Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/810e4e86-3aad-3f08-9c6d-3090088a9fc4.roa
File:                     810e4e86-3aad-3f08-9c6d-3090088a9fc4.roa (raw, json)
Hash identifier:          WVC64QklN9vSyiWM3ShTFAy3ZhsoxXX7WMLPbERVaJ8=
Subject key identifier:   B8:43:B5:A6:B8:2D:45:13:1F:54:75:FB:52:80:4C:4F:98:9B:0F:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A6AF0A02B89661E32E736D540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/810e4e86-3aad-3f08-9c6d-3090088a9fc4.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     396553
IP address blocks:        2001:500:135::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:a0:2b:89:66:1e:32:e7:36:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=8929445b-d24e-4594-9f64-2b1cf1abf1de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:57:71:5a:f9:47:e7:04:a3:3d:af:c4:34:
                    66:17:2c:c7:40:e6:1e:52:b2:27:d0:ba:a8:4d:28:
                    f7:09:1b:b7:ac:ee:48:63:9d:45:86:8c:a7:ed:3c:
                    4b:8d:d8:8f:fe:a6:99:a4:25:75:34:9c:04:d3:19:
                    bf:32:fc:6c:ba:d1:bd:5f:11:61:2e:be:26:b9:2a:
                    3a:38:60:82:23:0e:3e:04:8d:53:09:a6:86:e6:5f:
                    a2:2f:e4:d0:95:4b:c1:77:ab:aa:7e:c7:56:39:f8:
                    a7:40:a4:2b:2f:79:c1:0d:ed:eb:4e:88:8c:bf:19:
                    53:32:ff:28:c2:69:98:1f:e9:fc:5b:9d:61:de:2b:
                    2c:8f:0b:a1:55:a7:cd:f3:4d:f0:ff:a3:bc:52:ac:
                    9c:c9:7e:59:80:b1:0d:72:ba:0c:c0:36:d5:13:c1:
                    b5:96:58:54:84:75:c9:d7:41:08:34:30:cb:e2:70:
                    f8:9d:1f:99:12:db:67:a7:54:34:37:f3:f9:39:54:
                    b3:fd:a4:51:19:c3:3a:8f:8f:87:e8:53:b7:dc:a6:
                    41:5c:d8:fe:65:d8:20:e2:19:d2:b6:c4:8b:fd:6e:
                    a1:94:26:79:e2:81:00:e5:57:56:fe:e2:20:ef:d7:
                    a2:f0:5e:f0:63:40:fc:7d:d3:40:fc:91:66:21:96:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:43:B5:A6:B8:2D:45:13:1F:54:75:FB:52:80:4C:4F:98:9B:0F:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/810e4e86-3aad-3f08-9c6d-3090088a9fc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:135:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:b4:1c:49:cf:8b:0f:07:bd:65:c9:c0:d4:ed:c4:ea:d9:e3:
         42:ea:1e:ad:1f:79:03:ac:5f:ea:c4:08:67:d1:e2:02:0e:9c:
         c9:34:7c:b6:9a:52:d3:27:9a:b9:57:45:da:ec:67:e3:1f:3b:
         f9:97:42:99:6e:02:54:da:ea:4c:df:59:05:d5:4d:d9:62:e8:
         b3:02:75:3b:59:5d:b5:3b:3c:c3:56:37:b7:95:d5:c7:23:23:
         4b:8d:ec:49:7b:5e:48:62:c5:18:a8:b4:ae:ef:7f:35:37:d3:
         99:18:97:06:65:ea:4e:37:d0:52:29:a0:b0:6f:cb:94:4c:e4:
         5d:57:dd:08:15:8e:11:61:e7:e2:c2:50:35:6c:dd:41:81:8d:
         01:d8:4b:e3:ed:f5:da:92:b4:d9:81:2e:e5:71:c9:9c:26:b0:
         fb:4b:d0:a8:ff:73:de:d0:ea:dd:a1:23:ec:7c:2b:b5:5d:26:
         05:24:9b:52:c2:f9:8b:8c:cf:c4:8a:9b:e5:88:dd:dc:1f:b7:
         1c:47:ee:35:25:6c:e3:0f:6b:c2:4c:29:06:9a:1a:8f:c1:8e:
         f3:66:bc:2c:16:23:ea:87:d1:0d:88:fc:c9:b2:d8:12:0f:4f:
         7e:fc:c9:6e:05:77:89:75:76:aa:e1:4d:62:4f:dc:51:d1:51:
         ff:99:44:92
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpq8KAriWYeMuc21UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcwNTEzMDEwNFoXDTI1MTAwMzEzMDEwNFowLzEtMCsGA1UEAxMk
ODkyOTQ0NWItZDI0ZS00NTk0LTlmNjQtMmIxY2YxYWJmMWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOBXcVr5R+cEoz2vxDRmFyzHQOYeUrIn0Lqo
TSj3CRu3rO5IY51Fhoyn7TxLjdiP/qaZpCV1NJwE0xm/MvxsutG9XxFhLr4muSo6
OGCCIw4+BI1TCaaG5l+iL+TQlUvBd6uqfsdWOfinQKQrL3nBDe3rToiMvxlTMv8o
wmmYH+n8W51h3issjwuhVafN803w/6O8UqycyX5ZgLENcroMwDbVE8G1llhUhHXJ
10EINDDL4nD4nR+ZEttnp1Q0N/P5OVSz/aRRGcM6j4+H6FO33KZBXNj+Zdgg4hnS
tsSL/W6hlCZ54oEA5VdW/uIg79ei8F7wY0D8fdNA/JFmIZZS3QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLhDtaa4LUUTH1R1+1KATE+Ymw9BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODEwZTRlODYtM2FhZC0z
ZjA4LTljNmQtMzA5MDA4OGE5ZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBftBxJz4sPB71lycDU7cTq2eNC6h6tH3kDrF/q
xAhn0eICDpzJNHy2mlLTJ5q5V0Xa7GfjHzv5l0KZbgJU2upM31kF1U3ZYuizAnU7
WV21OzzDVje3ldXHIyNLjexJe15IYsUYqLSu7381N9OZGJcGZepON9BSKaCwb8uU
TORdV90IFY4RYefiwlA1bN1BgY0B2Evj7fXakrTZgS7lccmcJrD7S9Co/3Pe0Ord
oSPsfCu1XSYFJJtSwvmLjM/EipvliN3cH7ccR+41JWzjD2vCTCkGmhqPwY7zZrws
FiPqh9ENiPzJstgSD09+/MluBXeJdXaq4U1iT9xR0VH/mUSS
-----END CERTIFICATE-----
Generated at Wed Jul 23 17:18:02 2025 by rpki-client