Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa
File:                     1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa (raw, json)
Hash identifier:          r5guv9k2iABQ0aiPIi2q7eU89AVYrwt0ozeDWocN0Vs=
Subject key identifier:   0D:A0:AE:3B:A5:69:17:6D:4E:FC:6A:74:34:4E:13:D0:C3:0F:89:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6266DC50C5B388E07F6650
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     397205
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:66:dc:50:c5:b3:88:e0:7f:66:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=d8993470-f7d2-4e0f-acd4-074ffb5f990c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6b:0e:a1:1d:dd:71:8c:8b:3b:39:fb:c4:18:
                    c5:63:e2:24:6b:98:d0:28:0c:d3:24:4d:19:e0:46:
                    00:2b:44:40:15:06:32:28:fb:e1:8b:03:b5:8b:af:
                    cb:36:94:e7:15:77:fa:6c:eb:c7:cd:4e:41:6c:a8:
                    3c:30:e9:6f:9d:5b:bf:2a:86:cf:4f:f6:cc:9d:db:
                    1f:c2:a5:14:a3:a9:13:e7:92:da:45:83:25:97:2c:
                    c6:e5:28:2d:8b:59:8e:9a:9f:97:b9:6d:c7:4a:75:
                    37:2d:53:bc:a3:76:e5:a3:00:1f:ba:2c:6f:f9:93:
                    2a:ce:55:95:71:d7:d5:2f:fb:68:57:cf:86:dc:02:
                    02:8c:d9:b0:96:51:87:e2:d4:eb:73:12:b0:a5:8b:
                    16:53:8d:39:19:fd:7f:a2:7e:5a:df:5e:49:39:ae:
                    cc:9a:10:fb:8f:d2:3e:95:75:d7:b2:1e:fd:ac:3a:
                    f4:67:df:4f:e8:dc:bf:59:55:39:65:c1:30:32:de:
                    95:9d:13:12:10:26:2e:09:7e:30:22:50:2a:5c:d3:
                    64:02:52:19:a2:2b:be:26:d6:fb:6e:47:6a:bf:e4:
                    92:e7:f5:4a:6b:46:6d:a7:96:fd:f8:34:11:6c:d1:
                    a1:7c:51:a6:be:91:a4:d4:f5:c3:6a:5f:59:e0:ec:
                    22:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A0:AE:3B:A5:69:17:6D:4E:FC:6A:74:34:4E:13:D0:C3:0F:89:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9c98a6-5ca2-345a-95ce-9d254cb8be47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:14:66:88:10:90:a8:23:77:43:8f:98:07:12:83:e4:6c:95:
         3e:be:8e:8a:78:88:6c:84:65:52:a7:6c:a0:ee:da:b5:80:1c:
         72:c0:0e:56:80:18:a4:62:ed:2e:2f:4c:6b:0a:89:cb:73:90:
         96:a8:78:02:8d:cd:35:64:29:dd:3d:bb:ab:87:6a:c9:e8:60:
         3f:38:43:d0:a9:4a:01:e0:22:d9:06:ee:04:a2:a1:a0:95:b4:
         85:cc:e6:c7:b1:4a:de:22:39:af:03:96:10:4b:04:bd:71:8c:
         46:8b:cb:71:36:7f:c3:bf:ad:6d:b0:ea:e7:a3:4d:27:01:0c:
         12:e3:4c:0a:7e:17:be:c9:ac:12:cc:26:30:54:ac:dd:2b:71:
         f9:6b:f7:b4:31:43:e8:a6:49:d7:44:da:f6:d9:ba:67:16:5d:
         18:a3:d8:1a:f3:1b:a1:e5:27:da:59:40:2b:b4:dd:f9:9d:18:
         80:cf:6c:74:d8:ad:bb:fe:a2:ea:13:c8:2a:fc:fc:a0:c5:9e:
         36:23:cf:2c:d4:cc:d1:7b:01:2e:8a:81:a2:d6:a3:12:f4:74:
         29:aa:2b:e6:79:97:ff:4d:26:e8:be:45:3b:60:37:5b:8f:97:
         23:57:24:15:1a:52:c9:4e:bf:87:ea:4c:44:5d:ff:95:19:1d:
         1c:5b:4c:a3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYmbcUMWziOB/ZlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZDg5OTM0NzAtZjdkMi00ZTBmLWFjZDQtMDc0ZmZiNWY5OTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGsOoR3dcYyLOzn7xBjFY+Ika5jQKAzTJE0Z
4EYAK0RAFQYyKPvhiwO1i6/LNpTnFXf6bOvHzU5BbKg8MOlvnVu/KobPT/bMndsf
wqUUo6kT55LaRYMllyzG5Sgti1mOmp+XuW3HSnU3LVO8o3blowAfuixv+ZMqzlWV
cdfVL/toV8+G3AICjNmwllGH4tTrcxKwpYsWU405Gf1/on5a315JOa7MmhD7j9I+
lXXXsh79rDr0Z99P6Ny/WVU5ZcEwMt6VnRMSECYuCX4wIlAqXNNkAlIZoiu+Jtb7
bkdqv+SS5/VKa0Ztp5b9+DQRbNGhfFGmvpGk1PXDal9Z4OwimwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA2grjulaRdtTvxqdDROE9DDD4mTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE5Yzk4YTYtNWNhMi0z
NDVhLTk1Y2UtOWQyNTRjYjhiZTQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIUUZogQkKgjd0OPmAcSg+RslT6+jop4iGyEZVKnbKDu2rWAHHLA
DlaAGKRi7S4vTGsKictzkJaoeAKNzTVkKd09u6uHasnoYD84Q9CpSgHgItkG7gSi
oaCVtIXM5sexSt4iOa8DlhBLBL1xjEaLy3E2f8O/rW2w6uejTScBDBLjTAp+F77J
rBLMJjBUrN0rcflr97QxQ+imSddE2vbZumcWXRij2BrzG6HlJ9pZQCu03fmdGIDP
bHTYrbv+ouoTyCr8/KDFnjYjzyzUzNF7AS6KgaLWoxL0dCmqK+Z5l/9NJui+RTtg
N1uPlyNXJBUaUslOv4fqTERd/5UZHRxbTKM=
-----END CERTIFICATE-----
Generated at Wed Oct 29 07:22:53 2025 by rpki-client