Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a63f0593-c7ea-3af7-8b66-c2e438f0ae06.roa
File:                     a63f0593-c7ea-3af7-8b66-c2e438f0ae06.roa (raw, json)
Hash identifier:          Qfn3j5s+50eofbcvicOI9cuOKZqieJ1J84bQIrE626E=
Subject key identifier:   E9:CF:E1:37:D0:81:CB:00:F9:92:4E:A6:B0:D1:F5:7C:3D:66:C2:4D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A78E60A0335A1C5152E68EF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a63f0593-c7ea-3af7-8b66-c2e438f0ae06.roa
Signing time:             Thu 10 Jul 2025 13:01:02 +0000
ROA not before:           Thu 10 Jul 2025 13:01:02 +0000
ROA not after:            Wed 08 Oct 2025 13:01:02 +0000
asID:                     397199
IP address blocks:        2001:500:134::53/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:e6:0a:03:35:a1:c5:15:2e:68:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 10 13:01:02 2025 GMT
            Not After : Oct  8 13:01:02 2025 GMT
        Subject: CN=e63b50d6-b66c-4905-84c2-e762e9c4028c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4d:6f:07:98:87:cc:1d:f5:ae:d8:0d:ba:f3:
                    55:c1:4c:07:83:d1:9f:6c:0e:b7:f2:70:30:c0:7d:
                    31:ad:68:ea:f2:bd:f1:72:32:5a:3e:a2:c3:0b:f1:
                    40:55:c3:22:6a:7c:a8:94:ca:93:22:15:32:68:97:
                    81:8d:9c:fc:2b:26:f4:8e:c4:49:ef:3d:c7:d9:f9:
                    57:df:64:a1:af:eb:8d:ff:cb:c5:a6:71:97:11:1a:
                    df:b1:42:0a:9b:e9:48:18:f5:00:fc:b5:48:d7:71:
                    e1:b5:34:57:57:41:03:6b:af:4e:29:1f:e4:98:86:
                    bc:e4:0d:68:e9:c9:73:4b:af:bf:8e:bd:43:1e:84:
                    8b:ff:de:b3:ac:40:db:72:50:f9:11:3c:e7:11:7a:
                    09:ba:2b:2a:8a:ed:24:17:82:9b:44:81:fd:db:c0:
                    2a:e1:b9:6c:db:17:11:1f:d2:fb:67:a6:48:bb:7c:
                    e3:bd:9c:ad:fa:a9:ea:b0:10:37:5d:6d:ad:49:0e:
                    b4:f0:9c:c5:2b:bc:d5:a1:42:c3:31:bb:44:53:c3:
                    9d:f8:08:58:1b:10:76:20:44:1a:6d:db:bb:bd:7a:
                    a7:ce:19:9b:49:1f:a1:4a:39:b1:23:c7:c3:07:64:
                    6a:98:f6:f5:0a:b2:77:2e:e7:e8:ee:06:ad:7d:36:
                    ac:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:E1:37:D0:81:CB:00:F9:92:4E:A6:B0:D1:F5:7C:3D:66:C2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a63f0593-c7ea-3af7-8b66-c2e438f0ae06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:134:0:0:0:0:53/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:8d:d5:bc:18:4e:96:05:ef:de:f9:55:d4:95:5b:c1:d8:3a:
         81:f6:52:b3:d7:bd:e6:a1:4c:8c:70:0a:8b:bf:be:64:64:a4:
         bf:f5:c0:fd:50:f2:14:c8:2c:59:c5:06:41:b7:1d:73:4f:f1:
         f5:3b:cc:81:96:d0:56:6b:1d:90:35:ce:fa:10:d0:fc:95:7d:
         f1:99:13:5a:51:d3:2f:08:fd:c8:06:00:6a:4f:b7:e8:b2:ae:
         40:95:8f:7f:4a:43:7a:2e:44:be:4b:37:02:f7:bf:c1:a4:1f:
         da:14:e3:2c:55:46:12:53:a7:b4:04:63:72:f4:85:cf:ec:e7:
         91:4f:81:96:a9:0a:fc:3d:df:2d:ec:e8:84:c0:ca:ab:dd:c1:
         dd:57:40:83:f4:65:43:59:94:b5:8b:c7:26:18:e3:19:cc:33:
         f6:6e:15:23:a9:8c:da:61:b7:33:ff:f6:ac:df:d1:6e:13:28:
         90:6c:a3:8f:25:d6:fd:49:ab:f2:f1:2a:78:6b:7b:73:27:cb:
         3e:5f:2e:64:10:40:5c:94:49:f8:ad:d0:f6:54:53:1f:cd:d3:
         1f:1b:3b:a4:b1:58:7e:11:a5:42:d1:25:82:de:dc:7c:69:fb:
         91:76:40:23:e7:53:1c:f3:63:c5:bd:e4:90:61:e8:08:af:a1:
         f5:07:13:86
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEp45goDNaHFFS5o7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcxMDEzMDEwMloXDTI1MTAwODEzMDEwMlowLzEtMCsGA1UEAxMk
ZTYzYjUwZDYtYjY2Yy00OTA1LTg0YzItZTc2MmU5YzQwMjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE1vB5iHzB31rtgNuvNVwUwHg9GfbA638nAw
wH0xrWjq8r3xcjJaPqLDC/FAVcMianyolMqTIhUyaJeBjZz8Kyb0jsRJ7z3H2flX
32Shr+uN/8vFpnGXERrfsUIKm+lIGPUA/LVI13HhtTRXV0EDa69OKR/kmIa85A1o
6clzS6+/jr1DHoSL/96zrEDbclD5ETznEXoJuisqiu0kF4KbRIH928Aq4bls2xcR
H9L7Z6ZIu3zjvZyt+qnqsBA3XW2tSQ608JzFK7zVoULDMbtEU8Od+AhYGxB2IEQa
bdu7vXqnzhmbSR+hSjmxI8fDB2RqmPb1CrJ3Lufo7gatfTasOwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFOnP4TfQgcsA+ZJOprDR9Xw9ZsJNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTYzZjA1OTMtYzdlYS0z
YWY3LThiNjYtYzJlNDM4ZjBhZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0
AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCqjdW8GE6WBe/e+VXUlVvB2DqB9lKz173moUyM
cAqLv75kZKS/9cD9UPIUyCxZxQZBtx1zT/H1O8yBltBWax2QNc76END8lX3xmRNa
UdMvCP3IBgBqT7fosq5AlY9/SkN6LkS+SzcC97/BpB/aFOMsVUYSU6e0BGNy9IXP
7OeRT4GWqQr8Pd8t7OiEwMqr3cHdV0CD9GVDWZS1i8cmGOMZzDP2bhUjqYzaYbcz
//as39FuEyiQbKOPJdb9Savy8Sp4a3tzJ8s+Xy5kEEBclEn4rdD2VFMfzdMfGzuk
sVh+EaVC0SWC3tx8afuRdkAj51Mc82PFveSQYegIr6H1BxOG
-----END CERTIFICATE-----
Generated at Wed Jul 23 23:21:47 2025 by rpki-client