Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7ffa615-858e-3e0b-b2b7-63ac78d4b72d.roa
File:                     b7ffa615-858e-3e0b-b2b7-63ac78d4b72d.roa (raw, json)
Hash identifier:          C3Id+Cra/GeI26kaXHAXlz2OaBlJVZ0+6+OXJ/F48Lc=
Subject key identifier:   D4:9F:8A:E3:CA:37:4F:79:6F:1B:BF:E2:62:5D:0D:85:41:13:01:A7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC6CF040ABC0BAE2942200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7ffa615-858e-3e0b-b2b7-63ac78d4b72d.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     211369
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:6c:f0:40:ab:c0:ba:e2:94:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=6904773e-94c2-4638-ac1b-6096074d2ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:11:00:0a:b7:2a:fb:9e:42:e3:8a:75:57:1a:
                    c6:90:d8:07:e1:eb:6c:9b:94:c7:f6:1a:50:28:cd:
                    17:ad:04:5f:b6:0c:19:5a:29:06:db:98:c6:9f:a6:
                    6d:3a:9f:9b:df:68:54:b0:a2:98:4f:7a:a3:bc:c0:
                    23:9b:1b:f7:32:5e:fb:ff:f9:9a:5f:6f:56:fc:0a:
                    fe:6f:4e:2d:a8:ea:16:35:2a:3a:f8:9c:50:6d:3f:
                    ec:1e:35:23:a1:3f:11:33:d3:5c:ba:a0:2f:9d:42:
                    92:14:32:b4:67:d1:96:b8:5f:29:43:5d:c4:aa:3b:
                    dd:d9:8c:72:fc:21:0f:56:56:43:ec:ac:d7:b5:a7:
                    3a:58:45:18:cb:7a:ec:e9:5e:4a:52:b9:da:65:98:
                    45:73:0b:b7:7c:a6:dc:84:76:ec:b0:ec:29:1a:31:
                    d6:28:bf:85:b8:0e:fa:86:54:1a:c7:fa:3f:33:64:
                    68:ef:87:0b:a3:34:dc:18:03:b2:12:4a:12:03:96:
                    b4:01:9a:86:99:1f:78:c1:a2:42:3a:9a:56:14:f2:
                    1d:1f:db:cb:21:5f:f3:7e:43:e3:26:13:87:e6:c8:
                    96:e7:1a:7f:1d:33:68:e4:e2:ef:c4:60:10:34:42:
                    b7:52:11:bb:c9:79:ae:71:ab:82:e9:2d:38:fe:b3:
                    e9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9F:8A:E3:CA:37:4F:79:6F:1B:BF:E2:62:5D:0D:85:41:13:01:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b7ffa615-858e-3e0b-b2b7-63ac78d4b72d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:1a:a2:eb:ef:6c:5b:ee:2e:3f:54:c8:4a:25:21:08:9a:59:
         15:8a:c6:81:5a:2d:46:f4:5c:95:17:b1:9f:a7:c1:97:6d:91:
         50:a8:a7:bb:d9:d0:0e:72:df:8b:f9:c2:4d:09:e4:a3:24:82:
         8b:76:04:ae:1d:e4:31:6d:80:77:b2:4a:aa:cd:8f:4e:0d:a9:
         e2:76:b4:26:24:e1:29:3f:ce:fb:91:ad:e5:45:61:4e:a4:55:
         59:44:13:b2:95:44:db:c8:5c:d5:9c:9c:1d:35:99:97:dd:0b:
         3f:cf:09:74:7f:c4:77:37:1a:97:a5:21:1e:4a:68:73:91:6a:
         92:e5:cc:4c:79:01:d3:15:eb:71:b4:f8:6b:3b:23:3c:3c:16:
         0d:7c:7b:58:58:2f:41:e8:2e:19:c1:e9:86:ea:9c:79:46:1d:
         c0:62:a8:8f:f6:19:61:34:54:ea:c1:81:5b:fb:f3:ee:d5:24:
         fc:ed:da:5f:55:61:5c:4e:2f:54:18:7c:4d:6a:da:b2:96:e5:
         28:b4:d1:a4:b1:52:de:8d:02:5f:a2:33:a6:ae:5e:2e:e4:e9:
         50:e4:35:34:13:d6:e3:68:e1:32:8c:14:11:09:f5:f6:88:45:
         fe:da:94:1c:ec:22:d1:12:dd:ac:1b:a8:ca:74:97:0f:85:a7:
         6b:d0:84:c2
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrGzwQKvAuuKUIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
NjkwNDc3M2UtOTRjMi00NjM4LWFjMWItNjA5NjA3NGQyZGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhREACrcq+55C44p1VxrGkNgH4etsm5TH9hpQ
KM0XrQRftgwZWikG25jGn6ZtOp+b32hUsKKYT3qjvMAjmxv3Ml77//maX29W/Ar+
b04tqOoWNSo6+JxQbT/sHjUjoT8RM9NcuqAvnUKSFDK0Z9GWuF8pQ13Eqjvd2Yxy
/CEPVlZD7KzXtac6WEUYy3rs6V5KUrnaZZhFcwu3fKbchHbssOwpGjHWKL+FuA76
hlQax/o/M2Ro74cLozTcGAOyEkoSA5a0AZqGmR94waJCOppWFPIdH9vLIV/zfkPj
JhOH5siW5xp/HTNo5OLvxGAQNEK3UhG7yXmucauC6S04/rPpWwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFNSfiuPKN095bxu/4mJdDYVBEwGnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjdmZmE2MTUtODU4ZS0z
ZTBiLWIyYjctNjNhYzc4ZDRiNzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC3GqLr72xb7i4/VMhKJSEImlkVisaBWi1G9FyV
F7Gfp8GXbZFQqKe72dAOct+L+cJNCeSjJIKLdgSuHeQxbYB3skqqzY9ODanidrQm
JOEpP877ka3lRWFOpFVZRBOylUTbyFzVnJwdNZmX3Qs/zwl0f8R3NxqXpSEeSmhz
kWqS5cxMeQHTFetxtPhrOyM8PBYNfHtYWC9B6C4ZwemG6px5Rh3AYqiP9hlhNFTq
wYFb+/Pu1ST87dpfVWFcTi9UGHxNatqyluUotNGksVLejQJfojOmrl4u5OlQ5DU0
E9bjaOEyjBQRCfX2iEX+2pQc7CLREt2sG6jKdJcPhadr0ITC
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:38 2025 by rpki-client