Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa
File:                     f95efeb0-478b-3005-ad06-ce323f2af52b.roa (raw, json)
Hash identifier:          ZS8d9XJYpwXTdpKePwCTzcClP6VTVxbY4yO53i1eR8k=
Subject key identifier:   95:BA:4C:7B:C3:15:77:E8:32:02:EE:99:1D:95:C3:B1:63:0F:37:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B5F3752173A08287D10F00C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     32651
IP address blocks:        2001:500:133::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:52:17:3a:08:28:7d:10:f0:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=e76f2636-dca5-438d-8eb6-830214c5bcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d3:86:d2:56:0a:22:75:a2:a6:bc:0d:14:8d:
                    87:90:b1:e0:fc:c5:e0:29:26:62:7a:2d:9d:b3:25:
                    f3:7c:20:91:88:c6:68:f3:47:35:22:3c:51:15:e4:
                    37:b2:0c:5d:ad:cb:2c:a7:c8:3a:3d:9f:63:76:03:
                    3a:59:6f:cd:0d:23:cc:6c:2c:dc:6e:65:8c:54:d7:
                    d3:19:3e:6d:42:cd:b2:3b:ab:14:50:2d:49:c7:29:
                    6b:ec:61:4a:fd:6d:d9:fa:cb:ae:20:a8:1d:50:ba:
                    8b:c2:51:a7:6c:7d:f8:89:2b:5c:6a:1b:bd:8e:cb:
                    60:43:08:0c:43:52:bf:a3:e4:c2:07:40:ca:10:a5:
                    51:b8:97:c4:94:e3:ec:b5:98:cd:61:23:41:c7:0a:
                    b9:ce:01:73:6a:b9:a8:29:5e:2c:ed:81:42:36:5e:
                    e1:90:bb:0a:38:90:34:4a:f6:e0:3e:6e:24:f4:f4:
                    f3:92:a6:97:b8:4d:f9:dd:10:9c:b7:14:ba:f0:2b:
                    fb:3d:c2:8d:d6:c6:63:58:1e:ad:ca:af:5e:cc:d3:
                    6a:56:41:8a:65:5d:c4:35:8f:3b:29:12:53:86:c8:
                    fe:b3:02:17:dd:0c:c6:d8:c9:e5:d9:5c:59:88:0e:
                    5e:b0:d1:29:41:1d:be:e7:84:06:3e:99:dd:a8:cd:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:BA:4C:7B:C3:15:77:E8:32:02:EE:99:1D:95:C3:B1:63:0F:37:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:133:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:36:f9:29:e4:d5:ce:33:5c:be:6e:b2:12:2a:a3:3f:13:1c:
         62:45:07:c2:ac:85:5e:79:30:10:a1:16:78:71:a5:fc:01:f7:
         83:3a:fe:03:5c:8d:2d:19:1f:43:bd:c1:a6:cb:23:31:3b:84:
         ad:a4:74:fb:fa:79:0f:fa:5e:5d:2f:92:85:1c:15:63:6f:71:
         85:31:2e:3b:76:92:1b:30:24:e1:aa:9c:55:2e:01:14:a5:9c:
         bb:07:09:78:f6:b7:00:e5:c1:55:73:94:e7:c6:b9:14:4f:77:
         30:77:6e:86:6a:ad:d6:1b:52:de:56:f9:a8:36:b2:ec:77:1e:
         88:e4:14:5a:ca:44:bf:6d:a1:7f:3d:b2:7d:dc:6f:61:74:e3:
         15:cb:ce:a3:11:5a:bf:35:22:86:15:99:21:ac:ee:7f:bd:54:
         e0:64:d8:6a:2a:db:56:4e:75:62:b2:f0:51:0d:c0:5b:49:60:
         7e:8e:8e:aa:0d:8f:58:76:32:1c:8e:55:fd:b7:cf:4e:e2:9a:
         b8:bb:7e:68:df:c1:90:ef:5c:86:47:54:0c:c7:29:2c:bb:e5:
         b4:d6:76:71:0c:8a:84:d5:74:31:1d:64:94:43:a2:ee:b4:7a:
         8b:d1:d1:bf:4b:1c:92:6e:7d:11:e9:6b:2d:76:d1:5d:96:6c:
         85:f1:cc:83
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEtfN1IXOggofRDwDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk
ZTc2ZjI2MzYtZGNhNS00MzhkLThlYjYtODMwMjE0YzViY2ZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNOG0lYKInWiprwNFI2HkLHg/MXgKSZiei2d
syXzfCCRiMZo80c1IjxRFeQ3sgxdrcssp8g6PZ9jdgM6WW/NDSPMbCzcbmWMVNfT
GT5tQs2yO6sUUC1Jxylr7GFK/W3Z+suuIKgdULqLwlGnbH34iStcahu9jstgQwgM
Q1K/o+TCB0DKEKVRuJfElOPstZjNYSNBxwq5zgFzarmoKV4s7YFCNl7hkLsKOJA0
SvbgPm4k9PTzkqaXuE353RCctxS68Cv7PcKN1sZjWB6tyq9ezNNqVkGKZV3ENY87
KRJThsj+swIX3QzG2Mnl2VxZiA5esNEpQR2+54QGPpndqM0p+wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJW6THvDFXfoMgLumR2Vw7FjDzdwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk1ZWZlYjAtNDc4Yi0z
MDA1LWFkMDYtY2UzMjNmMmFmNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCJNvkp5NXOM1y+brISKqM/ExxiRQfCrIVeeTAQ
oRZ4caX8AfeDOv4DXI0tGR9DvcGmyyMxO4StpHT7+nkP+l5dL5KFHBVjb3GFMS47
dpIbMCThqpxVLgEUpZy7Bwl49rcA5cFVc5TnxrkUT3cwd26Gaq3WG1LeVvmoNrLs
dx6I5BRaykS/baF/PbJ93G9hdOMVy86jEVq/NSKGFZkhrO5/vVTgZNhqKttWTnVi
svBRDcBbSWB+jo6qDY9YdjIcjlX9t89O4pq4u35o38GQ71yGR1QMxyksu+W01nZx
DIqE1XQxHWSUQ6LutHqL0dG/SxySbn0R6WstdtFdlmyF8cyD
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:06:22 2025 by rpki-client