Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bafa61d-f05d-30eb-8173-df4ba4752dd3.roa
File:                     5bafa61d-f05d-30eb-8173-df4ba4752dd3.roa (raw, json)
Hash identifier:          +3oxhsySNdOrkukzcsANso+EA2BiEQmMvLiOSK+2nTU=
Subject key identifier:   02:74:00:C5:0F:1B:91:12:E3:20:4D:CE:90:BF:55:92:9F:07:A1:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE883FD9C1B4F4C9C7B5BC000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bafa61d-f05d-30eb-8173-df4ba4752dd3.roa
Signing time:             Tue 19 Aug 2025 12:34:15 +0000
ROA not before:           Tue 19 Aug 2025 12:34:15 +0000
ROA not after:            Mon 17 Nov 2025 13:34:15 +0000
asID:                     20362
IP address blocks:        2001:502:8cc::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:83:fd:9c:1b:4f:4c:9c:7b:5b:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 19 12:34:15 2025 GMT
            Not After : Nov 17 13:34:15 2025 GMT
        Subject: CN=0e61846e-ef01-4434-b9a5-1f38ed12a05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:33:e2:12:b7:63:c9:b7:1d:f4:59:e6:43:
                    0e:34:ae:58:9d:59:31:87:98:ed:e8:9b:17:a2:56:
                    b5:a9:53:ee:b1:6a:ec:82:05:55:67:1e:12:84:d0:
                    ea:89:c8:54:e5:10:de:19:39:af:7c:ab:e2:d3:65:
                    da:07:0f:61:9c:74:67:9f:34:51:d6:0f:ed:8b:02:
                    a7:ec:d6:4d:40:97:91:47:22:61:3d:9c:50:92:5d:
                    2d:f1:cb:60:5b:56:72:f5:a6:49:9f:5a:82:ee:12:
                    dc:79:ad:6a:2e:63:68:e2:25:62:4e:fc:d7:16:f8:
                    8f:2a:87:fd:bb:7d:a4:41:89:9c:cf:c5:ca:af:e6:
                    cd:5a:f7:e9:46:3c:f9:1b:1c:0c:e1:af:eb:49:bc:
                    0f:54:c5:88:1e:ac:0f:7c:51:41:3b:3b:a3:33:93:
                    ec:d4:a6:d7:da:b8:18:7a:50:cf:ef:d4:f8:f9:2e:
                    0b:b5:d2:79:4b:94:3b:62:0d:9b:36:34:0d:a4:ea:
                    00:cf:14:2a:15:e6:2c:7d:99:9e:1b:17:ec:30:a8:
                    55:9a:1c:ef:03:f2:e6:c5:a8:2a:26:5d:c1:25:83:
                    af:a7:cb:61:f2:93:f8:43:80:0d:49:56:c7:78:86:
                    d7:3a:ff:a1:8e:c6:5a:b3:1e:56:e9:2a:1f:4b:e0:
                    c9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:74:00:C5:0F:1B:91:12:E3:20:4D:CE:90:BF:55:92:9F:07:A1:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bafa61d-f05d-30eb-8173-df4ba4752dd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:8cc:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:c1:dd:c1:bb:6c:58:77:78:30:6a:30:69:b8:e1:ce:71:c5:
         73:ea:6b:35:90:db:08:8e:34:28:b6:40:e6:4d:6e:ad:a5:89:
         db:9a:f6:c6:c2:2a:e1:33:e9:9e:49:85:a6:f9:96:4f:df:cd:
         34:ab:c8:2b:ef:49:32:6d:76:b6:af:56:5c:11:7b:70:d7:b5:
         65:6f:7e:14:c6:67:4f:16:cd:89:a8:f7:4b:72:f4:52:55:b1:
         4d:e1:c3:a9:5b:38:27:ae:0a:2e:49:96:a4:88:46:75:1b:d4:
         51:f3:ac:9b:c0:0b:ea:e8:6e:42:e7:d7:3a:a0:70:73:ea:ac:
         e0:a6:14:f9:96:e5:2c:91:0c:cc:d7:3b:02:50:0c:de:a6:f5:
         fe:d4:06:e4:c9:3e:5f:d7:38:53:79:6e:31:64:41:55:50:71:
         56:6f:05:7e:b9:5a:62:2a:1c:cf:f5:25:f7:d6:31:e6:27:96:
         d1:19:13:eb:6a:1e:ed:eb:b3:db:76:49:17:b5:be:c1:d2:7b:
         08:61:d7:33:a5:d3:87:84:da:6d:0b:f5:36:8b:a2:93:0a:34:
         c9:dd:e7:72:cf:f8:a5:b4:27:b1:79:29:47:ce:f6:87:aa:af:
         cf:33:55:05:27:5e:4a:46:3b:c6:cc:6c:07:ce:27:d6:b2:e2:
         f7:ab:05:73
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErog/2cG09MnHtbwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxOTEyMzQxNVoXDTI1MTExNzEzMzQxNVowLzEtMCsGA1UEAxMk
MGU2MTg0NmUtZWYwMS00NDM0LWI5YTUtMWYzOGVkMTJhMDVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzUz4hK3Y8m3HfRZ5kMONK5YnVkxh5jt6JsX
ola1qVPusWrsggVVZx4ShNDqichU5RDeGTmvfKvi02XaBw9hnHRnnzRR1g/tiwKn
7NZNQJeRRyJhPZxQkl0t8ctgW1Zy9aZJn1qC7hLcea1qLmNo4iViTvzXFviPKof9
u32kQYmcz8XKr+bNWvfpRjz5GxwM4a/rSbwPVMWIHqwPfFFBOzujM5Ps1KbX2rgY
elDP79T4+S4LtdJ5S5Q7Yg2bNjQNpOoAzxQqFeYsfZmeGxfsMKhVmhzvA/Lmxagq
Jl3BJYOvp8th8pP4Q4ANSVbHeIbXOv+hjsZasx5W6SofS+DJJQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAJ0AMUPG5ES4yBNzpC/VZKfB6GhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWJhZmE2MWQtZjA1ZC0z
MGViLTgxNzMtZGY0YmE0NzUyZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC6wd3Bu2xYd3gwajBpuOHOccVz6ms1kNsIjjQo
tkDmTW6tpYnbmvbGwirhM+meSYWm+ZZP3800q8gr70kybXa2r1ZcEXtw17Vlb34U
xmdPFs2JqPdLcvRSVbFN4cOpWzgnrgouSZakiEZ1G9RR86ybwAvq6G5C59c6oHBz
6qzgphT5luUskQzM1zsCUAzepvX+1AbkyT5f1zhTeW4xZEFVUHFWbwV+uVpiKhzP
9SX31jHmJ5bRGRPrah7t67PbdkkXtb7B0nsIYdczpdOHhNptC/U2i6KTCjTJ3edy
z/iltCexeSlHzvaHqq/PM1UFJ15KRjvGzGwHzifWsuL3qwVz
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:46:07 2025 by rpki-client