Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8045e331-b226-3a0d-a2a0-c879b93a0550.roa
File:                     8045e331-b226-3a0d-a2a0-c879b93a0550.roa (raw, json)
Hash identifier:          jmHZpro+k4eDngEQsjivse4tVsK2GJwV4LqUJPulPnU=
Subject key identifier:   3C:C8:DD:1A:B8:EC:EE:71:19:FC:CE:62:BF:E9:0D:DA:0B:14:1D:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B59A1D74A945B9BA38E389800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8045e331-b226-3a0d-a2a0-c879b93a0550.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     396543
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:d7:4a:94:5b:9b:a3:8e:38:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=068b6417-db64-4c93-ad31-401dbb61d43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:91:c1:af:1a:8a:a7:3f:23:98:3b:a9:1f:d5:
                    bc:14:39:f3:c6:da:b3:84:9f:f3:4f:40:ea:96:b4:
                    8d:a8:a3:bb:10:32:a4:4d:8c:90:40:49:db:d5:ed:
                    bf:73:90:c8:54:b5:1a:51:1d:08:67:a5:0d:e2:da:
                    c6:4a:e1:47:cb:34:6f:a7:b2:54:22:ed:ed:b4:33:
                    15:2a:25:58:3c:01:d9:42:63:cc:4b:fd:12:09:30:
                    ec:56:d1:21:58:af:21:49:b2:ab:b2:29:fb:91:c4:
                    5b:da:31:44:03:cf:1c:68:ac:40:c7:81:1b:aa:28:
                    42:09:83:99:53:26:c0:1e:7e:72:c2:ab:3b:20:d7:
                    3d:ab:22:83:a5:10:78:fd:66:ec:08:32:d3:9b:55:
                    97:df:ad:f0:bf:de:d7:58:c7:29:27:66:6f:97:09:
                    33:3e:82:db:f6:d9:4e:42:84:37:9b:c3:5a:57:40:
                    c8:14:1b:f1:99:ca:a0:7a:ac:bb:d6:2c:2d:a7:77:
                    48:a3:b3:d3:99:ac:d5:b6:4f:be:83:da:cd:ec:5c:
                    f8:63:24:44:ce:31:0e:a3:4b:ff:41:ad:8e:b9:7a:
                    e1:d3:78:c5:d3:73:06:2f:b5:bf:c3:61:12:63:f6:
                    ad:aa:b4:24:06:f1:bf:c3:f1:29:95:2b:9c:5f:3f:
                    53:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C8:DD:1A:B8:EC:EE:71:19:FC:CE:62:BF:E9:0D:DA:0B:14:1D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8045e331-b226-3a0d-a2a0-c879b93a0550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6f:50:41:5f:aa:ee:e7:c4:a1:d5:10:23:3e:fa:94:26:b7:
         7d:3a:a0:52:2a:49:ac:66:12:0e:c1:9d:db:1a:82:25:60:85:
         d0:1b:cd:d3:e7:8a:c8:25:a8:10:97:92:e2:72:e5:db:a8:21:
         54:f3:e8:58:ea:8d:1b:ee:89:8e:f5:df:2a:20:5c:84:c9:cd:
         63:18:da:be:98:f0:be:c8:ed:04:e6:05:93:cb:39:18:4a:df:
         ba:7d:f5:a7:f7:7c:b2:87:f6:1b:60:8e:9f:42:40:57:d8:2a:
         48:57:67:97:51:8f:e9:39:ea:72:fe:3f:c5:0b:46:52:7f:d6:
         c5:3c:5b:e4:93:e3:3c:af:b7:01:a4:24:c0:ec:68:25:6b:53:
         0e:43:67:a1:8d:4c:36:59:29:5a:2d:93:5d:14:82:d5:95:19:
         30:ad:03:4f:62:64:96:74:ec:b5:24:d9:a3:a5:0c:ac:3d:8f:
         74:c1:1d:a5:aa:70:79:f1:e9:13:85:35:12:8b:dc:65:59:25:
         29:13:90:62:a2:3b:02:d7:e2:23:43:50:44:e8:b2:bc:fc:b3:
         e9:a6:94:51:dc:13:6d:8d:85:90:ca:f2:3e:1c:b5:ba:4e:f9:
         c4:f6:7a:f7:57:3e:2c:d1:6f:06:e3:9f:25:8e:57:12:c5:85:
         21:05:de:71
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtZoddKlFubo444mAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyOTAxMDAzM1oXDTI1MTIyODAyMDAzM1owLzEtMCsGA1UEAxMk
MDY4YjY0MTctZGI2NC00YzkzLWFkMzEtNDAxZGJiNjFkNDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JHBrxqKpz8jmDupH9W8FDnzxtqzhJ/zT0Dq
lrSNqKO7EDKkTYyQQEnb1e2/c5DIVLUaUR0IZ6UN4trGSuFHyzRvp7JUIu3ttDMV
KiVYPAHZQmPMS/0SCTDsVtEhWK8hSbKrsin7kcRb2jFEA88caKxAx4EbqihCCYOZ
UybAHn5ywqs7INc9qyKDpRB4/WbsCDLTm1WX363wv97XWMcpJ2ZvlwkzPoLb9tlO
QoQ3m8NaV0DIFBvxmcqgeqy71iwtp3dIo7PTmazVtk++g9rN7Fz4YyREzjEOo0v/
Qa2OuXrh03jF03MGL7W/w2ESY/atqrQkBvG/w/EplSucXz9TtwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDzI3Rq47O5xGfzOYr/pDdoLFB18MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODA0NWUzMzEtYjIyNi0z
YTBkLWEyYTAtYzg3OWI5M2EwNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBCb1BBX6ru58Sh1RAjPvqUJrd9OqBSKkmsZhIO
wZ3bGoIlYIXQG83T54rIJagQl5LicuXbqCFU8+hY6o0b7omO9d8qIFyEyc1jGNq+
mPC+yO0E5gWTyzkYSt+6ffWn93yyh/YbYI6fQkBX2CpIV2eXUY/pOepy/j/FC0ZS
f9bFPFvkk+M8r7cBpCTA7Ggla1MOQ2ehjUw2WSlaLZNdFILVlRkwrQNPYmSWdOy1
JNmjpQysPY90wR2lqnB58ekThTUSi9xlWSUpE5BiojsC1+IjQ1BE6LK8/LPpppRR
3BNtjYWQyvI+HLW6TvnE9nr3Vz4s0W8G458ljlcSxYUhBd5x
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:27:24 2025 by rpki-client