Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09140955-bcc4-302b-92f4-70745e8aceb4.roa
File:                     09140955-bcc4-302b-92f4-70745e8aceb4.roa (raw, json)
Hash identifier:          uO8UdWBxlIt+embPPd9b1RmyhJHPzcw+Z3rjqR+Qzkk=
Subject key identifier:   47:14:15:E3:03:8E:90:39:F8:C0:A3:40:CB:04:6C:83:1B:9A:01:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF686A149E43CF5F7C03EB980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09140955-bcc4-302b-92f4-70745e8aceb4.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     397201
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:a1:49:e4:3c:f5:f7:c0:3e:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=4189822a-c3ee-4d90-9b2e-d3cb33c02c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:be:4a:e6:e5:28:19:4b:2d:53:3d:7f:57:2b:
                    d5:4b:c5:e4:d8:99:13:84:7f:8e:d9:f5:95:d0:3c:
                    64:1a:c7:42:99:7d:5c:63:23:6c:b0:3a:44:77:2a:
                    fa:c8:30:22:45:64:d0:9f:c7:08:9f:56:4a:2e:e8:
                    d8:74:6d:8b:2c:f8:4a:b1:3e:7a:d2:ba:7e:d1:70:
                    a3:fd:ed:32:78:ab:e7:62:5e:80:42:b0:f1:c5:79:
                    64:52:11:a2:45:84:1a:fb:44:e8:d6:19:48:6b:a8:
                    bd:e1:6c:b0:44:9d:aa:ac:75:b6:f2:65:7f:c2:4b:
                    82:c5:dc:04:cf:c0:b3:53:0c:f2:eb:27:29:ab:12:
                    82:f8:36:c9:d4:3a:59:11:f4:a9:70:4f:8f:4c:5c:
                    19:85:3f:5b:36:e3:6e:2c:3c:e4:5b:5c:52:ba:c0:
                    d2:3e:b7:bf:90:8d:c5:c9:e5:3d:8c:48:1b:37:7b:
                    9b:9e:b7:6a:04:13:c0:4c:bc:85:41:63:3b:75:be:
                    57:26:8a:f5:fc:1b:b9:b7:ec:50:6e:63:3b:0f:73:
                    61:6e:58:49:10:85:75:92:8e:7a:43:38:8f:22:66:
                    57:bd:b1:18:c9:ca:7e:5d:1d:0a:9d:30:5f:50:da:
                    58:4b:fc:b2:d6:f4:b8:9d:29:0c:4b:3d:ed:e1:9e:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:14:15:E3:03:8E:90:39:F8:C0:A3:40:CB:04:6C:83:1B:9A:01:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/09140955-bcc4-302b-92f4-70745e8aceb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:a9:77:d0:6c:c3:5d:93:c6:79:c8:b5:63:ae:e7:ab:e6:e3:
         e7:c0:82:9e:e5:14:e3:29:6b:37:1e:c0:cd:62:e9:d0:68:b2:
         6a:ea:7f:ec:07:56:f4:e2:fb:8f:c6:48:97:ec:77:89:73:c9:
         f2:48:48:94:8f:44:e9:a8:5b:85:07:29:99:84:90:91:4d:96:
         73:54:7f:d1:22:99:a8:1f:94:47:c0:26:a6:48:78:dc:11:00:
         ca:6d:ec:86:b1:1f:89:75:2f:7a:47:94:e7:3b:6c:7b:80:19:
         27:c2:ff:f6:c9:d0:0d:22:f4:a2:2a:53:f9:40:16:95:f9:79:
         7b:e4:a1:d9:1d:10:f5:c4:69:ac:f2:1a:34:91:3b:6c:ea:06:
         4c:3b:25:d9:95:d1:24:6f:9d:4e:e4:98:80:e4:6a:5b:47:bb:
         7a:fc:23:71:14:1f:16:47:58:ea:1b:c8:ef:a5:cb:d5:6a:c4:
         d0:7a:db:8c:22:63:83:b1:ab:bb:8f:66:43:97:c6:87:89:9c:
         19:1b:e1:66:c2:24:31:7b:2a:d9:71:e6:1e:37:95:af:9c:ba:
         c3:01:82:90:2f:5a:b0:77:4f:03:8c:ba:59:cb:23:59:38:83:
         ed:82:a3:0e:c4:7c:57:4a:02:fc:08:13:bc:cc:3b:53:bb:21:
         55:7d:25:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hqFJ5Dz198A+uYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
NDE4OTgyMmEtYzNlZS00ZDkwLTliMmUtZDNjYjMzYzAyYzdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb5K5uUoGUstUz1/VyvVS8Xk2JkThH+O2fWV
0DxkGsdCmX1cYyNssDpEdyr6yDAiRWTQn8cIn1ZKLujYdG2LLPhKsT560rp+0XCj
/e0yeKvnYl6AQrDxxXlkUhGiRYQa+0To1hlIa6i94WywRJ2qrHW28mV/wkuCxdwE
z8CzUwzy6ycpqxKC+DbJ1DpZEfSpcE+PTFwZhT9bNuNuLDzkW1xSusDSPre/kI3F
yeU9jEgbN3ubnrdqBBPATLyFQWM7db5XJor1/Bu5t+xQbmM7D3NhblhJEIV1ko56
QziPImZXvbEYycp+XR0KnTBfUNpYS/yy1vS4nSkMSz3t4Z5kdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEcUFeMDjpA5+MCjQMsEbIMbmgHbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDkxNDA5NTUtYmNjNC0z
MDJiLTkyZjQtNzA3NDVlOGFjZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAapd9Bsw12TxnnItWOu56vm4+fAgp7lFOMpazcewM1i6dBosmrq
f+wHVvTi+4/GSJfsd4lzyfJISJSPROmoW4UHKZmEkJFNlnNUf9EimagflEfAJqZI
eNwRAMpt7IaxH4l1L3pHlOc7bHuAGSfC//bJ0A0i9KIqU/lAFpX5eXvkodkdEPXE
aazyGjSRO2zqBkw7JdmV0SRvnU7kmIDkaltHu3r8I3EUHxZHWOobyO+ly9VqxNB6
24wiY4Oxq7uPZkOXxoeJnBkb4WbCJDF7Ktlx5h43la+cusMBgpAvWrB3TwOMulnL
I1k4g+2Cow7EfFdKAvwIE7zMO1O7IVV9JXI=
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:50:17 2025 by rpki-client