Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5e51a8-aa1c-313e-9533-4b2462a946bd.roa
File:                     cd5e51a8-aa1c-313e-9533-4b2462a946bd.roa (raw, json)
Hash identifier:          kASNlmVfbZDy5qjAhZE0pkRD3cHwAwQYafV4EfywUyM=
Subject key identifier:   00:CD:5C:BE:EF:E1:D9:B1:58:43:0E:0B:FA:8B:F4:D2:0A:AE:4F:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2FC1B442EFE6B52B7C4BFB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5e51a8-aa1c-313e-9533-4b2462a946bd.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     10515
IP address blocks:        2001:502:1ca1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:b4:42:ef:e6:b5:2b:7c:4b:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=a8d74eec-c9c4-4821-b1d4-6cf7573ec3d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b8:63:aa:e4:98:b6:96:58:75:04:7b:30:d1:
                    59:4c:c7:fd:20:ec:b8:fe:44:a4:39:b7:1b:97:3c:
                    fa:61:18:76:ab:6b:da:c9:2e:6b:3d:9a:4e:05:c7:
                    ef:b2:e1:39:26:67:8f:45:c7:ed:e3:99:05:ce:02:
                    4e:27:59:de:68:cb:26:4d:94:14:96:a3:6a:a8:22:
                    67:b3:79:0a:84:c1:76:65:3d:3d:98:55:8c:dd:63:
                    0c:9f:e2:62:17:22:78:05:13:8c:e2:9b:bf:1f:71:
                    dd:65:f7:54:ef:10:27:6e:7b:e2:05:27:c5:b3:cd:
                    51:b7:16:93:04:ac:09:52:92:ab:4c:04:3e:69:95:
                    e6:8a:e5:7b:39:21:af:04:a3:db:20:d4:58:cd:76:
                    87:57:c6:e1:f3:c2:60:64:64:da:65:86:2b:01:2d:
                    a1:13:1e:6a:ee:92:2c:85:64:08:59:d7:13:1e:56:
                    8a:f6:48:df:dc:f2:c9:80:2a:fb:83:3d:20:9b:d6:
                    bc:bc:d8:a8:d1:44:5c:4d:55:ec:8a:9a:26:09:29:
                    78:a7:3d:2b:44:e1:5c:2e:01:06:44:97:bd:f1:46:
                    76:35:f9:41:12:d3:6b:a2:5c:78:35:b3:a1:38:01:
                    77:cf:fe:68:d2:c4:14:bf:67:bb:5d:21:8a:d7:20:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:CD:5C:BE:EF:E1:D9:B1:58:43:0E:0B:FA:8B:F4:D2:0A:AE:4F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5e51a8-aa1c-313e-9533-4b2462a946bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:ba:09:33:3e:05:09:6f:96:89:f2:2c:e4:b9:2f:a6:04:
         17:11:28:55:6c:60:d5:fc:43:f4:0e:6c:8f:95:19:d8:67:76:
         19:9d:e5:7a:42:b0:f2:3f:49:bc:18:38:56:e0:94:50:dd:05:
         fe:4a:b6:c2:56:a6:6a:6f:87:dc:f9:6f:dc:fe:0c:5d:70:83:
         28:ed:84:2a:de:20:ca:69:02:a9:05:bc:c4:8a:9a:be:20:74:
         f8:42:9f:3f:38:45:67:7b:4a:b3:40:45:6e:40:89:a6:84:b4:
         c9:d2:71:05:9b:5d:c3:ac:ae:6c:bd:92:ac:ed:f1:6f:75:af:
         67:78:23:ab:68:c6:e2:95:ad:0e:5b:c1:b6:d6:e6:75:0c:b9:
         8c:32:3c:19:bf:71:02:96:a6:12:4b:d7:dd:db:83:fa:a5:75:
         8f:7c:6f:f6:44:19:02:86:13:a8:df:20:c5:f3:d0:17:29:89:
         cf:c3:a4:71:37:3e:50:1e:51:57:bc:e7:8c:62:3f:e9:77:e0:
         0a:2e:8f:52:77:31:4a:84:a1:84:fe:fa:b8:e8:db:cf:c3:56:
         f1:53:d8:30:5e:94:21:91:d0:4e:60:48:a4:0b:5c:79:37:1e:
         c3:ff:ff:c6:c4:b3:67:0d:b4:f0:d6:62:62:35:d7:b0:4c:c3:
         63:4a:c4:19
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEsvwbRC7+a1K3xL+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxNDAxMDAzM1oXDTI1MTIxMzAyMDAzM1owLzEtMCsGA1UEAxMk
YThkNzRlZWMtYzljNC00ODIxLWIxZDQtNmNmNzU3M2VjM2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bhjquSYtpZYdQR7MNFZTMf9IOy4/kSkObcb
lzz6YRh2q2vayS5rPZpOBcfvsuE5JmePRcft45kFzgJOJ1neaMsmTZQUlqNqqCJn
s3kKhMF2ZT09mFWM3WMMn+JiFyJ4BROM4pu/H3HdZfdU7xAnbnviBSfFs81RtxaT
BKwJUpKrTAQ+aZXmiuV7OSGvBKPbINRYzXaHV8bh88JgZGTaZYYrAS2hEx5q7pIs
hWQIWdcTHlaK9kjf3PLJgCr7gz0gm9a8vNio0URcTVXsipomCSl4pz0rROFcLgEG
RJe98UZ2NflBEtNrolx4NbOhOAF3z/5o0sQUv2e7XSGK1yD/twIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFADNXL7v4dmxWEMOC/qL9NIKrk/XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Q1ZTUxYTgtYWExYy0z
MTNlLTk1MzMtNGIyNDYyYTk0NmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB+/7oJMz4FCW+WifIs5LkvpgQXEShVbGDV/EP0
DmyPlRnYZ3YZneV6QrDyP0m8GDhW4JRQ3QX+SrbCVqZqb4fc+W/c/gxdcIMo7YQq
3iDKaQKpBbzEipq+IHT4Qp8/OEVne0qzQEVuQImmhLTJ0nEFm13DrK5svZKs7fFv
da9neCOraMbila0OW8G21uZ1DLmMMjwZv3EClqYSS9fd24P6pXWPfG/2RBkChhOo
3yDF89AXKYnPw6RxNz5QHlFXvOeMYj/pd+AKLo9SdzFKhKGE/vq46NvPw1bxU9gw
XpQhkdBOYEikC1x5Nx7D///GxLNnDbTw1mJiNdewTMNjSsQZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:16:38 2025 by rpki-client