Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2536584-ea19-3fbd-bc59-659229dce03c.roa
File:                     a2536584-ea19-3fbd-bc59-659229dce03c.roa (raw, json)
Hash identifier:          N8fgrYwX0XwNbe8ysC92VJn9YcZtpzDeSl032SDOHQQ=
Subject key identifier:   DC:60:8C:BE:95:33:95:03:B3:63:84:0B:9F:7A:A2:6A:70:AF:C8:1A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA67866CCD57AA738FD5000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2536584-ea19-3fbd-bc59-659229dce03c.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     396827
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:78:66:cc:d5:7a:a7:38:fd:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=3b3ac93f-337c-43b3-b0bd-c624b9fec097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:13:1d:f4:e9:01:95:7d:2e:8f:e3:cb:b9:
                    10:24:f3:cb:cb:27:6c:62:13:15:de:fc:02:89:23:
                    ed:5d:a5:b4:a9:54:3f:37:3c:f2:c5:b5:ee:18:e4:
                    d0:9b:75:65:33:73:02:77:f0:11:4d:91:d2:57:b1:
                    04:66:05:5d:ae:f4:a5:c4:6b:c6:a9:6e:aa:ee:fe:
                    3b:11:bb:0d:92:ba:cb:0a:53:41:47:32:ea:e5:39:
                    2e:64:78:41:4b:26:62:fb:3c:9c:b4:6f:e4:f3:5c:
                    db:b7:48:5b:43:15:90:97:1d:1a:68:43:d6:c9:4d:
                    39:fc:02:1d:10:e5:7f:f5:8f:5b:8d:4d:9b:5e:d1:
                    b2:9e:4a:45:24:92:bf:44:91:89:fa:9c:39:ee:00:
                    32:cf:30:8c:09:8e:40:1b:c3:4a:cb:de:07:2c:2a:
                    05:64:12:90:11:00:a5:58:24:86:f1:1c:5a:53:ed:
                    16:03:57:1a:01:a6:89:33:eb:0a:57:da:d9:53:a2:
                    0a:92:fb:93:19:1f:ea:50:42:37:92:ce:09:aa:1b:
                    a5:7d:98:ad:a2:9a:4f:ec:f8:92:88:09:f4:d6:5c:
                    71:93:a9:3d:67:43:b0:4c:5b:dd:7d:93:2c:b1:4a:
                    c4:07:39:19:3f:53:44:a8:81:2f:0f:17:a1:f5:db:
                    e3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:60:8C:BE:95:33:95:03:B3:63:84:0B:9F:7A:A2:6A:70:AF:C8:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a2536584-ea19-3fbd-bc59-659229dce03c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:32:f3:41:b1:9a:0c:7e:b5:29:d9:95:9c:b8:86:44:83:9a:
         75:30:ca:60:fa:61:31:53:1d:58:d3:65:bf:5c:62:62:a3:69:
         f1:8b:d2:ce:14:aa:68:96:10:59:50:ec:20:10:ec:8a:f2:f5:
         27:11:4f:1b:8f:3b:63:4f:2a:56:3a:31:a2:37:46:d5:e7:02:
         57:17:46:e8:15:5b:66:e6:d3:84:ad:f3:82:f5:37:78:80:78:
         90:3e:d6:9a:e9:c7:ec:da:66:2b:3d:56:81:a4:17:a6:31:67:
         f3:95:18:ad:99:bb:83:0d:e1:0c:24:0e:0b:01:b5:87:56:30:
         7d:ea:27:a2:49:26:bc:90:b7:1a:89:4a:92:26:42:c9:7f:01:
         53:3c:4b:d1:a5:9c:dd:7f:4c:a2:fc:f6:13:b0:67:b0:3c:60:
         ff:e2:90:8c:f9:1f:07:87:39:1a:1d:4b:76:6e:ed:9e:90:0b:
         27:a0:8f:a8:3f:6d:ad:7f:74:a3:0a:9a:a5:a0:bd:e5:ef:5d:
         05:77:2d:b9:16:9b:be:1b:59:04:49:3e:b7:67:b6:fb:5a:5c:
         8c:12:c1:62:e9:55:a6:d6:9e:56:bb:88:d8:5a:35:03:43:09:
         35:2a:25:cb:22:0d:9d:d5:c8:63:d0:39:00:80:20:86:d0:d7:
         c3:8c:8a:3a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErMpnhmzNV6pzj9UAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk
M2IzYWM5M2YtMzM3Yy00M2IzLWIwYmQtYzYyNGI5ZmVjMDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN0THfTpAZV9Lo/jy7kQJPPLyydsYhMV3vwC
iSPtXaW0qVQ/NzzyxbXuGOTQm3VlM3MCd/ARTZHSV7EEZgVdrvSlxGvGqW6q7v47
EbsNkrrLClNBRzLq5TkuZHhBSyZi+zyctG/k81zbt0hbQxWQlx0aaEPWyU05/AId
EOV/9Y9bjU2bXtGynkpFJJK/RJGJ+pw57gAyzzCMCY5AG8NKy94HLCoFZBKQEQCl
WCSG8RxaU+0WA1caAaaJM+sKV9rZU6IKkvuTGR/qUEI3ks4JqhulfZitoppP7PiS
iAn01lxxk6k9Z0OwTFvdfZMssUrEBzkZP1NEqIEvDxeh9dvjgwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNxgjL6VM5UDs2OEC596ompwr8gaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTI1MzY1ODQtZWExOS0z
ZmJkLWJjNTktNjU5MjI5ZGNlMDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCGMvNBsZoMfrUp2ZWcuIZEg5p1MMpg+mExUx1Y
02W/XGJio2nxi9LOFKpolhBZUOwgEOyK8vUnEU8bjztjTypWOjGiN0bV5wJXF0bo
FVtm5tOErfOC9Td4gHiQPtaa6cfs2mYrPVaBpBemMWfzlRitmbuDDeEMJA4LAbWH
VjB96ieiSSa8kLcaiUqSJkLJfwFTPEvRpZzdf0yi/PYTsGewPGD/4pCM+R8Hhzka
HUt2bu2ekAsnoI+oP22tf3SjCpqloL3l710Fdy25Fpu+G1kEST63Z7b7WlyMEsFi
6VWm1p5Wu4jYWjUDQwk1KiXLIg2d1chj0DkAgCCG0NfDjIo6
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:14:44 2025 by rpki-client