Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa
File:                     3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa (raw, json)
Hash identifier:          O9voGQ9Q9NhKE+r4mRqNxGtDQRlwK5uABPLRQYvUSg4=
Subject key identifier:   B4:78:73:56:6E:C2:EB:9B:9D:D5:E3:C1:0F:DC:C2:C5:70:22:38:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A86CF9E66B2C4329DF24DECAC
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa
Signing time:             Tue 15 Jul 2025 12:37:24 +0000
ROA not before:           Tue 15 Jul 2025 12:37:24 +0000
ROA not after:            Mon 13 Oct 2025 12:37:24 +0000
asID:                     22547
IP address blocks:        2001:500:135::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:cf:9e:66:b2:c4:32:9d:f2:4d:ec:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 12:37:24 2025 GMT
            Not After : Oct 13 12:37:24 2025 GMT
        Subject: CN=ff5cbfa3-c177-45fb-ad16-d0af8a4de789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:b5:0e:dd:bd:75:06:35:ed:31:27:0e:ff:
                    14:94:7d:a6:3a:45:1c:0d:97:93:c1:60:c9:e5:e4:
                    1e:bb:f6:b6:8d:14:09:af:15:25:c7:6c:b2:d3:2c:
                    06:48:6c:10:b0:d4:a7:d9:a9:ee:1f:5c:21:2f:2c:
                    d0:4a:34:c8:33:5c:63:ba:95:09:fa:e2:a8:b3:82:
                    3e:4b:76:f8:57:0e:11:90:5c:12:e0:c7:17:41:34:
                    94:be:08:33:9a:25:81:b4:5c:04:d5:6a:1d:a1:b5:
                    b5:fa:e2:7d:ea:9f:07:22:3a:e4:75:90:3c:2a:6e:
                    55:01:c4:55:d8:55:8b:35:89:cf:3f:40:0f:64:cb:
                    c5:db:49:f1:77:fb:68:0e:83:cc:ec:4b:bb:ab:95:
                    66:17:b1:f4:74:51:11:5f:11:5a:83:9d:54:a8:92:
                    c8:47:ea:81:1a:a0:d9:19:43:a8:d8:52:0a:94:b7:
                    78:45:e8:2e:69:4f:44:b4:1f:f7:76:ed:73:90:b5:
                    80:98:22:c5:2a:0f:ed:09:79:87:fc:f8:2d:95:68:
                    8b:c6:8c:f4:92:aa:f4:66:b8:a0:75:2c:9a:0f:e3:
                    f4:cc:e4:14:a3:f9:c8:5f:7b:eb:71:9a:6f:76:81:
                    03:11:42:44:6f:a2:ca:ff:9d:76:aa:24:b3:33:55:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:78:73:56:6E:C2:EB:9B:9D:D5:E3:C1:0F:DC:C2:C5:70:22:38:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a65a893-6bc5-3c8e-a0b4-ce2ec7d14b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:60:4a:22:bb:f0:8d:87:37:9d:11:0f:1e:a0:d0:c0:59:8a:
         90:01:b9:d7:62:b1:1e:1e:b6:c1:c2:69:bf:fd:b1:7b:06:ab:
         6c:0d:5a:1b:17:da:42:b8:7a:31:79:f9:4d:17:21:ea:59:a9:
         92:ba:69:c8:de:c7:89:1f:2f:a4:2b:d5:12:a7:ea:1b:ce:31:
         b3:4e:bf:44:ca:5a:94:db:f3:75:ea:f4:8d:e6:52:a0:b9:52:
         9b:c5:db:87:07:4c:f4:ec:ce:dd:2c:36:99:0b:d6:9b:55:8d:
         d5:50:7f:d8:a5:ec:af:eb:b1:e8:9c:82:62:ce:d4:22:f3:dc:
         2f:21:eb:7b:6f:14:7e:f1:4a:2a:25:81:a0:4a:d3:a1:71:d2:
         fe:36:7f:0b:4d:68:9d:6c:c7:02:e3:98:81:7b:bd:1a:6e:b8:
         f0:78:b6:26:6a:ca:fc:d8:b6:68:14:7f:26:ca:ea:a4:78:5f:
         4a:1d:af:bb:5b:13:b9:da:14:e4:bd:11:9e:b2:d8:57:8f:0a:
         96:69:63:57:18:30:c9:86:48:ca:b5:1d:b4:6e:11:a9:e4:9a:
         87:2c:83:76:cf:e4:b0:5e:ea:a6:c4:91:ec:b2:d7:25:f1:aa:
         95:6e:e8:60:55:03:67:ce:7f:5b:de:04:0a:57:dd:e7:42:17:
         9b:8b:58:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqGz55mssQynfJN7KwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxNTEyMzcyNFoXDTI1MTAxMzEyMzcyNFowLzEtMCsGA1UEAxMk
ZmY1Y2JmYTMtYzE3Ny00NWZiLWFkMTYtZDBhZjhhNGRlNzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH21Dt29dQY17TEnDv8UlH2mOkUcDZeTwWDJ
5eQeu/a2jRQJrxUlx2yy0ywGSGwQsNSn2anuH1whLyzQSjTIM1xjupUJ+uKos4I+
S3b4Vw4RkFwS4McXQTSUvggzmiWBtFwE1WodobW1+uJ96p8HIjrkdZA8Km5VAcRV
2FWLNYnPP0APZMvF20nxd/toDoPM7Eu7q5VmF7H0dFERXxFag51UqJLIR+qBGqDZ
GUOo2FIKlLd4ReguaU9EtB/3du1zkLWAmCLFKg/tCXmH/PgtlWiLxoz0kqr0Zrig
dSyaD+P0zOQUo/nIX3vrcZpvdoEDEUJEb6LK/512qiSzM1VjqwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLR4c1ZuwuubndXjwQ/cwsVwIjjxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E2NWE4OTMtNmJjNS0z
YzhlLWEwYjQtY2UyZWM3ZDE0Yjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALRgSiK78I2HN50RDx6g0MBZipABuddisR4etsHCab/9sXsGq2wN
WhsX2kK4ejF5+U0XIepZqZK6acjex4kfL6Qr1RKn6hvOMbNOv0TKWpTb83Xq9I3m
UqC5UpvF24cHTPTszt0sNpkL1ptVjdVQf9il7K/rseicgmLO1CLz3C8h63tvFH7x
SiolgaBK06Fx0v42fwtNaJ1sxwLjmIF7vRpuuPB4tiZqyvzYtmgUfybK6qR4X0od
r7tbE7naFOS9EZ6y2FePCpZpY1cYMMmGSMq1HbRuEankmocsg3bP5LBe6qbEkeyy
1yXxqpVu6GBVA2fOf1veBApX3edCF5uLWDo=
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:22:22 2025 by rpki-client