a:1d:c4:04:6e:61:e8:dd:23:3c:a6:28:1f:71:
         91:db:57:9c:ea:0b:60:93:ae:7c:ab:a1:7c:6c:4e:05:d3:98:
         cf:00:b1:a3:77:49:ca:44:95:fc:d8:8f:10:f1:a0:e1:06:70:
         7a:c6:94:34:9c:52:16:2a:0a:f6:2d:74:6a:81:59:a8:8d:1c:
         1f:15:73:75:b0:ec:cf:9a:30:0d:3d:ff:b5:88:92:43:1b:27:
         70:f6:7a:7b:3b:85:86:3d:b5:a0:e3:57:3f:fd:47:0d:c1:09:
         70:a6:c8:c6:83:3e:b3:85:b4:cd:8f:13:a5:65:3f:fc:d1:0e:
         f5:4d:65:fb:0b:35:09:bb:9a:75:5e:fc:9a:30:94:28:70:7e:
         f1:5f:5a:9d:49:45:f4:08:be:11:9c:78:3f:27:fb:e3:b1:0c:
         0f:65:9e:6a:7e:61:62:b4:e6:74:f6:6b:75:67:ed:1b:19:03:
         bb:fb:18:44:82:34:b0:b7:e7:73:9a:1d:37:9c:92:4c:a4:6b:
         b8:0a:a5:76:d7:cd:0e:00:5c:b5:c3:3a:a3:ad:01:90:54:74:
         ac:cd:04:ef:2b:70:ab:1c:36:0a:ce:33:c1:8c:bc:d9:a6:8d:
         cf:91:85:e5:c5:53:df:e0:65:56:1f:7f:91:27:39:31:28:a8:
         d7:0a:6e:f7
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/090ia9d4BXiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxOTEyMzQxNFoXDTI1MTExNzEzMzQxNFowLzEtMCsGA1UEAxMk
NDNmY2E0ZWItNmNmYS00ZTRkLWEyN2MtZGI1YzcyZDUzMjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYAILxUT0VH3+PiM9Tigm4YM3Rl02Gi3q3vd
W6MulUbBSw9c8FLrYdolv4GzzVTA1iuPmrf8/QqQz/+mJsXwXkI78LJEd6eBUqgY
NeWNqaUPE3P/RMnUmDUmkQi5rrUGIy8pESME/Ha3O7pBgeDzUMfz3et3cr4Vy2i3
T1W0/seuda2eBjqQtSadQNTrEGRAcxSxRsa1mS0EpKdH18IDPo2GtM4U5Ge23mMI
cvKhuJ+QafVU/1P71MlQHdKWin5QFRj+xAJb4nzpeKRCwYR2MZI8QQZuwtNk/CgR
AUUFlVOHp3xuDAgjenLOrjiqEI6tDs4J6wGV0gxDCwAroSgrhQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNjfap5rkjkjioayLDl4MH5ztKsyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTVhMGJhMDktODk0ZC0z
ZGRlLWFhNjItMWYxYzEyYjUyYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQArkr7SSh3EBG5h6N0jPKYoH3GR21ec6gtgk658
q6F8bE4F05jPALGjd0nKRJX82I8Q8aDhBnB6xpQ0nFIWKgr2LXRqgVmojRwfFXN1
sOzPmjANPf+1iJJDGydw9np7O4WGPbWg41c//UcNwQlwpsjGgz6zhbTNjxOlZT/8
0Q71TWX7CzUJu5p1XvyaMJQocH7xX1qdSUX0CL4RnHg/J/vjsQwPZZ5qfmFitOZ0
9mt1Z+0bGQO7+xhEgjSwt+dzmh03nJJMpGu4CqV2180OAFy1wzqjrQGQVHSszQTv
K3CrHDYKzjPBjLzZpo3PkYXlxVPf4GVWH3+RJzkxKKjXCm73
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:10:34 2025 by rpki-client