Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8fa82a-0b84-3770-b023-da7762a7dad3.roa
File:                     fa8fa82a-0b84-3770-b023-da7762a7dad3.roa (raw, json)
Hash identifier:          1JX6xzG8hOV6OIjT/SU175xBwFRqZ0dsSkvnXGZAGyw=
Subject key identifier:   9A:05:CA:F5:EB:C5:0C:12:2F:79:91:D0:55:92:6F:D7:CD:D3:B0:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B79BCCC2458BF20327DE16D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8fa82a-0b84-3770-b023-da7762a7dad3.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     396542
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:cc:24:58:bf:20:32:7d:e1:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=b87e74ad-2b85-4e6d-8e54-946df2977938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:bc:ab:f3:ca:4f:eb:d7:99:04:f8:a0:d4:
                    79:e3:9f:2e:ac:32:37:a1:a9:05:71:d0:cf:02:53:
                    f1:b9:fa:e3:cd:68:fa:7d:c7:ae:e2:aa:e8:83:2d:
                    7b:9d:11:a5:11:fa:fc:fa:82:1e:9a:58:9e:97:76:
                    aa:0b:6a:4e:ed:60:3b:85:a7:8e:84:ec:86:f4:b5:
                    b5:b8:4b:6c:7d:5d:2a:c9:ff:06:66:5e:dc:7d:f2:
                    3a:49:6f:c2:bb:68:b8:30:ff:a5:c6:be:11:96:00:
                    48:e3:25:78:5e:62:e0:00:61:ff:ed:b4:b1:e8:e7:
                    2b:e0:fb:bf:84:c1:a8:8c:c1:ca:c0:d5:c6:56:d3:
                    fb:70:39:c2:12:d4:44:45:f8:92:91:d1:d5:b1:82:
                    4e:58:1a:af:24:7e:61:5e:a5:ed:f7:a8:11:19:c3:
                    e4:63:78:a4:82:18:dc:6e:d1:77:35:df:30:96:d0:
                    c9:67:64:e7:1e:6e:dd:8f:96:50:e7:60:e4:a4:a2:
                    8b:10:67:26:64:f9:e5:de:2a:14:ed:91:42:e7:0b:
                    26:a7:40:02:9f:c4:b9:a6:d4:fd:95:5b:36:bb:b8:
                    85:b4:05:f6:43:9c:26:de:68:d3:be:dc:1f:53:33:
                    7d:2d:d4:a1:b5:b9:8b:8a:b8:fe:8f:25:16:93:86:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:CA:F5:EB:C5:0C:12:2F:79:91:D0:55:92:6F:D7:CD:D3:B0:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa8fa82a-0b84-3770-b023-da7762a7dad3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:35:c8:35:9b:7b:7f:ae:7c:d6:6f:11:ff:34:40:ed:3a:6e:
         1a:ac:62:eb:1e:49:70:ff:34:21:0e:91:62:ba:c1:e6:92:ff:
         5b:04:78:50:55:81:7d:a7:ed:b2:a4:10:1b:bb:7c:8d:4a:55:
         90:03:73:a0:eb:4b:41:8d:60:76:79:f3:7c:e6:01:3e:1d:92:
         65:05:f8:8d:5d:1d:33:06:e9:67:6c:fa:26:5b:1a:69:73:53:
         b0:b3:c1:87:f0:e0:80:77:6a:07:d5:8a:24:f6:0c:c9:0e:ad:
         86:2f:7e:42:86:c6:80:72:c2:0d:84:b1:e3:20:02:01:b5:9a:
         d6:3f:ad:26:7b:d9:c0:d1:11:dd:53:c0:62:d8:92:58:a4:9a:
         7f:00:73:47:7b:4a:c2:8b:e1:a4:39:78:d1:b1:b4:b7:1b:1f:
         33:cc:8c:c4:16:35:ed:50:29:51:b7:9b:68:9a:5b:6b:d3:c5:
         88:a0:6f:2b:9d:98:f1:b7:4d:44:1f:3e:5d:9e:7f:73:10:8c:
         d7:74:6c:c0:a5:28:82:41:22:b8:8a:c4:86:09:6e:60:8e:0e:
         5b:e8:a2:20:87:fc:89:6e:8a:c9:3c:b7:12:11:fc:2f:13:0b:
         0c:41:ee:cd:2b:42:9e:7f:28:22:96:3c:f4:20:51:1e:7a:64:
         d7:5e:dd:bd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt5vMwkWL8gMn3hbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk
Yjg3ZTc0YWQtMmI4NS00ZTZkLThlNTQtOTQ2ZGYyOTc3OTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/+8q/PKT+vXmQT4oNR5458urDI3oakFcdDP
AlPxufrjzWj6fceu4qrogy17nRGlEfr8+oIemliel3aqC2pO7WA7haeOhOyG9LW1
uEtsfV0qyf8GZl7cffI6SW/Cu2i4MP+lxr4RlgBI4yV4XmLgAGH/7bSx6Ocr4Pu/
hMGojMHKwNXGVtP7cDnCEtRERfiSkdHVsYJOWBqvJH5hXqXt96gRGcPkY3ikghjc
btF3Nd8wltDJZ2TnHm7dj5ZQ52DkpKKLEGcmZPnl3ioU7ZFC5wsmp0ACn8S5ptT9
lVs2u7iFtAX2Q5wm3mjTvtwfUzN9LdShtbmLirj+jyUWk4ZQbQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJoFyvXrxQwSL3mR0FWSb9fN07AEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmE4ZmE4MmEtMGI4NC0z
NzcwLWIwMjMtZGE3NzYyYTdkYWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD81yDWbe3+ufNZvEf80QO06bhqsYuseSXD/NCEOkWK6weaS/1sE
eFBVgX2n7bKkEBu7fI1KVZADc6DrS0GNYHZ583zmAT4dkmUF+I1dHTMG6Wds+iZb
GmlzU7CzwYfw4IB3agfViiT2DMkOrYYvfkKGxoBywg2EseMgAgG1mtY/rSZ72cDR
Ed1TwGLYklikmn8Ac0d7SsKL4aQ5eNGxtLcbHzPMjMQWNe1QKVG3m2iaW2vTxYig
byudmPG3TUQfPl2ef3MQjNd0bMClKIJBIriKxIYJbmCODlvooiCH/Iluisk8txIR
/C8TCwxB7s0rQp5/KCKWPPQgUR56ZNde3b0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:32:56 2025 by rpki-client