Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34bf8df5-58a5-3612-bbf9-a6f72a6b0987.roa
File:                     34bf8df5-58a5-3612-bbf9-a6f72a6b0987.roa (raw, json)
Hash identifier:          ye4xFrAXZTfiyGwMVOrCvem2kGsIdOiTDhSLJhX2iNQ=
Subject key identifier:   E7:9F:AB:3A:7A:56:D8:E4:FE:55:BE:4A:AE:9C:E0:FA:77:88:46:03
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C52F5F8AD9A2A3034EC20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34bf8df5-58a5-3612-bbf9-a6f72a6b0987.roa
Signing time:             Tue 22 Jul 2025 12:41:16 +0000
ROA not before:           Tue 22 Jul 2025 12:41:16 +0000
ROA not after:            Mon 20 Oct 2025 12:41:16 +0000
asID:                     396625
IP address blocks:        2001:503:c27::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:52:f5:f8:ad:9a:2a:30:34:ec:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:16 2025 GMT
            Not After : Oct 20 12:41:16 2025 GMT
        Subject: CN=67f82cb8-4ea8-4763-9cac-e2203c5df2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:1e:a8:e1:36:bb:8e:2d:bc:d2:fe:0f:d5:d8:
                    2b:30:25:5d:2f:61:05:be:c0:fb:2d:3b:74:19:84:
                    7b:7c:59:55:83:73:e7:3e:7f:70:e8:ae:78:e1:fd:
                    f6:55:93:52:c9:fc:04:4d:59:e4:a6:83:22:76:5f:
                    b5:a9:c4:06:b5:86:0f:fd:67:20:52:2b:f2:76:4a:
                    3d:00:3b:30:00:62:60:ac:f7:24:36:37:8d:8f:96:
                    56:b6:ce:1d:39:fc:fa:70:99:34:56:46:87:ac:3c:
                    a4:35:8c:6c:51:1a:59:36:f2:38:3d:67:9a:e7:23:
                    29:a3:e0:60:81:c2:24:91:ea:a9:f5:da:cd:85:52:
                    09:c9:cf:56:57:c8:73:d5:39:37:fc:cc:5e:3c:4c:
                    9d:c0:ab:b9:f7:51:5d:cb:fe:9d:fa:0f:f1:35:9f:
                    d1:22:c2:07:43:06:fe:3c:e8:1d:e5:e7:81:61:3c:
                    4a:2c:f9:a8:9e:e8:d1:27:41:79:94:fc:d2:67:57:
                    a6:74:df:9a:ba:a6:61:65:c0:52:4b:6e:ee:ca:a2:
                    eb:04:a1:05:37:25:06:cb:cf:28:1d:6e:5e:db:01:
                    ab:c7:c1:35:13:40:4e:59:1c:7b:50:af:ca:bd:64:
                    66:d9:71:f8:0c:5a:d3:62:8c:36:5c:e1:14:19:83:
                    4a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9F:AB:3A:7A:56:D8:E4:FE:55:BE:4A:AE:9C:E0:FA:77:88:46:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34bf8df5-58a5-3612-bbf9-a6f72a6b0987.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:09:fa:a2:0a:7d:2b:34:9b:28:3d:f8:12:78:1a:d6:47:21:
         f4:14:16:e5:53:0e:01:ca:21:3d:1e:12:61:e1:60:a6:c7:c7:
         c3:94:22:b8:b1:93:3a:8c:ce:ba:87:1c:19:00:27:65:d9:a7:
         6e:2f:a6:0a:51:c1:d5:45:6c:6c:8e:8b:e8:a0:21:ae:1a:0d:
         08:7c:7a:de:7c:49:72:08:1d:20:b9:5a:d5:37:38:cf:df:c7:
         f6:52:a5:f1:cc:c0:87:51:20:0e:64:1a:72:7b:f7:e1:3a:83:
         a8:41:27:a4:bc:9f:d6:0e:6c:9f:2e:32:9c:48:2d:48:2e:4d:
         0f:05:a8:aa:06:a4:56:87:3d:c7:38:9d:ca:1f:fd:ca:b5:15:
         ac:67:b5:05:6e:d4:68:bc:82:12:fb:ac:c3:c3:bb:ce:ed:cc:
         3d:b7:e2:63:f2:a3:08:18:eb:1c:45:d3:b4:2f:b0:19:0d:e2:
         92:82:cd:cf:be:5b:13:c2:88:3e:4d:28:59:41:d4:17:ae:b4:
         95:a4:29:fe:b0:77:65:37:90:f2:7c:49:e2:ab:13:d3:bc:53:
         96:96:92:14:d7:87:88:95:79:00:51:46:92:3e:0a:8c:b4:19:
         dc:b4:7b:b2:d6:cf:05:88:69:5d:d0:d0:2e:fa:ff:eb:6d:29:
         d1:bb:0e:ae
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXFL1+K2aKjA07CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyMjEyNDExNloXDTI1MTAyMDEyNDExNlowLzEtMCsGA1UEAxMk
NjdmODJjYjgtNGVhOC00NzYzLTljYWMtZTIyMDNjNWRmMmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+h6o4Ta7ji280v4P1dgrMCVdL2EFvsD7LTt0
GYR7fFlVg3PnPn9w6K544f32VZNSyfwETVnkpoMidl+1qcQGtYYP/WcgUivydko9
ADswAGJgrPckNjeNj5ZWts4dOfz6cJk0VkaHrDykNYxsURpZNvI4PWea5yMpo+Bg
gcIkkeqp9drNhVIJyc9WV8hz1Tk3/MxePEydwKu591Fdy/6d+g/xNZ/RIsIHQwb+
POgd5eeBYTxKLPmonujRJ0F5lPzSZ1emdN+auqZhZcBSS27uyqLrBKEFNyUGy88o
HW5e2wGrx8E1E0BOWRx7UK/KvWRm2XH4DFrTYow2XOEUGYNKFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOefqzp6Vtjk/lW+Sq6c4Pp3iEYDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzRiZjhkZjUtNThhNS0z
NjEyLWJiZjktYTZmNzJhNmIwOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAD4J+qIKfSs0myg9+BJ4GtZHIfQUFuVTDgHKIT0eEmHhYKbHx8OU
IrixkzqMzrqHHBkAJ2XZp24vpgpRwdVFbGyOi+igIa4aDQh8et58SXIIHSC5WtU3
OM/fx/ZSpfHMwIdRIA5kGnJ79+E6g6hBJ6S8n9YObJ8uMpxILUguTQ8FqKoGpFaH
Pcc4ncof/cq1FaxntQVu1Gi8ghL7rMPDu87tzD234mPyowgY6xxF07QvsBkN4pKC
zc++WxPCiD5NKFlB1BeutJWkKf6wd2U3kPJ8SeKrE9O8U5aWkhTXh4iVeQBRRpI+
Coy0Gdy0e7LWzwWIaV3Q0C76/+ttKdG7Dq4=
-----END CERTIFICATE-----
Generated at Fri Jul 25 00:57:27 2025 by rpki-client