Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ef1452c-18c6-3c8c-84c6-7d9b2f1fbd4b.roa
File:                     6ef1452c-18c6-3c8c-84c6-7d9b2f1fbd4b.roa (raw, json)
Hash identifier:          rMtyxTZ5aO0nSy6nTeMDq+PAMXhoNIMioBY5P+/d3ts=
Subject key identifier:   9A:90:D9:AB:9B:7C:1B:17:A4:DF:34:D6:C0:1A:90:A1:FB:7F:BA:8E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B6632111313C073B2969F7050
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ef1452c-18c6-3c8c-84c6-7d9b2f1fbd4b.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     397201
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:11:13:13:c0:73:b2:96:9f:70:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=09975e69-419a-442a-b601-1ebd3bfb7816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9b:90:34:ac:c8:5b:de:7b:2d:38:80:69:97:
                    21:2e:eb:0c:a0:75:70:8b:8a:bd:e4:30:b1:29:61:
                    60:f3:6c:db:fe:0d:14:51:65:1b:01:a9:e9:7e:29:
                    78:75:f5:06:ca:73:62:0a:e0:83:45:bb:20:8b:10:
                    65:4d:56:d3:be:14:55:b4:f2:5e:64:3c:b3:ad:c4:
                    bd:1a:3b:3e:13:7f:3e:2a:ce:ae:4d:69:20:82:f8:
                    f4:fe:6c:83:2a:9b:c7:db:de:19:ef:55:8f:a4:58:
                    87:11:e0:3e:2b:5d:ab:c9:07:fe:39:04:8f:72:81:
                    ff:32:c7:44:75:ee:eb:70:c2:22:e9:88:34:72:cd:
                    62:ab:5e:3d:d6:67:ad:38:c7:59:2a:07:a8:32:13:
                    83:7d:61:fb:2a:ab:cd:27:81:fb:31:2e:1e:d7:14:
                    52:9d:6a:05:49:18:4a:32:b1:f3:2c:d4:a0:f2:06:
                    3b:44:0e:d1:e3:40:8c:c1:96:70:ea:08:42:fc:96:
                    18:ee:6d:39:5e:3d:c7:4a:07:66:71:14:81:7a:f2:
                    c9:e3:d7:0c:e1:ad:45:07:4b:74:fa:12:72:fc:43:
                    e3:58:b3:fb:94:27:78:19:bc:8f:b5:ed:b8:52:a8:
                    cf:60:d1:30:06:98:a9:41:72:e0:63:b6:b2:1d:d4:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:90:D9:AB:9B:7C:1B:17:A4:DF:34:D6:C0:1A:90:A1:FB:7F:BA:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6ef1452c-18c6-3c8c-84c6-7d9b2f1fbd4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:29:75:54:d3:c3:ac:5a:8d:81:7c:0f:27:00:3d:fa:84:84:
         84:08:9c:2f:03:ee:70:1d:9d:6c:6b:4a:a0:c4:c0:71:83:25:
         0f:09:a5:a7:95:ad:1c:93:f5:ca:26:49:dd:d2:a9:42:b7:d6:
         bd:c6:b2:bd:3d:2d:2e:4d:5e:11:9b:c2:3c:34:be:c7:31:76:
         d7:2d:c8:5b:c3:cc:22:2d:d7:d0:76:9b:92:86:02:33:ec:a8:
         6d:5f:57:58:a7:43:96:9a:4c:20:ee:9f:eb:a4:75:35:c3:69:
         0c:bf:d5:6c:c1:fe:42:95:c4:70:74:b4:24:97:1d:18:ac:55:
         25:fa:fb:3e:62:41:18:1d:62:99:f3:09:78:bb:84:17:7a:59:
         f9:16:70:67:c0:a4:44:c6:ff:b9:48:fb:39:32:fc:d6:05:fa:
         cd:dc:9c:34:07:aa:01:02:4f:47:d4:e1:5c:3e:15:26:45:64:
         1e:c8:6f:c3:d9:c2:96:ae:92:c3:4e:e3:c1:50:03:7b:a6:bf:
         f9:9e:42:26:56:51:07:ea:61:78:56:4a:06:27:32:1e:df:95:
         b9:a6:99:bf:2e:d3:d3:27:13:83:17:18:98:f1:a5:35:41:61:
         7d:30:8a:c5:33:7b:78:56:1d:62:12:69:db:60:e6:a4:94:e6:
         65:f0:75:69
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtmMhETE8BzspafcFAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
MDk5NzVlNjktNDE5YS00NDJhLWI2MDEtMWViZDNiZmI3ODE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJuQNKzIW957LTiAaZchLusMoHVwi4q95DCx
KWFg82zb/g0UUWUbAanpfil4dfUGynNiCuCDRbsgixBlTVbTvhRVtPJeZDyzrcS9
Gjs+E38+Ks6uTWkggvj0/myDKpvH294Z71WPpFiHEeA+K12ryQf+OQSPcoH/MsdE
de7rcMIi6Yg0cs1iq1491metOMdZKgeoMhODfWH7KqvNJ4H7MS4e1xRSnWoFSRhK
MrHzLNSg8gY7RA7R40CMwZZw6ghC/JYY7m05Xj3HSgdmcRSBevLJ49cM4a1FB0t0
+hJy/EPjWLP7lCd4GbyPte24UqjPYNEwBpipQXLgY7ayHdSV/QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJqQ2aubfBsXpN801sAakKH7f7qOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmVmMTQ1MmMtMThjNi0z
YzhjLTg0YzYtN2Q5YjJmMWZiZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD8pdVTTw6xajYF8DycAPfqEhIQInC8D7nAdnWxrSqDEwHGDJQ8J
paeVrRyT9comSd3SqUK31r3Gsr09LS5NXhGbwjw0vscxdtctyFvDzCIt19B2m5KG
AjPsqG1fV1inQ5aaTCDun+ukdTXDaQy/1WzB/kKVxHB0tCSXHRisVSX6+z5iQRgd
YpnzCXi7hBd6WfkWcGfApETG/7lI+zky/NYF+s3cnDQHqgECT0fU4Vw+FSZFZB7I
b8PZwpauksNO48FQA3umv/meQiZWUQfqYXhWSgYnMh7flbmmmb8u09MnE4MXGJjx
pTVBYX0wisUze3hWHWISadtg5qSU5mXwdWk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:22:07 2025 by rpki-client