Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25e9c1d-5728-31af-8972-a301f57f3e78.roa
File:                     f25e9c1d-5728-31af-8972-a301f57f3e78.roa (raw, json)
Hash identifier:          QR61yxGSHfz/MblUWRrdYg/iobNA1IjrPe+IUwNwwcQ=
Subject key identifier:   E1:82:FD:B6:5D:51:7F:A1:15:CD:40:0D:72:87:CE:E0:BB:54:2F:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4BAC6890D851478551869F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25e9c1d-5728-31af-8972-a301f57f3e78.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     396586
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:68:90:d8:51:47:85:51:86:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=cf6145c1-e05c-495c-a940-a8cbd29d1b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:28:1b:a8:81:4a:f3:4b:d9:a6:09:53:2b:6c:
                    1b:52:e3:02:4e:f5:40:89:ce:ad:18:2f:31:b6:07:
                    b1:50:82:05:54:73:e3:f0:66:c8:7a:fb:90:1b:9a:
                    ef:1f:6a:5f:2d:8d:1e:2c:9b:f1:e1:d3:de:d5:18:
                    f7:f4:01:0b:8b:a8:a4:ed:5c:c5:b2:18:b5:16:12:
                    dc:7c:e5:be:2e:46:71:e9:81:c5:13:79:c6:7c:69:
                    f4:9b:a1:31:14:f8:70:40:7a:9d:a3:c9:c8:28:18:
                    78:1f:f2:69:57:58:10:34:0e:0a:6b:44:83:7f:2f:
                    d6:60:23:a0:04:fd:df:da:39:b9:f3:a6:98:2e:02:
                    3f:aa:ea:2b:6a:bc:ce:46:85:50:39:05:79:80:ac:
                    fc:3b:38:81:8c:0a:d4:a9:0e:0a:96:12:eb:98:46:
                    8e:10:c0:15:f8:7a:91:b3:e0:5c:c9:fc:f6:dd:be:
                    7c:cb:37:be:5d:bf:a2:03:63:4f:af:2e:5e:b1:4c:
                    71:24:da:c7:1a:45:5e:74:3d:41:69:3b:b7:e7:69:
                    52:18:47:94:2f:2e:e9:6e:1c:37:68:00:bf:c3:55:
                    06:e7:fe:a6:20:a4:88:06:4f:fa:52:b6:86:26:87:
                    b5:54:1b:b2:b7:28:2b:fd:a7:f8:6d:73:80:13:4f:
                    c7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:82:FD:B6:5D:51:7F:A1:15:CD:40:0D:72:87:CE:E0:BB:54:2F:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f25e9c1d-5728-31af-8972-a301f57f3e78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:50:83:e1:2d:10:67:ac:4e:78:9d:e0:f6:cc:68:da:cb:
         46:8a:50:5b:0d:e3:db:2e:c2:96:37:f1:04:44:b3:48:fd:4e:
         6a:30:bc:6a:de:30:10:61:33:67:ca:3d:1b:a9:27:2f:05:f8:
         39:fc:66:d7:f5:6f:0e:79:04:a8:66:b3:72:98:13:bc:79:5d:
         9a:56:d3:31:c7:33:c5:73:de:cc:88:61:29:44:3b:62:75:57:
         bf:b9:c1:12:65:09:26:dd:79:29:a4:52:a2:b4:5c:41:85:53:
         72:82:92:7a:c7:c1:8d:e2:02:d0:5b:96:e6:8f:f4:4c:46:38:
         53:00:47:e9:8d:22:6b:2a:b8:c7:4b:ec:d0:e8:94:c5:76:64:
         ef:42:df:6f:72:19:d3:e9:83:ec:3b:ad:e7:a3:1e:5f:bc:72:
         27:43:b2:6a:27:7e:2a:4a:7e:c1:19:e0:21:40:b0:06:06:12:
         57:a6:5e:4b:93:9e:8e:7b:09:03:42:cb:a6:ae:88:82:f3:e4:
         d0:64:fd:d7:65:e5:9b:f6:28:c2:cc:46:23:00:44:a4:69:1b:
         fd:9a:8c:67:54:c7:a2:4a:00:4a:60:c9:fa:d5:74:7c:6d:9d:
         9b:d5:0d:fe:c1:cd:fb:59:54:bd:49:3e:12:53:62:37:f3:83:
         2a:99:e6:aa
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtLrGiQ2FFHhVGGnwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk
Y2Y2MTQ1YzEtZTA1Yy00OTVjLWE5NDAtYThjYmQyOWQxYjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ygbqIFK80vZpglTK2wbUuMCTvVAic6tGC8x
tgexUIIFVHPj8GbIevuQG5rvH2pfLY0eLJvx4dPe1Rj39AELi6ik7VzFshi1FhLc
fOW+LkZx6YHFE3nGfGn0m6ExFPhwQHqdo8nIKBh4H/JpV1gQNA4Ka0SDfy/WYCOg
BP3f2jm586aYLgI/quorarzORoVQOQV5gKz8OziBjArUqQ4KlhLrmEaOEMAV+HqR
s+Bcyfz23b58yze+Xb+iA2NPry5esUxxJNrHGkVedD1BaTu352lSGEeULy7pbhw3
aAC/w1UG5/6mIKSIBk/6UraGJoe1VBuytygr/af4bXOAE0/H3QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOGC/bZdUX+hFc1ADXKHzuC7VC/HMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjI1ZTljMWQtNTcyOC0z
MWFmLTg5NzItYTMwMWY1N2YzZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAAwFCD4S0QZ6xOeJ3g9sxo2stGilBbDePbLsKW
N/EERLNI/U5qMLxq3jAQYTNnyj0bqScvBfg5/GbX9W8OeQSoZrNymBO8eV2aVtMx
xzPFc97MiGEpRDtidVe/ucESZQkm3XkppFKitFxBhVNygpJ6x8GN4gLQW5bmj/RM
RjhTAEfpjSJrKrjHS+zQ6JTFdmTvQt9vchnT6YPsO63nox5fvHInQ7JqJ34qSn7B
GeAhQLAGBhJXpl5Lk56OewkDQsumroiC8+TQZP3XZeWb9ijCzEYjAESkaRv9moxn
VMeiSgBKYMn61XR8bZ2b1Q3+wc37WVS9ST4SU2I384Mqmeaq
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:00:52 2025 by rpki-client