Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbb0d6c1-5143-34fd-9db5-175763d7ae3c.roa
File:                     dbb0d6c1-5143-34fd-9db5-175763d7ae3c.roa (raw, json)
Hash identifier:          Q7oEnjICMFLToim812yNml0ygPZ6iI+MEJqJRUVILqE=
Subject key identifier:   5C:BE:87:D0:25:A1:BC:A6:63:B1:E9:48:B9:90:6C:60:67:D6:C9:96
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196C4B6DA7E785197384A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbb0d6c1-5143-34fd-9db5-175763d7ae3c.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     36623
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c4:b6:da:7e:78:51:97:38:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=dfc87d33-5bfe-48c9-a6d7-8834bd5fb7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d2:68:ce:c9:44:b1:7e:e3:ac:c8:59:0a:59:
                    b2:e7:59:18:c6:e2:32:82:e8:69:05:9f:d9:01:ce:
                    99:2a:30:15:ae:60:25:c3:c4:4d:0d:c2:b6:de:3c:
                    00:cc:b3:aa:21:6e:f7:ab:f8:ca:5b:68:37:ee:29:
                    47:e9:03:6b:ab:39:1f:70:c4:f1:f0:e1:b9:c8:01:
                    b3:bc:3e:c0:dc:e6:7b:1b:28:62:78:ea:22:7c:8d:
                    d3:96:a0:6c:7b:e9:b0:c6:08:ac:48:8e:43:e9:67:
                    81:22:6f:15:d5:7d:8f:1e:5d:ac:a6:34:0a:d0:b5:
                    f2:fa:e4:9f:59:54:0e:e2:54:cd:c6:45:d3:12:4f:
                    23:79:05:07:90:58:ce:78:99:24:37:38:6d:b5:d4:
                    ff:b4:1a:e3:72:65:3a:40:ff:cd:49:95:5b:fe:19:
                    a5:97:95:95:e6:72:0c:5f:57:14:9e:6a:1f:0a:d5:
                    f6:be:4f:a2:7d:73:63:3d:79:85:07:e6:15:02:ab:
                    03:f2:49:ee:ae:d1:82:9f:65:40:b8:75:36:0b:01:
                    f0:5c:df:af:e2:f0:10:48:86:de:26:cd:f1:61:92:
                    54:0e:9e:9d:81:a0:ef:52:07:d8:99:c3:e6:71:16:
                    02:6f:89:fa:4d:99:c4:57:dc:08:8f:4d:5f:d8:53:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BE:87:D0:25:A1:BC:A6:63:B1:E9:48:B9:90:6C:60:67:D6:C9:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbb0d6c1-5143-34fd-9db5-175763d7ae3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:6e:4a:96:a4:6d:58:59:e6:83:41:2c:76:f8:e4:f3:81:ed:
         36:c8:9b:f9:d6:a1:03:ba:56:95:48:78:ab:65:e7:07:e2:8c:
         08:5c:b5:03:7b:d1:ca:d5:78:e1:ba:68:b8:55:61:3a:16:c3:
         ca:4b:8a:13:7f:84:a4:54:97:16:69:77:f0:2a:e0:ab:22:05:
         8a:2b:f1:c3:c2:b9:93:fa:d4:7c:1e:af:16:4d:46:ad:be:ad:
         0a:6b:c1:fb:41:01:76:98:95:6d:8a:11:90:89:d5:0e:87:64:
         e6:2d:d1:76:17:9e:79:6e:92:cc:b3:25:28:b3:06:68:4b:c5:
         3b:d7:b8:fa:9c:d6:cc:4e:74:ac:35:b8:05:84:f6:bf:33:79:
         b0:8e:16:d5:61:1e:0f:39:bf:85:d1:d7:18:31:24:ee:05:36:
         16:73:1b:cb:48:62:0a:c5:d4:b0:de:74:2b:eb:8e:b1:88:24:
         15:e6:e0:e6:40:f3:33:98:3b:e2:4f:27:2a:81:0d:74:80:4d:
         69:b7:f9:d7:fe:34:bb:81:ae:b4:9e:f3:b5:c3:d5:8d:60:37:
         34:12:83:51:52:6a:b4:1e:71:0b:38:73:8b:46:de:68:36:6b:
         25:f8:2b:80:6e:bf:c0:dd:90:73:41:0b:20:7d:6c:52:4e:85:
         20:c2:ff:52
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErhlsS22n54UZc4SgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZGZjODdkMzMtNWJmZS00OGM5LWE2ZDctODgzNGJkNWZiN2RkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19JozslEsX7jrMhZClmy51kYxuIyguhpBZ/Z
Ac6ZKjAVrmAlw8RNDcK23jwAzLOqIW73q/jKW2g37ilH6QNrqzkfcMTx8OG5yAGz
vD7A3OZ7GyhieOoifI3TlqBse+mwxgisSI5D6WeBIm8V1X2PHl2spjQK0LXy+uSf
WVQO4lTNxkXTEk8jeQUHkFjOeJkkNzhttdT/tBrjcmU6QP/NSZVb/hmll5WV5nIM
X1cUnmofCtX2vk+ifXNjPXmFB+YVAqsD8knurtGCn2VAuHU2CwHwXN+v4vAQSIbe
Js3xYZJUDp6dgaDvUgfYmcPmcRYCb4n6TZnEV9wIj01f2FPpJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFy+h9AlobymY7HpSLmQbGBn1smWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGJiMGQ2YzEtNTE0My0z
NGZkLTlkYjUtMTc1NzYzZDdhZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJpuSpakbVhZ5oNBLHb45POB7TbIm/nWoQO6VpVIeKtl5wfijAhc
tQN70crVeOG6aLhVYToWw8pLihN/hKRUlxZpd/Aq4KsiBYor8cPCuZP61HwerxZN
Rq2+rQprwftBAXaYlW2KEZCJ1Q6HZOYt0XYXnnluksyzJSizBmhLxTvXuPqc1sxO
dKw1uAWE9r8zebCOFtVhHg85v4XR1xgxJO4FNhZzG8tIYgrF1LDedCvrjrGIJBXm
4OZA8zOYO+JPJyqBDXSATWm3+df+NLuBrrSe87XD1Y1gNzQSg1FSarQecQs4c4tG
3mg2ayX4K4Buv8DdkHNBCyB9bFJOhSDC/1I=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:05:00 2025 by rpki-client