Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa
File:                     78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa (raw, json)
Hash identifier:          c3PTrIWvQ2XV8ApPEWalxCINDV4tGAbcSLlrABTP/mI=
Subject key identifier:   47:6A:FC:90:85:A7:59:C3:28:B2:5C:0E:58:47:0E:7D:C8:2A:F9:95
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584AD9364FBC7A44CD950BA641C0
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     22822
IP address blocks:        2001:504:1c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:4f:bc:7a:44:cd:95:0b:a6:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=cc6cf30a-d867-49d8-9835-85b4aa5c28dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6f:5e:bc:f5:1b:6e:9c:7f:ab:00:bd:6a:ee:
                    16:86:84:5e:2e:c6:cd:e0:fa:d7:3a:b2:ac:81:01:
                    de:cd:2f:9e:56:35:b6:54:a6:95:ca:20:f4:d6:30:
                    a9:fd:4a:c3:43:46:5e:2d:c3:00:b6:1e:b9:d2:24:
                    4f:56:59:18:a4:b7:05:fe:95:66:81:db:5e:56:9c:
                    6f:2c:fc:6f:3b:81:89:92:42:e7:71:c1:8f:6d:36:
                    8e:cf:08:76:b0:1b:3a:28:95:d9:93:96:2f:46:01:
                    57:2d:6c:70:91:27:65:54:92:ff:b9:db:32:a4:ee:
                    ea:e4:44:af:63:2f:d4:51:cd:7e:b1:f1:d9:53:45:
                    27:94:52:cf:38:7d:40:b1:12:69:d9:19:1d:8c:08:
                    85:78:98:b1:6a:18:3b:2e:05:e6:79:59:4a:02:16:
                    89:e1:9e:7d:04:4f:a2:2a:7d:52:0f:25:d1:44:ca:
                    62:ec:03:67:60:c4:93:ed:15:93:49:80:ef:1b:5b:
                    bf:d6:4b:1c:ad:a0:ac:98:1b:07:ff:43:49:33:f9:
                    a2:f1:70:2a:86:4d:cc:1c:f8:6f:2e:1d:dc:29:34:
                    e9:f2:6b:37:e0:cc:7b:1b:43:8c:5e:a3:c2:81:46:
                    2c:8d:f7:bf:77:77:bc:15:21:f1:d2:61:9b:db:50:
                    37:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6A:FC:90:85:A7:59:C3:28:B2:5C:0E:58:47:0E:7D:C8:2A:F9:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78faa5a1-84ab-3174-a7fe-63a1519aafb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:504:1c::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:54:54:6c:0d:59:76:7a:13:85:3a:fd:27:6d:fd:f6:cb:80:
         2c:37:57:97:c1:7d:ff:98:72:f6:54:38:38:8d:fc:cf:7f:f3:
         c4:bf:80:09:91:b8:4d:b7:68:50:87:d6:6a:4d:71:eb:be:8b:
         f3:18:3f:93:6e:84:a5:50:bd:71:38:a9:65:0a:c4:e6:12:58:
         8a:3b:27:d1:b8:a8:e0:cb:f2:4f:b6:15:70:45:12:bf:28:54:
         9b:82:25:63:d9:60:9e:9c:02:54:dc:fe:e7:78:1a:eb:42:dc:
         37:1d:f9:96:3f:60:da:65:8c:76:c6:c8:82:28:27:d2:7b:b5:
         31:d1:ea:22:20:d3:0c:f7:3b:69:9d:6a:3e:9d:da:0f:c9:ff:
         2c:82:96:0f:0f:0d:8a:9d:5b:24:0a:58:45:43:fe:fb:f7:82:
         51:df:6e:f3:39:d1:03:05:f9:70:a6:d3:e9:93:1f:2f:32:c8:
         9a:6c:d3:bd:ad:85:88:e7:0b:26:34:4d:0d:91:cd:1e:2f:0d:
         54:89:a2:59:7c:ec:63:89:64:32:7e:27:d7:6c:13:f6:a0:d6:
         0d:8d:e9:51:16:92:2e:16:b5:11:db:ce:f4:8b:d6:18:f1:22:
         47:d8:fe:28:d6:02:e0:a7:bd:ea:d3:d1:f9:80:c0:31:28:cb:
         67:68:ca:29
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErZNk+8ekTNlQumQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI1MDgxNDAxMDAzM1oXDTI1MTExMjAyMDAzM1owLzEtMCsGA1UEAxMk
Y2M2Y2YzMGEtZDg2Ny00OWQ4LTk4MzUtODViNGFhNWMyOGRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m9evPUbbpx/qwC9au4WhoReLsbN4PrXOrKs
gQHezS+eVjW2VKaVyiD01jCp/UrDQ0ZeLcMAth650iRPVlkYpLcF/pVmgdteVpxv
LPxvO4GJkkLnccGPbTaOzwh2sBs6KJXZk5YvRgFXLWxwkSdlVJL/udsypO7q5ESv
Yy/UUc1+sfHZU0UnlFLPOH1AsRJp2RkdjAiFeJixahg7LgXmeVlKAhaJ4Z59BE+i
Kn1SDyXRRMpi7ANnYMST7RWTSYDvG1u/1kscraCsmBsH/0NJM/mi8XAqhk3MHPhv
Lh3cKTTp8ms34Mx7G0OMXqPCgUYsjfe/d3e8FSHx0mGb21A3DQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEdq/JCFp1nDKLJcDlhHDn3IKvmVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvNzhmYWE1YTEtODRhYi0z
MTc0LWE3ZmUtNjNhMTUxOWFhZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAAc
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADxUVGwNWXZ6E4U6/Sdt/fbLgCw3V5fBff+YcvZUODiN/M9/88S/
gAmRuE23aFCH1mpNceu+i/MYP5NuhKVQvXE4qWUKxOYSWIo7J9G4qODL8k+2FXBF
Er8oVJuCJWPZYJ6cAlTc/ud4GutC3Dcd+ZY/YNpljHbGyIIoJ9J7tTHR6iIg0wz3
O2mdaj6d2g/J/yyClg8PDYqdWyQKWEVD/vv3glHfbvM50QMF+XCm0+mTHy8yyJps
072thYjnCyY0TQ2RzR4vDVSJoll87GOJZDJ+J9dsE/ag1g2N6VEWki4WtRHbzvSL
1hjxIkfY/ijWAuCnverT0fmAwDEoy2doyik=
-----END CERTIFICATE-----
Generated at Sun Aug 24 09:33:53 2025 by rpki-client