Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6cd735d-c7bc-315e-b04d-d15e683277a6.roa
File:                     b6cd735d-c7bc-315e-b04d-d15e683277a6.roa (raw, json)
Hash identifier:          XpLkmoox9kZaof0rMMYi16hpZFsTW192q+Ue6AGchVA=
Subject key identifier:   8D:6A:7D:5B:B7:92:41:E0:9D:42:14:5E:BA:AB:29:55:3B:64:3B:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC6C742338010E3D5C4180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6cd735d-c7bc-315e-b04d-d15e683277a6.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     396591
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:6c:74:23:38:01:0e:3d:5c:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=39e13feb-6096-458a-b8e0-0ff071aec194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:e6:1d:a2:e6:98:bf:c1:79:d4:c1:42:1b:
                    37:65:af:c7:dc:89:0b:72:90:c2:75:0b:57:cc:f5:
                    eb:97:8d:7d:39:49:b0:fe:39:2a:b1:f0:90:a8:32:
                    88:19:00:f2:b0:61:4e:99:c9:2f:6d:e4:07:f4:1e:
                    c7:74:dd:ec:1b:6f:b6:69:75:3c:69:39:87:da:2b:
                    23:d5:bd:5e:42:83:3e:37:2b:6c:41:a9:10:a5:5a:
                    a5:8e:88:24:7f:e9:3a:9b:e6:9c:02:4f:c9:3f:49:
                    74:4b:57:5e:a2:bf:ee:c8:cd:e8:12:08:c3:22:ff:
                    0f:1c:da:8c:c5:6a:90:d0:16:d6:ea:ca:e5:2d:e9:
                    4c:64:a8:c3:2e:cd:e7:68:78:bf:5e:d2:e3:d3:04:
                    55:12:55:7a:56:a1:ae:91:57:49:8a:7d:1b:cc:2f:
                    dc:50:d5:a0:37:75:ff:c7:0f:88:ae:c7:a1:60:45:
                    fd:bc:a0:c6:f5:0a:84:39:16:91:61:b8:07:60:4f:
                    1f:98:2d:5a:a6:a7:64:35:d3:85:18:b9:a5:b9:f3:
                    f6:cc:c6:0e:1d:e2:82:56:78:c8:52:52:a7:30:0a:
                    e4:94:12:81:bb:e5:b3:0b:5d:3d:c3:43:22:28:1c:
                    2e:d7:76:97:52:28:1f:0b:b0:0f:e6:76:24:5d:56:
                    6a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6A:7D:5B:B7:92:41:E0:9D:42:14:5E:BA:AB:29:55:3B:64:3B:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b6cd735d-c7bc-315e-b04d-d15e683277a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:0d:66:15:61:af:7b:af:3b:65:04:98:2c:34:a3:d6:ef:2c:
         92:01:3b:2d:4e:d9:a6:a3:17:f4:c8:74:4b:a7:c4:ef:7f:a1:
         1b:0d:ed:5e:0d:10:6c:64:f5:b0:85:e7:74:e8:4d:53:de:74:
         58:1b:4e:21:94:ea:bf:77:97:14:97:54:13:16:f6:9e:52:1a:
         8e:16:47:1e:c6:37:50:a6:2a:0d:77:ed:c0:5f:08:92:ed:50:
         78:9a:5d:f6:1a:3f:ef:b8:0d:2a:57:9a:a4:68:f3:c1:87:1b:
         5a:01:d2:48:0a:38:72:ae:d6:4d:d0:a7:03:d1:d8:b6:5b:74:
         70:32:a6:a2:50:ce:eb:d2:6a:be:e8:02:22:4f:6f:7c:0b:13:
         44:f2:cb:39:ba:4b:d2:1c:e7:06:f0:c7:cf:d7:70:a5:93:23:
         d7:56:ab:e3:e0:27:9d:d3:73:8d:3b:bf:cf:ac:48:a7:53:4b:
         9a:25:07:c8:a3:7c:c7:f1:43:d8:0e:2a:f2:d9:1b:44:a4:6f:
         03:fa:83:c4:18:b3:ba:89:24:1d:ca:ef:39:db:8c:d2:e9:35:
         5b:58:90:49:36:cc:64:29:07:06:a2:7e:ea:a1:95:8f:72:6e:
         22:1f:09:06:c2:a4:9f:1a:e2:36:b8:c6:3c:54:42:8d:40:50:
         39:6c:74:2e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrGx0IzgBDj1cQYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
MzllMTNmZWItNjA5Ni00NThhLWI4ZTAtMGZmMDcxYWVjMTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytDmHaLmmL/BedTBQhs3Za/H3IkLcpDCdQtX
zPXrl419OUmw/jkqsfCQqDKIGQDysGFOmckvbeQH9B7HdN3sG2+2aXU8aTmH2isj
1b1eQoM+NytsQakQpVqljogkf+k6m+acAk/JP0l0S1deor/uyM3oEgjDIv8PHNqM
xWqQ0BbW6srlLelMZKjDLs3naHi/XtLj0wRVElV6VqGukVdJin0bzC/cUNWgN3X/
xw+IrsehYEX9vKDG9QqEORaRYbgHYE8fmC1apqdkNdOFGLmlufP2zMYOHeKCVnjI
UlKnMArklBKBu+WzC109w0MiKBwu13aXUigfC7AP5nYkXVZqxQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFI1qfVu3kkHgnUIUXrqrKVU7ZDuNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjZjZDczNWQtYzdiYy0z
MTVlLWIwNGQtZDE1ZTY4MzI3N2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBUDWYVYa97rztlBJgsNKPW7yySATstTtmmoxf0
yHRLp8Tvf6EbDe1eDRBsZPWwhed06E1T3nRYG04hlOq/d5cUl1QTFvaeUhqOFkce
xjdQpioNd+3AXwiS7VB4ml32Gj/vuA0qV5qkaPPBhxtaAdJICjhyrtZN0KcD0di2
W3RwMqaiUM7r0mq+6AIiT298CxNE8ss5ukvSHOcG8MfP13ClkyPXVqvj4Ced03ON
O7/PrEinU0uaJQfIo3zH8UPYDiry2RtEpG8D+oPEGLO6iSQdyu8524zS6TVbWJBJ
NsxkKQcGon7qoZWPcm4iHwkGwqSfGuI2uMY8VEKNQFA5bHQu
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:25:53 2025 by rpki-client