Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdb4f4a3-d480-3998-8c26-d9218a358aeb.roa
File:                     fdb4f4a3-d480-3998-8c26-d9218a358aeb.roa (raw, json)
Hash identifier:          BtAEweK1dNc98ri6xgh0ELDRCrBZ6b+zace/CYyaWOg=
Subject key identifier:   4D:FC:5C:7C:71:EA:C9:12:FB:4A:C9:72:60:8B:7F:A4:13:C8:FC:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3DB6F03969FCDD9EF4EBA4C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdb4f4a3-d480-3998-8c26-d9218a358aeb.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     396578
IP address blocks:        2001:503:39c1::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:f0:39:69:fc:dd:9e:f4:eb:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=c8d8b7f3-97b1-41ba-9190-402ad36759c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:27:20:02:7b:ca:a1:fe:ff:d9:91:5a:c3:27:
                    6a:52:88:73:7a:e6:5b:29:8a:2c:db:40:fe:fa:69:
                    d6:d1:aa:e6:ae:67:18:7b:4d:fe:fa:1b:11:4a:fb:
                    73:de:6e:28:bf:b7:ed:29:c9:50:c1:73:43:74:9f:
                    59:bd:34:4a:88:d6:0d:15:1b:45:ab:d9:26:23:aa:
                    11:03:b2:51:4d:4f:8a:38:83:2a:0c:a7:fc:64:1e:
                    af:4b:af:23:5f:45:78:55:f4:b1:96:f1:0c:8e:03:
                    ed:29:41:7a:e8:bc:ec:b7:a4:f2:5a:d1:82:15:d9:
                    5a:70:42:d3:e5:eb:a6:f0:35:49:ff:68:e0:2d:07:
                    ef:be:17:0f:bf:fb:e4:9b:46:29:7b:04:fa:4b:d4:
                    02:6a:c0:0f:d2:53:2f:55:7f:22:8d:77:bd:3e:3e:
                    df:10:39:05:a5:0a:e5:92:a7:19:57:57:8c:60:89:
                    02:ae:0e:d5:f4:87:cb:84:99:a6:8b:15:88:bf:80:
                    c3:5f:b5:e4:cb:a1:2a:69:78:19:bd:8e:fe:3e:66:
                    ee:50:fc:5f:87:8b:95:b8:bf:e4:60:49:0e:60:98:
                    a6:09:b3:d6:7b:57:39:e2:96:61:02:5a:2b:01:e5:
                    ee:b8:98:78:75:0f:b1:28:5c:0d:d5:d3:4a:ba:9e:
                    74:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:FC:5C:7C:71:EA:C9:12:FB:4A:C9:72:60:8B:7F:A4:13:C8:FC:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdb4f4a3-d480-3998-8c26-d9218a358aeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:39c1:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4a:e8:44:c3:2c:2e:aa:97:e1:e0:de:79:9b:77:84:6b:59:
         c2:24:57:4c:e3:be:3c:dc:d7:ec:65:86:65:34:00:78:38:74:
         20:48:71:2f:5e:ae:6f:b5:6c:30:ca:f0:f9:fe:2b:d5:3a:0c:
         97:5b:28:45:75:95:8b:a5:cf:99:d6:84:e1:41:8b:82:c3:88:
         65:d2:b5:6f:80:9b:e2:ea:3d:dd:c4:9d:44:c9:b4:0a:6a:8e:
         02:48:bf:8a:8f:fa:17:32:55:b9:4e:27:63:a6:05:dc:2f:20:
         f6:de:28:a3:cd:82:23:fe:06:54:3e:14:99:2c:43:b3:3f:01:
         c5:31:84:bb:6e:19:53:72:c1:5f:ca:04:44:c0:1e:93:e0:ff:
         de:e9:b2:47:9a:ec:5a:67:1b:31:d1:b8:c6:24:e3:85:1a:56:
         5c:23:bf:80:55:8e:ab:92:40:34:65:29:c4:51:1e:20:10:cd:
         68:a1:12:28:6f:f4:6d:93:59:89:6c:0c:19:24:9d:da:f3:20:
         06:f4:ae:c0:59:e7:5e:90:82:ad:8e:e5:93:43:92:82:d4:0a:
         26:e6:47:08:f1:bd:04:ff:6a:8c:91:33:2a:0d:98:c6:01:c3:
         8b:fc:e4:49:33:06:25:6c:bf:b1:b0:95:fd:24:fb:5a:25:e0:
         f4:29:f9:bf
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs9tvA5afzdnvTrpMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
YzhkOGI3ZjMtOTdiMS00MWJhLTkxOTAtNDAyYWQzNjc1OWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiicgAnvKof7/2ZFawydqUohzeuZbKYos20D+
+mnW0armrmcYe03++hsRSvtz3m4ov7ftKclQwXNDdJ9ZvTRKiNYNFRtFq9kmI6oR
A7JRTU+KOIMqDKf8ZB6vS68jX0V4VfSxlvEMjgPtKUF66Lzst6TyWtGCFdlacELT
5eum8DVJ/2jgLQfvvhcPv/vkm0YpewT6S9QCasAP0lMvVX8ijXe9Pj7fEDkFpQrl
kqcZV1eMYIkCrg7V9IfLhJmmixWIv4DDX7Xky6EqaXgZvY7+PmbuUPxfh4uVuL/k
YEkOYJimCbPWe1c54pZhAlorAeXuuJh4dQ+xKFwN1dNKup50zQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFE38XHxx6skS+0rJcmCLf6QTyPysMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmRiNGY0YTMtZDQ4MC0z
OTk4LThjMjYtZDkyMThhMzU4YWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAznB
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBwSuhEwywuqpfh4N55m3eEa1nCJFdM47483Nfs
ZYZlNAB4OHQgSHEvXq5vtWwwyvD5/ivVOgyXWyhFdZWLpc+Z1oThQYuCw4hl0rVv
gJvi6j3dxJ1EybQKao4CSL+Kj/oXMlW5TidjpgXcLyD23iijzYIj/gZUPhSZLEOz
PwHFMYS7bhlTcsFfygREwB6T4P/e6bJHmuxaZxsx0bjGJOOFGlZcI7+AVY6rkkA0
ZSnEUR4gEM1ooRIob/Rtk1mJbAwZJJ3a8yAG9K7AWedekIKtjuWTQ5KC1Aom5kcI
8b0E/2qMkTMqDZjGAcOL/ORJMwYlbL+xsJX9JPtaJeD0Kfm/
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:32 2025 by rpki-client