Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3922aca4-1a29-30a3-94d3-4f00eb65cbfc.roa
File:                     3922aca4-1a29-30a3-94d3-4f00eb65cbfc.roa (raw, json)
Hash identifier:          OAa7yktEcVwOZ4tLln3IfEkDoY4YKi39Tuunrsargz0=
Subject key identifier:   8D:89:2F:BE:B5:22:0B:C2:57:78:AD:49:A2:54:0A:B3:4C:EB:4C:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD62734FE882605BF50BCE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3922aca4-1a29-30a3-94d3-4f00eb65cbfc.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     397194
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:73:4f:e8:82:60:5b:f5:0b:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=d746743c-58fd-40d8-a043-39dcc59ee943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1c:7b:2b:ff:a3:19:a6:31:8b:7d:a0:98:72:
                    44:cf:4c:2a:c1:0c:28:47:0c:92:01:9b:99:65:e8:
                    35:6c:93:a8:e0:87:bc:5e:01:2c:b9:d4:b4:5e:27:
                    e3:73:22:1b:96:d9:61:05:01:b4:76:be:50:6f:81:
                    26:f3:0e:ca:a6:99:84:04:d7:6d:34:44:97:9e:1a:
                    b2:b2:2a:92:a7:07:e0:aa:2b:14:75:1b:50:73:75:
                    cd:d4:b0:da:89:6a:02:5a:28:37:96:d6:a4:4f:04:
                    94:e5:1d:0e:47:c0:10:57:04:d5:f0:24:b9:3c:99:
                    23:47:f2:e2:fb:3f:d8:29:d4:b8:79:0f:3d:b1:a2:
                    a2:f7:5d:5f:10:8c:ed:43:e7:71:d8:85:a6:55:e3:
                    dc:49:32:d4:50:e0:f1:81:ef:ef:f6:38:75:89:46:
                    92:c5:18:96:5a:de:ff:ec:61:cd:01:d7:bf:97:0c:
                    58:c6:fc:97:96:67:6c:ad:da:e5:6c:c9:4b:20:58:
                    17:06:64:7f:dc:e1:4f:4a:f3:ab:6d:e3:34:13:ba:
                    fb:38:48:39:04:68:f8:22:8c:05:b1:76:7c:dc:d5:
                    2a:32:1a:ed:52:d9:d0:4a:0e:7f:5d:64:d2:85:43:
                    c5:49:7f:7e:33:73:70:4c:78:f9:7e:73:7f:39:10:
                    f4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:89:2F:BE:B5:22:0B:C2:57:78:AD:49:A2:54:0A:B3:4C:EB:4C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3922aca4-1a29-30a3-94d3-4f00eb65cbfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ee:3f:df:3e:f0:63:37:82:0d:14:f4:63:b0:bf:62:10:5f:
         a9:02:5f:3b:fa:66:eb:44:0d:4a:78:1f:92:15:83:71:ef:a0:
         5e:9e:2e:d3:2d:4f:b1:40:1e:eb:09:70:24:3c:de:d7:9f:82:
         fb:4f:cf:de:f2:fd:7b:ff:05:5c:dc:85:f1:a4:f9:e2:84:cb:
         fe:66:9c:c5:50:fb:70:d3:72:f1:73:85:12:7b:b6:d5:33:55:
         47:d8:b8:90:f7:98:d3:b3:ca:37:72:63:e0:dd:21:1c:14:4e:
         9d:f0:5f:f3:aa:54:72:8b:c4:35:60:4a:19:71:e2:e9:9f:02:
         80:16:f5:3d:d5:7b:4d:b7:78:af:fa:0d:5e:6e:63:ee:27:40:
         5c:27:ec:82:92:cc:d6:ab:e2:36:15:34:32:f8:9f:f4:20:b9:
         cd:df:6d:54:ea:b4:ce:77:65:dc:5f:e0:fe:5e:45:d2:e4:f2:
         a8:a6:0d:14:e3:38:c1:0d:2d:dd:a5:f0:ba:18:0c:96:b1:22:
         6c:7f:8a:ef:62:cc:af:33:35:db:36:93:60:6a:d2:53:f7:78:
         1e:b2:75:75:59:50:d3:7c:6a:fb:fc:d6:b4:dc:12:a2:7f:dd:
         79:34:38:7f:47:e7:53:a6:59:a0:47:2a:17:a4:59:db:c8:7f:
         2e:bd:5f:39
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYnNP6IJgW/ULzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
ZDc0Njc0M2MtNThmZC00MGQ4LWEwNDMtMzlkY2M1OWVlOTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxx7K/+jGaYxi32gmHJEz0wqwQwoRwySAZuZ
Zeg1bJOo4Ie8XgEsudS0XifjcyIbltlhBQG0dr5Qb4Em8w7KppmEBNdtNESXnhqy
siqSpwfgqisUdRtQc3XN1LDaiWoCWig3ltakTwSU5R0OR8AQVwTV8CS5PJkjR/Li
+z/YKdS4eQ89saKi911fEIztQ+dx2IWmVePcSTLUUODxge/v9jh1iUaSxRiWWt7/
7GHNAde/lwxYxvyXlmdsrdrlbMlLIFgXBmR/3OFPSvOrbeM0E7r7OEg5BGj4IowF
sXZ83NUqMhrtUtnQSg5/XWTShUPFSX9+M3NwTHj5fnN/ORD0HQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI2JL761IgvCV3itSaJUCrNM60x9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzkyMmFjYTQtMWEyOS0z
MGEzLTk0ZDMtNGYwMGViNjVjYmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFLuP98+8GM3gg0U9GOwv2IQX6kCXzv6ZutEDUp4H5IVg3HvoF6e
LtMtT7FAHusJcCQ83tefgvtPz97y/Xv/BVzchfGk+eKEy/5mnMVQ+3DTcvFzhRJ7
ttUzVUfYuJD3mNOzyjdyY+DdIRwUTp3wX/OqVHKLxDVgShlx4umfAoAW9T3Ve023
eK/6DV5uY+4nQFwn7IKSzNar4jYVNDL4n/Qguc3fbVTqtM53Zdxf4P5eRdLk8qim
DRTjOMENLd2l8LoYDJaxImx/iu9izK8zNds2k2Bq0lP3eB6ydXVZUNN8avv81rTc
EqJ/3Xk0OH9H51OmWaBHKhekWdvIfy69Xzk=
-----END CERTIFICATE-----
Generated at Wed Oct 29 07:16:31 2025 by rpki-client