Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044196f9-479b-39d4-b01e-b7ec0489f31d.roa
File:                     044196f9-479b-39d4-b01e-b7ec0489f31d.roa (raw, json)
Hash identifier:          rBkOxjh/2GmYZj6WjJxkp6VQ/KokKJ9+EKNj7gcWXuQ=
Subject key identifier:   89:0B:34:12:82:67:C3:FC:18:55:3F:E9:44:21:67:B6:A4:29:4E:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E6035E993D9447A8838200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044196f9-479b-39d4-b01e-b7ec0489f31d.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     396603
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:03:5e:99:3d:94:47:a8:83:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=7c162698-2fcf-4167-996f-579948551847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:8f:43:ef:45:7c:5c:1c:88:f4:d6:8c:9a:
                    b5:8f:4a:f6:94:6f:b8:b4:ae:e3:4f:21:5b:a6:f9:
                    47:b0:25:36:8b:ed:87:68:b2:41:ce:8e:3f:7c:3e:
                    d1:74:ea:b5:88:da:d7:b0:52:08:b1:3a:bd:f1:52:
                    c6:0d:79:48:71:95:eb:56:53:53:2d:68:c7:bd:f7:
                    43:50:64:37:7e:85:bf:d3:ba:06:22:3a:9c:05:9c:
                    18:58:39:db:3b:12:6d:ec:fe:45:b0:c3:c1:b0:d7:
                    96:ea:02:75:7c:c8:ef:af:ec:dd:71:b7:31:24:e7:
                    43:01:07:fa:29:89:a5:75:dd:d5:f6:df:05:25:11:
                    e3:ae:95:dd:2f:3a:c4:ff:14:d9:d6:93:6d:13:bb:
                    44:62:1c:c9:14:1c:2f:0b:a2:0a:f8:a6:2c:07:54:
                    8e:41:0f:c8:5e:1c:5e:b8:0f:e2:f9:53:8c:20:21:
                    93:4c:f9:a0:f2:79:3b:56:2a:dc:2d:b5:c0:2c:37:
                    b1:02:ba:5a:a4:5a:02:c2:d8:d1:65:4d:9b:d1:a5:
                    f5:12:49:97:68:2c:a2:56:5b:68:bd:dc:8c:16:7e:
                    ec:23:a6:e6:65:f3:27:e1:95:c1:89:35:aa:77:6d:
                    08:77:3f:48:21:e1:ab:d7:f7:da:c9:00:fa:86:15:
                    92:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0B:34:12:82:67:C3:FC:18:55:3F:E9:44:21:67:B6:A4:29:4E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/044196f9-479b-39d4-b01e-b7ec0489f31d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:22:d8:9a:4d:f3:9d:f6:20:99:02:1a:b7:e6:d1:05:6a:ae:
         c7:02:ab:95:a3:b7:d7:7e:f5:8d:90:00:db:7b:32:a9:6f:c0:
         1a:0e:3d:f5:06:4d:70:a5:14:5b:23:c2:53:fc:38:d2:40:db:
         cf:79:74:0e:b3:2b:df:e6:bc:33:41:66:fe:d3:25:d6:63:b5:
         5c:b7:7f:aa:6e:42:32:4c:b7:70:4f:2b:c6:98:05:99:eb:68:
         1d:09:31:18:12:00:fa:eb:9f:92:8f:43:8c:30:8c:6b:e2:43:
         f9:1e:ba:49:c0:da:1a:a4:dc:9e:29:31:33:8c:1c:f0:29:2b:
         87:3d:a2:3c:b9:ed:93:50:2b:37:5f:9b:df:0e:b6:09:13:17:
         33:9b:fd:da:c1:c1:16:57:4c:c9:75:6d:80:8f:aa:b0:a2:88:
         ad:c8:b7:c4:a1:55:32:37:64:f6:5f:51:bd:ad:2a:2d:26:db:
         43:1e:6a:c8:4d:97:8a:7f:6b:aa:93:b7:66:06:67:a2:3f:54:
         f3:be:f1:a8:69:5f:1d:d2:59:27:de:71:52:b0:d9:35:0c:69:
         28:d4:7e:64:b5:29:31:12:69:b0:d5:64:ac:6e:d0:24:db:8f:
         38:69:7d:d2:df:7d:88:34:20:d3:c9:8d:4e:75:1d:85:c6:47:
         28:01:a1:6b
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp45gNemT2UR6iDggAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk
N2MxNjI2OTgtMmZjZi00MTY3LTk5NmYtNTc5OTQ4NTUxODQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld2PQ+9FfFwciPTWjJq1j0r2lG+4tK7jTyFb
pvlHsCU2i+2HaLJBzo4/fD7RdOq1iNrXsFIIsTq98VLGDXlIcZXrVlNTLWjHvfdD
UGQ3foW/07oGIjqcBZwYWDnbOxJt7P5FsMPBsNeW6gJ1fMjvr+zdcbcxJOdDAQf6
KYmldd3V9t8FJRHjrpXdLzrE/xTZ1pNtE7tEYhzJFBwvC6IK+KYsB1SOQQ/IXhxe
uA/i+VOMICGTTPmg8nk7VircLbXALDexArpapFoCwtjRZU2b0aX1EkmXaCyiVlto
vdyMFn7sI6bmZfMn4ZXBiTWqd20Idz9IIeGr1/fayQD6hhWSmwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIkLNBKCZ8P8GFU/6UQhZ7akKU5hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDQ0MTk2ZjktNDc5Yi0z
OWQ0LWIwMWUtYjdlYzA0ODlmMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCTItiaTfOd9iCZAhq35tEFaq7HAquVo7fXfvWN
kADbezKpb8AaDj31Bk1wpRRbI8JT/DjSQNvPeXQOsyvf5rwzQWb+0yXWY7Vct3+q
bkIyTLdwTyvGmAWZ62gdCTEYEgD665+Sj0OMMIxr4kP5HrpJwNoapNyeKTEzjBzw
KSuHPaI8ue2TUCs3X5vfDrYJExczm/3awcEWV0zJdW2Aj6qwooityLfEoVUyN2T2
X1G9rSotJttDHmrITZeKf2uqk7dmBmeiP1TzvvGoaV8d0lkn3nFSsNk1DGko1H5k
tSkxEmmw1WSsbtAk2484aX3S332INCDTyY1OdR2FxkcoAaFr
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:17:22 2025 by rpki-client