Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3eb3671-0b50-3998-9a7f-ddaca9b84d50.roa
File:                     b3eb3671-0b50-3998-9a7f-ddaca9b84d50.roa (raw, json)
Hash identifier:          bypI7yQ36KkHcI0+P4NVOJKv3voCHUG5liRtlIGllyY=
Subject key identifier:   D2:93:45:BD:7D:06:14:D5:2E:83:22:6B:BA:CF:E9:3B:EA:D8:A3:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B64CCB6837E2078D7BD301680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3eb3671-0b50-3998-9a7f-ddaca9b84d50.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396611
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:b6:83:7e:20:78:d7:bd:30:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=d2626249-a27d-4e9f-9808-df848efedb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c7:d9:55:c9:05:7b:bc:6b:7a:59:78:14:6d:
                    5c:a9:64:f2:ad:2b:67:d0:d8:6f:13:39:1d:30:ba:
                    bc:83:40:0c:4a:9f:d1:e6:e2:0d:3c:1d:27:2e:b2:
                    45:c1:e9:c5:a0:a9:c9:e7:e4:d2:cd:b4:c0:9e:99:
                    f1:99:67:83:86:69:a8:d9:1a:c5:e4:e1:04:78:9b:
                    d5:6d:07:61:f2:09:17:a9:8e:dc:a7:6b:7a:82:92:
                    7b:ea:dd:9c:fd:c0:de:4d:aa:4f:c7:96:da:b6:46:
                    d4:46:e6:60:1b:8a:c5:98:b1:7a:1e:f0:6a:a2:e5:
                    95:62:29:01:eb:9a:03:b8:26:08:8c:db:d3:b9:cb:
                    08:a1:bc:eb:b8:1a:4b:73:06:ce:83:dd:1b:19:e0:
                    af:e7:ec:79:0c:6c:2c:a0:24:fc:b4:de:58:12:69:
                    b6:e4:a6:80:08:75:6b:3d:b5:ac:1b:5f:2e:67:81:
                    ee:f2:00:82:49:6c:ca:eb:8f:63:b0:6d:ba:83:a0:
                    3d:61:34:08:32:1c:90:6d:bc:9d:62:38:e8:50:db:
                    13:8a:cf:46:3f:dd:5a:07:6a:5f:39:51:32:15:2f:
                    d9:7a:7f:27:5c:ab:c5:1f:94:41:24:e0:86:18:6b:
                    b7:33:01:e4:17:b2:f0:1b:a4:dd:e2:35:00:e8:84:
                    a4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:93:45:BD:7D:06:14:D5:2E:83:22:6B:BA:CF:E9:3B:EA:D8:A3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3eb3671-0b50-3998-9a7f-ddaca9b84d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e4:e4:e6:df:59:15:e4:ac:58:1a:c2:8d:f7:90:2c:f8:7f:
         33:fb:30:e7:8f:79:40:f2:ca:e2:d1:23:bb:ac:ee:0e:59:23:
         32:01:cd:e0:39:b3:77:90:be:d2:35:69:68:07:58:d3:26:a6:
         c4:c4:26:7c:02:ce:07:e3:96:76:75:89:c4:c3:0b:5c:98:f7:
         e4:0c:65:90:a0:48:ba:1f:b6:e1:61:9a:58:46:4f:69:a3:04:
         04:7c:58:17:f3:b4:5c:aa:12:3b:bf:aa:35:4b:35:bd:c7:0b:
         e4:24:89:38:ef:5e:97:f4:4f:f9:ef:63:ac:2c:27:ac:e6:c0:
         ba:44:20:96:1f:27:7f:f0:03:e6:97:2d:53:c1:27:91:13:a1:
         45:59:1c:f8:98:a9:31:58:af:6e:bb:cf:a2:00:df:c0:5c:14:
         cb:f6:3a:a3:aa:2c:18:0a:87:d3:85:ec:31:6e:14:c2:56:8a:
         2d:b9:7f:b0:98:bc:2d:01:1f:89:0c:2e:3a:ba:c0:18:08:10:
         6d:d5:04:e5:ef:42:29:c3:50:91:d9:a3:51:bf:7d:06:f8:0c:
         13:50:0c:b3:1c:d0:45:01:8e:92:0e:c8:90:2a:a8:da:fe:de:
         67:8e:40:8f:a8:19:59:e5:da:a8:7b:90:17:bc:5c:14:97:62:
         a5:21:9c:21
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtkzLaDfiB4170wFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZDI2MjYyNDktYTI3ZC00ZTlmLTk4MDgtZGY4NDhlZmVkYjI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8fZVckFe7xrell4FG1cqWTyrStn0NhvEzkd
MLq8g0AMSp/R5uINPB0nLrJFwenFoKnJ5+TSzbTAnpnxmWeDhmmo2RrF5OEEeJvV
bQdh8gkXqY7cp2t6gpJ76t2c/cDeTapPx5batkbURuZgG4rFmLF6HvBqouWVYikB
65oDuCYIjNvTucsIobzruBpLcwbOg90bGeCv5+x5DGwsoCT8tN5YEmm25KaACHVr
PbWsG18uZ4Hu8gCCSWzK649jsG26g6A9YTQIMhyQbbydYjjoUNsTis9GP91aB2pf
OVEyFS/Zen8nXKvFH5RBJOCGGGu3MwHkF7LwG6Td4jUA6ISkGQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNKTRb19BhTVLoMia7rP6Tvq2KOQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjNlYjM2NzEtMGI1MC0z
OTk4LTlhN2YtZGRhY2E5Yjg0ZDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAu5OTm31kV5KxYGsKN95As+H8z+zDnj3lA8sri
0SO7rO4OWSMyAc3gObN3kL7SNWloB1jTJqbExCZ8As4H45Z2dYnEwwtcmPfkDGWQ
oEi6H7bhYZpYRk9powQEfFgX87RcqhI7v6o1SzW9xwvkJIk4716X9E/572OsLCes
5sC6RCCWHyd/8APmly1TwSeRE6FFWRz4mKkxWK9uu8+iAN/AXBTL9jqjqiwYCofT
hewxbhTCVootuX+wmLwtAR+JDC46usAYCBBt1QTl70Ipw1CR2aNRv30G+AwTUAyz
HNBFAY6SDsiQKqja/t5njkCPqBlZ5dqoe5AXvFwUl2KlIZwh
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:42:45 2025 by rpki-client