Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7ef4a5-9f87-36c1-a32e-8b879c537fba.roa
File:                     2e7ef4a5-9f87-36c1-a32e-8b879c537fba.roa (raw, json)
Hash identifier:          4Lr1OX+75XMO+JBkFwfecC1p+jzGUdPF/fajcGuGR1o=
Subject key identifier:   4B:15:62:C9:55:91:3A:23:C5:9E:55:4C:3A:D1:0F:D6:49:51:12:35
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B180701F55BF7642FBCD855A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7ef4a5-9f87-36c1-a32e-8b879c537fba.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     397203
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:07:01:f5:5b:f7:64:2f:bc:d8:55:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=7cb645a3-ee38-4dec-bdc5-ff802abf255f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:db:a4:ff:a2:6b:39:c0:10:d4:e9:2e:99:a1:
                    bc:bc:f6:48:47:ed:83:d3:db:35:7e:90:05:99:38:
                    91:85:64:38:c6:1e:e7:8c:0e:f3:fe:9a:77:fe:32:
                    83:b3:3a:66:ba:e1:e1:c9:70:cf:aa:88:39:a5:d4:
                    39:0e:68:97:dc:d6:bf:18:34:04:05:fc:46:20:6a:
                    46:a6:ef:f1:53:11:e7:a0:f7:1b:f8:2b:a0:36:7f:
                    6e:c0:9c:a5:84:7b:a7:9f:b6:ae:17:f7:cf:6c:37:
                    c4:90:fa:02:0e:59:f7:83:19:7a:b8:20:d9:94:47:
                    d9:1a:3b:2d:ef:a9:29:db:91:f1:2b:d4:74:5c:30:
                    bf:11:9d:00:79:13:44:11:8e:5c:0c:61:bb:83:dd:
                    d9:59:90:f8:af:fb:56:ea:02:cd:2d:b8:32:3b:d1:
                    6c:2f:c5:ff:b4:ca:b7:4d:28:dd:52:95:56:e4:ef:
                    de:24:dd:da:2b:07:d3:41:c1:04:24:df:b6:13:07:
                    49:99:ec:76:ca:53:b7:02:fa:c9:4f:8a:30:ae:f9:
                    75:a4:e4:9a:cd:ab:f4:c2:df:93:17:2a:31:9d:94:
                    06:14:61:12:66:2b:59:aa:ca:9c:9d:ec:e2:c1:a6:
                    72:e4:10:b8:f9:a7:63:cb:54:2e:92:0a:34:dd:ce:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:15:62:C9:55:91:3A:23:C5:9E:55:4C:3A:D1:0F:D6:49:51:12:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7ef4a5-9f87-36c1-a32e-8b879c537fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5a:8c:c1:f8:11:68:0e:2b:86:06:cc:f5:d9:e4:f2:03:2a:
         87:62:de:80:9f:e4:8a:d2:da:64:36:e4:06:fa:b6:bc:1c:44:
         b5:46:f5:70:61:5b:04:b6:a7:d4:99:df:a4:81:f3:29:73:52:
         32:3d:bf:a0:b8:f0:54:d4:1a:57:54:28:7b:11:cb:3e:cf:4c:
         19:e5:d5:ee:5b:da:fd:d4:dd:59:53:80:88:e8:03:e2:6c:93:
         8b:2a:5e:48:1e:81:b5:23:47:e0:57:f1:89:e0:b8:2f:9e:d2:
         fd:52:b6:ae:c6:81:ea:6d:08:f5:a4:f5:24:aa:31:cd:dc:11:
         9a:ff:4a:84:4c:74:78:37:eb:4c:af:13:f5:0d:72:13:1d:e0:
         4d:02:6c:dc:d7:d4:d4:58:57:23:72:75:b1:aa:3c:26:98:dc:
         5d:16:88:50:fa:5c:86:1c:7c:d2:ed:e2:4f:a3:0b:d2:e1:40:
         fd:02:54:d3:d2:e8:df:2d:a5:97:51:34:5d:9c:2b:4d:26:2d:
         f9:d6:68:1c:e0:c7:2b:b6:72:7e:c3:6b:fc:0f:2e:00:bb:af:
         a4:68:86:b0:38:b2:f6:91:50:65:12:18:d4:91:7b:39:b6:3c:
         42:76:45:37:29:9c:0b:84:b8:5d:92:d9:61:17:25:1f:3e:3b:
         2c:22:3b:b0
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBwH1W/dkL7zYVaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
N2NiNjQ1YTMtZWUzOC00ZGVjLWJkYzUtZmY4MDJhYmYyNTVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9uk/6JrOcAQ1OkumaG8vPZIR+2D09s1fpAF
mTiRhWQ4xh7njA7z/pp3/jKDszpmuuHhyXDPqog5pdQ5DmiX3Na/GDQEBfxGIGpG
pu/xUxHnoPcb+CugNn9uwJylhHunn7auF/fPbDfEkPoCDln3gxl6uCDZlEfZGjst
76kp25HxK9R0XDC/EZ0AeRNEEY5cDGG7g93ZWZD4r/tW6gLNLbgyO9FsL8X/tMq3
TSjdUpVW5O/eJN3aKwfTQcEEJN+2EwdJmex2ylO3AvrJT4owrvl1pOSazav0wt+T
FyoxnZQGFGESZitZqsqcneziwaZy5BC4+adjy1Qukgo03c6psQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEsVYslVkTojxZ5VTDrRD9ZJURI1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmU3ZWY0YTUtOWY4Ny0z
NmMxLWEzMmUtOGI4NzljNTM3ZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACJajMH4EWgOK4YGzPXZ5PIDKodi3oCf5IrS2mQ25Ab6trwcRLVG
9XBhWwS2p9SZ36SB8ylzUjI9v6C48FTUGldUKHsRyz7PTBnl1e5b2v3U3VlTgIjo
A+Jsk4sqXkgegbUjR+BX8YnguC+e0v1Stq7GgeptCPWk9SSqMc3cEZr/SoRMdHg3
60yvE/UNchMd4E0CbNzX1NRYVyNydbGqPCaY3F0WiFD6XIYcfNLt4k+jC9LhQP0C
VNPS6N8tpZdRNF2cK00mLfnWaBzgxyu2cn7Da/wPLgC7r6RohrA4svaRUGUSGNSR
ezm2PEJ2RTcpnAuEuF2S2WEXJR8+OywiO7A=
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:49:35 2025 by rpki-client