Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53596c42-f771-3a3b-ab85-f6662f18c46e.roa
File:                     53596c42-f771-3a3b-ab85-f6662f18c46e.roa (raw, json)
Hash identifier:          Xm9BIFi6IS+CZ836dN4gs0VM839x5pvkMAqgoqJMJDc=
Subject key identifier:   04:5B:D2:B4:06:3C:E8:25:00:2C:75:EF:43:8C:27:41:20:CB:FD:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9A5C4C68284993E96913B4E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53596c42-f771-3a3b-ab85-f6662f18c46e.roa
Signing time:             Tue 22 Jul 2025 12:41:13 +0000
ROA not before:           Tue 22 Jul 2025 12:41:13 +0000
ROA not after:            Mon 20 Oct 2025 12:41:13 +0000
asID:                     396612
IP address blocks:        2001:500:127::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:5c:4c:68:28:49:93:e9:69:13:b4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 12:41:13 2025 GMT
            Not After : Oct 20 12:41:13 2025 GMT
        Subject: CN=e9e372ca-2399-4d27-869c-24e8316b0afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:fb:71:73:19:95:d1:26:20:ad:5b:55:20:
                    78:bb:e9:c6:d4:e9:10:61:1c:95:a0:03:83:19:d9:
                    0c:60:59:d3:77:a7:06:07:52:4b:d2:49:48:f3:d5:
                    5b:42:f3:e2:5f:93:ee:0b:92:05:e4:42:1e:12:cb:
                    0c:76:21:e1:d4:c8:f7:b5:b5:92:2a:6b:65:e5:26:
                    94:8a:70:de:fa:ed:b0:51:cc:56:b8:91:a3:bf:d4:
                    82:58:7e:b4:8a:53:5b:2b:ac:35:48:98:ba:8a:35:
                    9e:33:15:3b:c4:a9:74:42:a6:e5:fe:d7:c2:55:bb:
                    d7:e3:8a:de:78:ad:90:a4:d7:b8:37:70:37:18:12:
                    72:96:1e:af:7e:92:c2:c4:1c:d5:f9:da:96:b4:b9:
                    ae:f0:32:bc:d3:71:9d:a5:cf:7d:a0:aa:84:6a:e2:
                    12:d9:47:89:74:18:b9:48:67:c7:b3:ac:67:05:68:
                    b7:98:b2:fa:3f:28:44:af:ce:31:dc:19:8a:86:f3:
                    fc:89:0f:f5:ae:d9:ef:9a:6c:1a:b6:92:ef:87:87:
                    9e:26:87:4e:59:d3:20:13:f2:aa:8f:04:cb:a5:9c:
                    57:73:ba:91:73:2a:e6:60:11:34:e0:25:61:a7:68:
                    09:40:a3:ad:51:8b:02:75:f0:5c:ff:0d:05:e5:55:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5B:D2:B4:06:3C:E8:25:00:2C:75:EF:43:8C:27:41:20:CB:FD:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/53596c42-f771-3a3b-ab85-f6662f18c46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2c:36:a0:f4:5a:a4:d6:c5:39:30:95:c5:9b:46:ac:5f:25:
         77:c2:10:38:c9:cf:60:dc:32:6d:4c:9b:6d:d8:64:88:2e:4f:
         2d:ee:0f:3f:a8:f4:6b:35:e5:b6:e5:d4:28:7e:af:d3:46:df:
         07:3b:d2:96:fe:b9:69:98:0c:c6:6e:6d:c4:34:b7:33:15:38:
         4c:d1:6a:6d:a6:44:63:2b:c5:d8:93:21:92:dc:a6:b2:b5:e3:
         dc:d2:b9:ba:6d:fb:61:11:f3:9c:a8:35:cc:0d:d3:bc:59:98:
         46:15:37:ad:44:0d:50:45:19:41:3d:77:60:d2:78:5b:8e:16:
         f6:07:55:ae:eb:06:8a:c9:7c:5c:bd:b3:88:76:b1:46:5f:68:
         32:75:09:92:df:37:67:a7:e1:4c:13:86:54:26:14:b2:b1:1c:
         38:fa:ab:1d:c8:14:09:d6:50:f8:9b:14:0a:6d:b9:81:f8:02:
         55:7c:39:35:7e:95:d9:ae:53:c2:e9:a4:67:2d:7b:81:da:ce:
         72:b2:ae:ee:52:96:3d:88:e0:c6:3e:ca:07:6c:5e:ec:41:ce:
         f9:82:e8:d3:43:8b:a2:7b:26:90:d7:56:b9:ef:5d:6f:9e:73:
         cb:bc:8e:ea:d0:62:fe:69:39:bb:14:e7:88:c6:1d:1c:57:34:
         3a:9b:5f:94
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqaXExoKEmT6WkTtOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyMjEyNDExM1oXDTI1MTAyMDEyNDExM1owLzEtMCsGA1UEAxMk
ZTllMzcyY2EtMjM5OS00ZDI3LTg2OWMtMjRlODMxNmIwYWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo77cXMZldEmIK1bVSB4u+nG1OkQYRyVoAOD
GdkMYFnTd6cGB1JL0klI89VbQvPiX5PuC5IF5EIeEssMdiHh1Mj3tbWSKmtl5SaU
inDe+u2wUcxWuJGjv9SCWH60ilNbK6w1SJi6ijWeMxU7xKl0Qqbl/tfCVbvX44re
eK2QpNe4N3A3GBJylh6vfpLCxBzV+dqWtLmu8DK803Gdpc99oKqEauIS2UeJdBi5
SGfHs6xnBWi3mLL6PyhEr84x3BmKhvP8iQ/1rtnvmmwatpLvh4eeJodOWdMgE/Kq
jwTLpZxXc7qRcyrmYBE04CVhp2gJQKOtUYsCdfBc/w0F5VU9IQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFARb0rQGPOglACx170OMJ0Egy/0RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTM1OTZjNDItZjc3MS0z
YTNiLWFiODUtZjY2NjJmMThjNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJcsNqD0WqTWxTkwlcWbRqxfJXfCEDjJz2DcMm1Mm23YZIguTy3u
Dz+o9Gs15bbl1Ch+r9NG3wc70pb+uWmYDMZubcQ0tzMVOEzRam2mRGMrxdiTIZLc
prK149zSubpt+2ER85yoNcwN07xZmEYVN61EDVBFGUE9d2DSeFuOFvYHVa7rBorJ
fFy9s4h2sUZfaDJ1CZLfN2en4UwThlQmFLKxHDj6qx3IFAnWUPibFAptuYH4AlV8
OTV+ldmuU8LppGcte4HaznKyru5Slj2I4MY+ygdsXuxBzvmC6NNDi6J7JpDXVrnv
XW+ec8u8jurQYv5pObsU54jGHRxXNDqbX5Q=
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:18:09 2025 by rpki-client