Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fed5127-47a7-30a4-a504-3a4edf3eb34f.roa
File:                     6fed5127-47a7-30a4-a504-3a4edf3eb34f.roa (raw, json)
Hash identifier:          UkxdJkA7CUIYI3GlRA43gwfxn2XP3si09Du+d/Zeq0s=
Subject key identifier:   FC:55:5B:8A:10:73:F3:9C:EC:72:DC:87:59:7F:A7:D0:24:25:84:86
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E605ACFC83B2F9C6C20600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fed5127-47a7-30a4-a504-3a4edf3eb34f.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     32651
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:05:ac:fc:83:b2:f9:c6:c2:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=2fa188ce-7416-4022-a7b2-de1c9c8b930c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:01:16:d0:a5:11:32:ca:d6:a8:47:bc:25:7b:
                    46:a9:46:a3:22:52:c1:89:e2:27:af:74:f1:e2:88:
                    50:5f:3a:e7:97:ab:1f:d9:9d:30:74:6c:76:29:fb:
                    26:55:e6:10:f8:e4:af:b9:54:bb:a6:c6:8a:53:9d:
                    d2:ac:12:ef:93:a2:1f:78:a1:0e:0f:fe:d8:06:50:
                    bd:6a:91:df:16:3a:35:e2:9c:6e:66:c1:ca:f6:2b:
                    bb:60:d5:51:c8:7b:fb:ed:3c:da:eb:70:3a:aa:16:
                    32:96:aa:31:69:bc:08:d3:8b:3f:6c:33:2b:17:c5:
                    b8:0a:15:b8:0e:d1:b4:dc:75:f2:99:45:84:65:77:
                    98:67:ba:60:73:8c:ca:01:d6:d6:39:78:b6:42:ff:
                    2e:5a:a2:59:ca:b8:7b:37:40:7b:f1:0c:2b:4f:28:
                    40:7d:8f:87:0f:f5:e4:89:13:c9:0b:76:42:fb:87:
                    40:ca:19:59:c4:5a:76:e3:8a:da:71:c9:74:b8:a4:
                    bf:31:8c:1e:14:2d:d6:d6:f1:3d:7b:8f:e5:84:2d:
                    be:0f:0c:fa:71:03:0b:67:12:6b:f9:3f:f5:f1:47:
                    0d:8f:0b:a3:ff:49:6a:21:28:73:b3:9b:a8:13:4c:
                    fb:6d:1b:01:8a:21:1d:fe:55:34:20:4f:2c:2a:97:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:55:5B:8A:10:73:F3:9C:EC:72:DC:87:59:7F:A7:D0:24:25:84:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fed5127-47a7-30a4-a504-3a4edf3eb34f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e2:6f:10:03:39:b2:73:0a:a9:83:22:f5:ea:5c:b1:b1:04:
         49:94:c7:7a:86:85:6c:3f:90:21:e4:61:6f:9b:48:f0:d9:1a:
         51:d3:d0:1d:66:63:f9:49:79:68:06:59:f0:47:44:2a:63:c3:
         59:80:42:c3:ac:1d:00:5e:55:0c:6e:71:10:84:74:ec:77:65:
         eb:2d:5e:70:f1:b9:cd:ba:b2:37:69:b6:8c:10:52:43:b1:f8:
         e4:29:c0:a8:a2:4b:c9:4a:fb:29:3b:bd:4c:01:98:c3:df:0f:
         ae:8b:f2:ec:ab:70:c0:dc:e6:3d:42:49:d5:5d:15:15:dc:99:
         99:53:a3:80:41:be:9a:4a:b3:7f:bd:61:2b:07:50:3d:c6:2a:
         b4:35:cb:8e:ae:fe:4a:f9:03:09:e9:f5:3c:de:fc:e7:c2:95:
         c7:c5:21:0c:d0:82:6b:95:0c:11:67:2d:66:c8:61:85:34:aa:
         00:50:60:86:5e:1f:c7:f6:56:df:be:a0:b8:e1:42:be:e0:5c:
         68:eb:33:5c:cb:e1:92:b8:e1:a8:bb:a4:45:47:c7:d0:e6:55:
         51:a9:a7:66:42:9f:d4:5c:75:04:93:f5:6a:22:a4:ee:86:51:
         6f:6b:67:62:16:25:91:f0:b9:29:c7:fe:b2:95:94:97:8e:3d:
         ef:ea:44:6e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp45gWs/IOy+cbCBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk
MmZhMTg4Y2UtNzQxNi00MDIyLWE3YjItZGUxYzljOGI5MzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngEW0KURMsrWqEe8JXtGqUajIlLBieInr3Tx
4ohQXzrnl6sf2Z0wdGx2KfsmVeYQ+OSvuVS7psaKU53SrBLvk6IfeKEOD/7YBlC9
apHfFjo14pxuZsHK9iu7YNVRyHv77Tza63A6qhYylqoxabwI04s/bDMrF8W4ChW4
DtG03HXymUWEZXeYZ7pgc4zKAdbWOXi2Qv8uWqJZyrh7N0B78QwrTyhAfY+HD/Xk
iRPJC3ZC+4dAyhlZxFp244raccl0uKS/MYweFC3W1vE9e4/lhC2+Dwz6cQMLZxJr
+T/18UcNjwuj/0lqIShzs5uoE0z7bRsBiiEd/lU0IE8sKpcF/wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPxVW4oQc/Oc7HLch1l/p9AkJYSGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmZlZDUxMjctNDdhNy0z
MGE0LWE1MDQtM2E0ZWRmM2ViMzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBX4m8QAzmycwqpgyL16lyxsQRJlMd6hoVsP5Ah
5GFvm0jw2RpR09AdZmP5SXloBlnwR0QqY8NZgELDrB0AXlUMbnEQhHTsd2XrLV5w
8bnNurI3abaMEFJDsfjkKcCookvJSvspO71MAZjD3w+ui/Lsq3DA3OY9QknVXRUV
3JmZU6OAQb6aSrN/vWErB1A9xiq0NcuOrv5K+QMJ6fU83vznwpXHxSEM0IJrlQwR
Zy1myGGFNKoAUGCGXh/H9lbfvqC44UK+4Fxo6zNcy+GSuOGou6RFR8fQ5lVRqadm
Qp/UXHUEk/VqIqTuhlFva2diFiWR8Lkpx/6ylZSXjj3v6kRu
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:12:37 2025 by rpki-client