Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8adbdb55-111f-3abf-b6c5-6ab01d7db0b0.roa
File:                     8adbdb55-111f-3abf-b6c5-6ab01d7db0b0.roa (raw, json)
Hash identifier:          UCbyRK5Fd6Rh0focv3y4a1dWvCWTm9925gJsBx3xSCU=
Subject key identifier:   F8:AB:98:70:A8:F3:11:02:B9:43:26:A6:90:35:D9:3B:68:1F:6D:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A841258D84A4E374AB7A542E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8adbdb55-111f-3abf-b6c5-6ab01d7db0b0.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36625
IP address blocks:        2001:503:c27::2:30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:58:d8:4a:4e:37:4a:b7:a5:42:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a4a6379a-d1c6-49d5-b1ee-89b8541f45da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:eb:42:91:03:f8:03:7c:2e:b7:78:ed:3d:
                    e9:bb:6e:8d:fd:ae:3b:87:76:b1:e4:27:9e:26:b2:
                    21:92:fc:d9:91:e9:8f:68:34:75:23:7e:8c:97:95:
                    58:39:b3:74:b5:d7:7b:84:21:8b:85:3c:ef:59:40:
                    54:72:03:3e:3f:52:c3:d7:84:1a:fd:05:98:34:9d:
                    48:dc:20:20:db:3d:a5:db:2a:ac:de:d5:3b:47:32:
                    12:2e:9f:b4:d0:1d:60:46:3d:49:bd:39:8c:d2:d1:
                    1d:5c:4a:0c:bb:d4:6a:df:6c:0b:40:db:7e:16:77:
                    1e:2a:ba:17:d4:c1:9f:95:f2:a4:c1:df:d9:82:54:
                    53:5d:a1:20:8a:18:a6:08:c7:74:19:5a:34:6f:ad:
                    a9:89:27:c8:27:ab:4f:44:14:04:6d:62:e3:c7:32:
                    78:d0:f2:f6:1c:e4:2b:de:82:6e:8c:10:48:77:f7:
                    c2:d5:63:4a:3c:c1:fd:f0:65:03:5a:25:40:4e:f4:
                    91:17:6a:86:7d:9e:82:f1:28:0e:f1:01:22:32:55:
                    ad:29:97:d9:d7:bf:1b:e7:a0:21:35:f7:0c:15:1d:
                    42:92:bd:d0:6e:c4:1b:8e:29:2a:70:6c:4e:55:65:
                    dd:97:a1:67:93:48:86:84:06:3e:55:3e:9b:af:b0:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AB:98:70:A8:F3:11:02:B9:43:26:A6:90:35:D9:3B:68:1F:6D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8adbdb55-111f-3abf-b6c5-6ab01d7db0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:503:c27:0:0:0:2:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:1a:33:a0:ba:69:75:40:10:3c:48:3d:76:de:65:9a:9c:60:
         48:ff:ab:23:b1:a2:d9:0b:d1:47:15:a6:67:7d:66:12:f6:15:
         6b:6a:68:81:82:42:74:f0:36:8d:b9:5e:17:8c:69:f0:f3:7d:
         c7:d7:20:a6:85:63:8b:3b:aa:2d:d9:8f:a1:28:a9:76:02:ef:
         11:73:f8:24:0b:3c:9b:31:45:a2:ea:c2:06:97:48:cc:e7:5e:
         13:1e:d4:11:15:8d:7a:b9:4a:66:bf:67:19:b3:23:76:d7:8e:
         53:55:ad:9f:b7:7c:fc:0b:59:e1:60:72:22:bb:b4:d9:74:f7:
         01:b5:ca:0e:d6:d3:50:a1:8d:dc:72:c8:8a:ea:d6:64:80:3c:
         4d:65:4f:4a:cf:42:bf:84:9e:6c:4c:fc:ee:82:13:55:2a:d7:
         15:38:0b:bf:a4:19:ba:55:9e:d3:6d:a9:a6:87:4f:05:0c:c6:
         6d:88:05:f4:c0:4b:75:68:41:ab:e5:13:c9:b3:b8:f5:58:03:
         84:a1:87:ad:3c:81:5e:7c:55:91:73:5d:df:60:c0:d1:89:23:
         99:97:dd:b6:ea:aa:51:7b:67:59:64:2f:ee:8c:e9:b2:87:46:
         a4:a4:46:7a:a2:00:00:5b:65:6d:c2:46:d7:be:14:02:ab:ba:
         68:c5:d5:27
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEqEEljYSk43SrelQuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YTRhNjM3OWEtZDFjNi00OWQ1LWIxZWUtODliODU0MWY0NWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3/rQpED+AN8Lrd47T3pu26N/a47h3ax5Cee
JrIhkvzZkemPaDR1I36Ml5VYObN0tdd7hCGLhTzvWUBUcgM+P1LD14Qa/QWYNJ1I
3CAg2z2l2yqs3tU7RzISLp+00B1gRj1JvTmM0tEdXEoMu9Rq32wLQNt+FnceKroX
1MGflfKkwd/ZglRTXaEgihimCMd0GVo0b62piSfIJ6tPRBQEbWLjxzJ40PL2HOQr
3oJujBBId/fC1WNKPMH98GUDWiVATvSRF2qGfZ6C8SgO8QEiMlWtKZfZ178b56Ah
NfcMFR1Ckr3QbsQbjikqcGxOVWXdl6Fnk0iGhAY+VT6br7DJSwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPirmHCo8xECuUMmppA12TtoH21AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGFkYmRiNTUtMTExZi0z
YWJmLWI2YzUtNmFiMDFkN2RiMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn
AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBxGjOguml1QBA8SD123mWanGBI/6sjsaLZC9FH
FaZnfWYS9hVramiBgkJ08DaNuV4XjGnw833H1yCmhWOLO6ot2Y+hKKl2Au8Rc/gk
CzybMUWi6sIGl0jM514THtQRFY16uUpmv2cZsyN2145TVa2ft3z8C1nhYHIiu7TZ
dPcBtcoO1tNQoY3ccsiK6tZkgDxNZU9Kz0K/hJ5sTPzughNVKtcVOAu/pBm6VZ7T
bammh08FDMZtiAX0wEt1aEGr5RPJs7j1WAOEoYetPIFefFWRc13fYMDRiSOZl922
6qpRe2dZZC/ujOmyh0akpEZ6ogAAW2VtwkbXvhQCq7poxdUn
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:24:54 2025 by rpki-client