Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea3c36b9-f93f-30bb-b407-770231fac4c7.roa
File:                     ea3c36b9-f93f-30bb-b407-770231fac4c7.roa (raw, json)
Hash identifier:          3YDJloi1R+Jr+/OIEXh3AlwFlcXIJBiYkGZOTzNvUCM=
Subject key identifier:   13:25:CF:80:12:38:1E:95:DF:13:F0:5C:9E:65:5C:D9:26:D1:9F:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B5F3755CD877F06A826B3F380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea3c36b9-f93f-30bb-b407-770231fac4c7.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     396587
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:55:cd:87:7f:06:a8:26:b3:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=5393f31e-42db-4ed2-ac28-686fd0f4c8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:83:1a:25:4f:c3:1f:ff:bb:1f:07:22:a9:
                    74:49:80:de:51:d0:19:96:8c:9e:91:00:7d:96:dd:
                    91:f1:8f:ae:ac:7a:1e:54:1a:15:c5:8d:1c:73:96:
                    1b:bf:23:d8:e1:03:7a:e5:35:9a:e0:3c:32:21:1a:
                    9d:c6:6a:d8:50:ae:82:55:37:31:16:e7:b2:db:91:
                    eb:38:a6:bf:e7:23:f3:7e:c2:75:f2:fd:6c:45:de:
                    dc:d1:2a:fb:d6:b6:cf:0d:00:1d:1f:d6:01:12:d0:
                    ee:fe:f2:b5:33:2c:23:9a:88:bf:73:88:c3:a7:e2:
                    48:fd:26:9c:ed:81:7e:6d:4d:fc:b2:59:75:da:4b:
                    ec:2a:0d:4a:30:f8:02:13:40:37:bd:d0:30:34:2b:
                    57:33:6f:ff:ac:f6:5c:80:71:33:6d:31:85:e6:e0:
                    a2:ca:90:6a:50:c3:b6:89:d8:71:c9:bb:db:d5:af:
                    64:76:ca:6b:08:f9:15:99:c3:12:a3:ba:c2:46:42:
                    ec:d4:55:82:f7:c0:70:cb:7a:f5:96:1e:68:b5:4d:
                    cd:7c:bc:28:6f:b8:c4:68:f0:e5:5e:97:ce:85:f5:
                    71:06:4b:88:79:91:8f:20:ad:1a:5f:27:1a:24:c1:
                    45:ef:60:49:2b:25:ab:37:13:d8:43:29:a7:0b:d0:
                    39:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:25:CF:80:12:38:1E:95:DF:13:F0:5C:9E:65:5C:D9:26:D1:9F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea3c36b9-f93f-30bb-b407-770231fac4c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1f:dd:49:cb:f9:14:49:e7:3e:75:6c:c8:83:70:2e:cc:7a:
         af:4b:ee:00:97:01:92:69:86:1a:f1:8f:d6:f8:ad:e6:9b:aa:
         16:d3:31:f6:98:ee:f8:ce:4c:4d:27:3a:54:b0:2b:e0:a8:19:
         39:d4:9d:5a:9d:d5:9a:2d:8d:f3:bf:ee:d1:4b:02:b3:6e:ee:
         27:ff:21:66:47:65:34:0d:bf:2d:2b:44:f5:73:1c:5c:ba:e7:
         05:67:e1:8d:cc:8d:15:80:e3:05:13:8e:e6:db:1f:07:d6:ef:
         9c:2c:54:e8:e1:7d:87:ea:cf:92:03:e3:c6:57:15:60:61:fd:
         81:33:51:cb:72:3c:ff:83:2d:f1:f5:d4:07:eb:55:15:05:ac:
         e4:a8:ea:06:62:c1:17:4a:e7:6b:68:f9:84:86:4e:15:96:3a:
         37:cb:88:07:fc:01:58:4a:a5:b3:01:78:0c:e6:c2:b0:57:96:
         08:89:86:20:32:3d:ae:05:f8:9d:0c:6c:c8:df:49:2a:f2:79:
         96:3e:81:6c:e1:6e:0a:54:b7:c1:0c:4b:ce:fa:60:10:9f:83:
         ee:fc:57:fc:97:1c:e2:94:e7:31:8e:77:ce:62:5f:c1:12:5f:
         00:9f:86:62:72:9f:34:56:b8:75:b4:d8:e3:4a:1c:78:21:0a:
         da:fc:4a:80
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1XNh38GqCaz84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
NTM5M2YzMWUtNDJkYi00ZWQyLWFjMjgtNjg2ZmQwZjRjOGFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq6DGiVPwx//ux8HIql0SYDeUdAZloyekQB9
lt2R8Y+urHoeVBoVxY0cc5YbvyPY4QN65TWa4DwyIRqdxmrYUK6CVTcxFuey25Hr
OKa/5yPzfsJ18v1sRd7c0Sr71rbPDQAdH9YBEtDu/vK1Mywjmoi/c4jDp+JI/Sac
7YF+bU38sll12kvsKg1KMPgCE0A3vdAwNCtXM2//rPZcgHEzbTGF5uCiypBqUMO2
idhxybvb1a9kdsprCPkVmcMSo7rCRkLs1FWC98Bwy3r1lh5otU3NfLwob7jEaPDl
XpfOhfVxBkuIeZGPIK0aXycaJMFF72BJKyWrNxPYQymnC9A5ZwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFBMlz4ASOB6V3xPwXJ5lXNkm0Z+xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWEzYzM2YjktZjkzZi0z
MGJiLWI0MDctNzcwMjMxZmFjNGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBtH91Jy/kUSec+dWzIg3AuzHqvS+4AlwGSaYYa
8Y/W+K3mm6oW0zH2mO74zkxNJzpUsCvgqBk51J1andWaLY3zv+7RSwKzbu4n/yFm
R2U0Db8tK0T1cxxcuucFZ+GNzI0VgOMFE47m2x8H1u+cLFTo4X2H6s+SA+PGVxVg
Yf2BM1HLcjz/gy3x9dQH61UVBazkqOoGYsEXSudraPmEhk4Vljo3y4gH/AFYSqWz
AXgM5sKwV5YIiYYgMj2uBfidDGzI30kq8nmWPoFs4W4KVLfBDEvO+mAQn4Pu/Ff8
lxzilOcxjnfOYl/BEl8An4Zicp80Vrh1tNjjShx4IQra/EqA
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:01 2025 by rpki-client