Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa
File:                     b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa (raw, json)
Hash identifier:          III+x5t/3YG4j/ElBy9dxCgSquZyrgODj3+FyfI4npQ=
Subject key identifier:   FE:D1:2E:F2:B6:4D:5F:9C:48:ED:6B:AB:B8:5D:13:DD:30:DC:9F:36
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ACCA6886AAFBF5958B18FD500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     19836
IP address blocks:        2620:0:5050::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:88:6a:af:bf:59:58:b1:8f:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=82affb00-4264-4168-9bdd-0ca329600a4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:a9:ac:eb:88:d4:f9:eb:39:84:11:56:37:
                    81:be:7d:30:61:d6:66:9f:b6:8e:e6:d5:8a:9c:54:
                    8c:e2:1d:40:7f:37:49:1e:52:a8:bd:d9:38:76:ed:
                    a1:09:35:2f:25:f3:13:cc:9e:59:00:d1:45:81:cd:
                    2d:75:83:43:aa:1a:6c:91:5b:f0:79:ce:de:ae:d8:
                    ce:5e:e1:3e:6e:13:93:f2:78:0f:f5:06:0c:a0:d5:
                    6d:d8:85:5c:17:c4:6a:47:6a:16:65:bc:d9:0e:87:
                    0b:d3:08:09:65:83:de:b4:c9:ed:6b:3c:a4:9d:06:
                    b3:1f:2f:d3:8f:b2:9b:5c:f3:cf:79:d1:36:a5:bb:
                    3e:56:18:c6:a8:c8:e0:d1:6d:79:5b:6d:aa:8b:6f:
                    cc:72:9c:c6:f2:e5:1f:c9:1b:92:32:80:92:89:fd:
                    9b:58:86:77:25:80:3c:39:87:f4:00:bf:41:13:2e:
                    10:87:34:9d:50:b9:59:3c:00:49:28:fe:ff:5b:65:
                    cf:09:3b:65:36:91:3c:40:19:2a:87:d0:2b:49:d4:
                    5b:17:40:51:59:39:1e:aa:6d:0b:b8:e2:06:83:ac:
                    0b:0f:76:8b:f1:86:d9:bc:1f:e4:c9:3f:32:f4:dc:
                    cf:75:b4:26:4a:60:e0:ef:9b:9b:e7:ab:2d:5c:2b:
                    16:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D1:2E:F2:B6:4D:5F:9C:48:ED:6B:AB:B8:5D:13:DD:30:DC:9F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b5d6df7c-6f45-34e9-91e3-dc7c71172507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:75:71:3f:5b:8a:62:da:ee:43:68:ae:d7:dd:64:55:1f:48:
         57:e9:36:6f:6b:6a:21:66:34:eb:ec:92:04:c7:05:31:63:86:
         ae:4a:36:0a:0d:77:17:c8:83:e8:00:d5:2a:69:06:32:fe:4e:
         ad:7b:08:95:99:34:9e:07:17:b0:48:98:79:d4:91:6e:4a:32:
         61:fc:39:c0:cd:38:1b:87:e2:31:1e:75:b8:34:3a:95:55:85:
         9d:04:03:5b:ed:76:c6:5a:85:ba:b7:eb:68:b4:de:5c:73:f0:
         29:ff:2a:56:5b:01:50:9a:3d:64:98:e6:96:c2:19:16:32:37:
         fb:dc:3a:9d:48:97:f2:0b:f1:0a:72:09:b8:49:a9:5f:bb:18:
         9c:eb:7a:a6:13:33:54:3e:e6:4b:87:d8:bb:82:8e:7f:8c:c5:
         ef:a1:17:b2:46:12:bb:89:13:a8:ea:75:68:91:4b:00:6f:4a:
         48:d9:ea:59:51:23:89:43:41:39:9c:6b:b5:75:d4:69:1a:5d:
         0a:24:31:bb:ec:30:0a:83:c4:dc:89:36:95:12:74:8c:78:17:
         2e:6a:f0:cb:86:ef:9a:09:eb:c4:93:ef:74:40:da:01:a0:42:
         ea:6d:71:36:76:57:55:0a:aa:87:c7:9a:19:23:a2:04:aa:1a:
         d6:e0:6c:6a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErMpohqr79ZWLGP1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk
ODJhZmZiMDAtNDI2NC00MTY4LTliZGQtMGNhMzI5NjAwYTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmKprOuI1PnrOYQRVjeBvn0wYdZmn7aO5tWK
nFSM4h1AfzdJHlKovdk4du2hCTUvJfMTzJ5ZANFFgc0tdYNDqhpskVvwec7ertjO
XuE+bhOT8ngP9QYMoNVt2IVcF8RqR2oWZbzZDocL0wgJZYPetMntazyknQazHy/T
j7KbXPPPedE2pbs+VhjGqMjg0W15W22qi2/McpzG8uUfyRuSMoCSif2bWIZ3JYA8
OYf0AL9BEy4QhzSdULlZPABJKP7/W2XPCTtlNpE8QBkqh9ArSdRbF0BRWTkeqm0L
uOIGg6wLD3aL8YbZvB/kyT8y9NzPdbQmSmDg75ub56stXCsWewIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFP7RLvK2TV+cSO1rq7hdE90w3J82MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjVkNmRmN2MtNmY0NS0z
NGU5LTkxZTMtZGM3YzcxMTcyNTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBbdXE/W4pi2u5DaK7X3WRVH0hX6TZva2ohZjTr
7JIExwUxY4auSjYKDXcXyIPoANUqaQYy/k6tewiVmTSeBxewSJh51JFuSjJh/DnA
zTgbh+IxHnW4NDqVVYWdBANb7XbGWoW6t+totN5cc/Ap/ypWWwFQmj1kmOaWwhkW
Mjf73DqdSJfyC/EKcgm4Salfuxic63qmEzNUPuZLh9i7go5/jMXvoReyRhK7iROo
6nVokUsAb0pI2epZUSOJQ0E5nGu1ddRpGl0KJDG77DAKg8TciTaVEnSMeBcuavDL
hu+aCevEk+90QNoBoELqbXE2dldVCqqHx5oZI6IEqhrW4Gxq
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:56:52 2025 by rpki-client