Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a3c59d0-aacd-32bd-87b2-43fba5b1c738.roa
File:                     6a3c59d0-aacd-32bd-87b2-43fba5b1c738.roa (raw, json)
Hash identifier:          tG2yMXogrrV9gP6EFPDWZVHVZEJ67Hd8i9PJsh4ju08=
Subject key identifier:   95:8A:3F:F0:15:AB:61:C3:94:9C:45:80:58:78:E0:8F:E4:15:8E:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D83C56A86DD4425AD7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a3c59d0-aacd-32bd-87b2-43fba5b1c738.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     397193
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d8:3c:56:a8:6d:d4:42:5a:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=5abd4d98-c65d-4766-9de3-a4f689e6f6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:2e:7a:f4:11:c4:51:a2:f3:8c:95:a5:f7:
                    86:71:da:47:50:c0:9c:1f:e0:dc:3d:e5:dd:4d:b2:
                    e9:46:13:ae:41:0b:c4:d6:20:d6:44:2b:77:7c:70:
                    b2:00:6d:18:a8:af:cb:64:8a:1e:a4:11:dc:77:90:
                    9f:b8:db:1f:d0:c1:13:20:5a:da:60:55:1e:eb:ac:
                    91:e6:a9:0e:39:48:12:eb:9d:c5:e7:3f:f3:46:18:
                    a7:9d:3c:97:63:b8:80:31:e8:87:ea:ce:85:1e:98:
                    3a:94:cb:e6:c8:77:98:f6:af:22:3a:dc:73:98:9d:
                    32:d6:1b:0f:9a:b2:27:64:e3:03:95:04:63:45:80:
                    7d:16:9d:0e:21:62:3a:29:45:ca:2f:31:33:da:c3:
                    19:10:0b:d8:b8:ec:1b:f3:d2:ba:78:87:9c:2f:1b:
                    2c:1e:98:ec:21:42:f4:91:87:74:93:1f:7b:1b:11:
                    d3:14:43:e0:76:1f:fd:69:b3:cd:cc:a0:6c:5d:87:
                    43:37:cd:b9:ea:70:a6:5a:b4:13:fd:de:4f:4d:63:
                    ef:e0:14:70:97:a5:f8:c9:f8:ad:ea:08:fa:c2:68:
                    6e:81:03:0a:c8:bf:9b:d1:d7:5d:3a:38:8a:82:1f:
                    ee:02:6e:49:03:26:a5:97:32:a3:25:bf:f5:bb:e7:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8A:3F:F0:15:AB:61:C3:94:9C:45:80:58:78:E0:8F:E4:15:8E:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6a3c59d0-aacd-32bd-87b2-43fba5b1c738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:57:35:6c:a4:c0:60:86:c5:18:7c:a6:6e:f7:49:d8:ac:24:
         2a:4f:5e:e6:62:b5:22:c4:1e:46:f4:9c:68:b8:9b:a9:bb:46:
         db:c8:a8:50:34:75:cc:74:bb:8e:cf:65:c8:51:4e:b2:76:a0:
         62:34:f1:4f:48:32:a0:4f:b8:13:61:7b:4a:1e:93:d8:05:9f:
         31:f1:6f:af:23:dc:35:4f:4f:72:6a:d5:ec:ae:fd:f3:bc:17:
         3b:ed:7c:e0:5c:87:76:f0:5b:cf:e1:59:8c:cf:03:e1:1e:1a:
         59:ae:75:c1:eb:fb:fa:c2:45:ba:11:77:8e:0d:34:dc:97:eb:
         54:eb:40:b1:80:16:ff:1b:f7:05:fa:a1:e2:ff:b7:78:6a:51:
         b4:96:07:e8:49:65:ca:2c:e5:63:70:b6:15:1a:c3:8e:2b:51:
         5e:e6:dd:1d:46:2f:48:06:eb:b3:5e:d6:26:1d:6f:2d:c2:db:
         ad:28:49:45:c9:2c:cd:22:f6:e7:11:7e:b5:26:ca:90:78:6c:
         33:86:6e:51:ce:0d:c6:03:b7:a4:10:75:2a:6c:0d:56:e2:89:
         51:f7:0f:a1:26:3b:93:8a:1f:49:90:d7:ab:a2:fc:e3:5b:89:
         03:06:3c:b3:f8:81:3a:e5:f1:fb:f5:43:05:10:4d:7c:2c:4a:
         41:59:89:b6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZodg8Vqht1EJa18AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk
NWFiZDRkOTgtYzY1ZC00NzY2LTlkZTMtYTRmNjg5ZTZmNmZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvYuevQRxFGi84yVpfeGcdpHUMCcH+DcPeXd
TbLpRhOuQQvE1iDWRCt3fHCyAG0YqK/LZIoepBHcd5CfuNsf0METIFraYFUe66yR
5qkOOUgS653F5z/zRhinnTyXY7iAMeiH6s6FHpg6lMvmyHeY9q8iOtxzmJ0y1hsP
mrInZOMDlQRjRYB9Fp0OIWI6KUXKLzEz2sMZEAvYuOwb89K6eIecLxssHpjsIUL0
kYd0kx97GxHTFEPgdh/9abPNzKBsXYdDN8256nCmWrQT/d5PTWPv4BRwl6X4yfit
6gj6wmhugQMKyL+b0dddOjiKgh/uAm5JAyallzKjJb/1u+crzwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJWKP/AVq2HDlJxFgFh44I/kFY4JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmEzYzU5ZDAtYWFjZC0z
MmJkLTg3YjItNDNmYmE1YjFjNzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC0VzVspMBghsUYfKZu90nYrCQqT17mYrUixB5G
9JxouJupu0bbyKhQNHXMdLuOz2XIUU6ydqBiNPFPSDKgT7gTYXtKHpPYBZ8x8W+v
I9w1T09yatXsrv3zvBc77XzgXId28FvP4VmMzwPhHhpZrnXB6/v6wkW6EXeODTTc
l+tU60CxgBb/G/cF+qHi/7d4alG0lgfoSWXKLOVjcLYVGsOOK1Fe5t0dRi9IBuuz
XtYmHW8twtutKElFySzNIvbnEX61JsqQeGwzhm5Rzg3GA7ekEHUqbA1W4olR9w+h
JjuTih9JkNerovzjW4kDBjyz+IE65fH79UMFEE18LEpBWYm2
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:13:59 2025 by rpki-client