Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa
File:                     1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa (raw, json)
Hash identifier:          FxknZ+ae5Ks1YgF8Rvm1f2oz3Qj5Ks1gwGOxpRh/jIk=
Subject key identifier:   51:70:89:F7:32:0F:51:99:BC:0D:A5:65:C4:94:F2:6D:38:14:5C:6F
Certificate issuer:       /CN=0c82e125-4df5-4912-a714-101a1caa5b99
Certificate serial:       010D0C9F4328584B76F2293F816E3680F2C6C280
Authority key identifier: C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     54054
IP address blocks:        2620:8c:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:29:3f:81:6e:36:80:f2:c6:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c82e125-4df5-4912-a714-101a1caa5b99
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=797c0c56-e98d-46fe-bb28-d410824cfa03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:96:d8:4c:31:65:83:be:65:1a:9d:99:6b:
                    b3:2a:30:35:9c:98:24:6c:aa:6c:f6:22:e8:6c:0d:
                    35:be:74:de:4d:97:9d:31:c4:8b:60:f1:d4:eb:d5:
                    9a:41:5a:69:0f:23:84:0b:3d:9c:2c:52:3d:ff:52:
                    d6:80:39:cc:4c:d3:01:4d:0b:b1:53:e7:0b:40:2f:
                    24:40:cb:34:4f:8c:ef:24:c3:f9:e9:08:8e:e7:ee:
                    a8:ae:57:c6:cb:fa:d7:8f:0b:a4:8d:49:61:b8:fc:
                    93:5c:04:47:5e:10:28:ba:9e:93:5b:d1:cf:5a:73:
                    4a:1b:4c:c1:97:85:b1:4f:eb:2f:2e:35:00:1d:39:
                    92:66:fd:c9:ea:ef:4a:35:04:7b:cf:de:9b:27:a4:
                    8d:f7:57:7e:d0:4d:3d:d4:1c:97:b8:55:32:ba:9f:
                    5e:52:f5:78:e3:1d:b3:a9:25:fc:d4:89:00:b4:ec:
                    06:47:c8:19:b0:ca:05:66:c9:d3:ef:26:32:91:e9:
                    73:9e:57:a6:e7:e3:d2:95:e1:2e:ae:5a:62:21:88:
                    8a:7d:a9:e4:56:d7:7d:a5:5c:fb:d4:26:47:b2:ce:
                    94:7b:99:aa:b3:8c:8e:61:41:f6:ab:49:3e:a1:df:
                    1a:84:92:fe:5c:2c:82:db:44:9a:31:ba:5c:e6:fd:
                    6c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:70:89:F7:32:0F:51:99:BC:0D:A5:65:C4:94:F2:6D:38:14:5C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/1bc0b1e6-ba1d-3c24-b678-c29bf30220e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99/0c82e125-4df5-4912-a714-101a1caa5b99.crl

            X509v3 Authority Key Identifier:
                keyid:C8:3C:B8:82:00:3B:32:08:ED:C5:10:F7:50:10:E0:68:D4:96:44:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c82e125-4df5-4912-a714-101a1caa5b99.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:8c:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:7f:59:9e:b5:c0:0b:25:c0:97:8c:4d:08:64:14:d5:96:23:
         81:ed:32:8c:dc:4b:2d:d5:ae:93:80:39:0c:19:10:48:6b:c1:
         35:89:96:31:c7:66:47:8a:d2:a6:75:8e:31:76:0a:f3:af:73:
         f4:c4:62:0e:48:06:18:20:7d:b1:d5:01:4a:aa:75:7b:85:05:
         3c:b7:33:43:98:09:80:2f:11:d6:6a:c6:91:4b:6d:2f:7b:7b:
         b9:3e:34:ee:9e:98:ba:f6:d4:89:65:96:36:62:2d:0b:b4:21:
         b3:3b:e5:41:63:d8:d6:b0:17:06:f5:6f:4b:69:11:02:67:10:
         c9:09:2b:5b:8f:9b:b4:05:40:9f:47:50:18:9b:d8:46:03:31:
         6e:ce:56:63:f6:1a:93:86:70:3b:5b:48:db:51:2a:c7:bb:ad:
         5b:f5:ea:ba:f6:f1:7c:01:1d:dc:e0:37:58:e1:06:c5:23:4f:
         ee:9e:5d:3b:e0:c9:95:a4:23:70:cf:60:15:2c:52:b3:39:9c:
         18:a6:12:b8:61:09:d2:16:07:6a:0a:d2:f8:c5:0e:17:db:fd:
         83:81:50:c5:9c:ed:6b:f8:19:0f:34:69:c1:b6:85:7d:43:52:
         d1:7d:9d:c3:9d:47:72:6d:97:ee:e3:18:83:30:f8:8b:30:86:
         56:e0:90:6c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEt28ik/gW42gPLGwoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGM4MmUxMjUtNGRmNS00OTEyLWE3MTQtMTAxYTFjYWE1
Yjk5MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
Nzk3YzBjNTYtZTk4ZC00NmZlLWJiMjgtZDQxMDgyNGNmYTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPWW2EwxZYO+ZRqdmWuzKjA1nJgkbKps9iLo
bA01vnTeTZedMcSLYPHU69WaQVppDyOECz2cLFI9/1LWgDnMTNMBTQuxU+cLQC8k
QMs0T4zvJMP56QiO5+6orlfGy/rXjwukjUlhuPyTXARHXhAoup6TW9HPWnNKG0zB
l4WxT+svLjUAHTmSZv3J6u9KNQR7z96bJ6SN91d+0E091ByXuFUyup9eUvV44x2z
qSX81IkAtOwGR8gZsMoFZsnT7yYykelznlem5+PSleEurlpiIYiKfankVtd9pVz7
1CZHss6Ue5mqs4yOYUH2q0k+od8ahJL+XCyC20SaMbpc5v1sJQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFFwifcyD1GZvA2lZcSU8m04FFxvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzgy
ZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFhMWNhYTViOTkvMWJjMGIxZTYtYmExZC0z
YzI0LWI2NzgtYzI5YmYzMDIyMGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGM4MmUxMjUtNGRmNS00OTEyLWE3
MTQtMTAxYTFjYWE1Yjk5LzBjODJlMTI1LTRkZjUtNDkxMi1hNzE0LTEwMWExY2Fh
NWI5OS5jcmwwHwYDVR0jBBgwFoAUyDy4ggA7MgjtxRD3UBDgaNSWRPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wYzgyZTEyNS00ZGY1LTQ5MTItYTcxNC0xMDFh
MWNhYTViOTkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAjEAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE9/WZ61wAslwJeMTQhkFNWWI4HtMozcSy3VrpOAOQwZEEhrwTWJ
ljHHZkeK0qZ1jjF2CvOvc/TEYg5IBhggfbHVAUqqdXuFBTy3M0OYCYAvEdZqxpFL
bS97e7k+NO6emLr21IllljZiLQu0IbM75UFj2NawFwb1b0tpEQJnEMkJK1uPm7QF
QJ9HUBib2EYDMW7OVmP2GpOGcDtbSNtRKse7rVv16rr28XwBHdzgN1jhBsUjT+6e
XTvgyZWkI3DPYBUsUrM5nBimErhhCdIWB2oK0vjFDhfb/YOBUMWc7Wv4GQ80acG2
hX1DUtF9ncOdR3Jtl+7jGIMw+IswhlbgkGw=
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:14:07 2025 by rpki-client