Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83cbd0b8-6c69-381b-a78e-9ff095c8204d.roa
File:                     83cbd0b8-6c69-381b-a78e-9ff095c8204d.roa (raw, json)
Hash identifier:          FEUEmFK8Uo5IrvhrdT3GN0I2XG2i0XFWsUwJ6tbHOVs=
Subject key identifier:   78:8E:5C:48:5B:34:2A:49:83:B4:CB:D2:EC:22:03:BB:32:58:43:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD62754C61553B2D236EBC40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83cbd0b8-6c69-381b-a78e-9ff095c8204d.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     36616
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:75:4c:61:55:3b:2d:23:6e:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=2da70812-30c9-4e73-ba08-1c75e4640c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:2d:9e:73:18:91:9d:48:e7:d9:ff:7a:99:
                    ae:cd:a1:7e:4d:bb:a2:d0:b0:20:2f:b8:96:7e:fd:
                    f2:33:75:7a:1e:c7:c4:27:f5:81:3a:2a:a3:0d:d3:
                    d0:79:06:a7:13:46:c1:bb:54:ea:7b:0d:ec:1d:61:
                    e4:96:a1:e6:86:39:93:18:8a:b4:9b:5e:a3:d0:76:
                    b9:f7:d0:c0:00:4b:1f:d1:1b:19:c5:2f:91:91:31:
                    4e:90:18:80:89:e8:1a:87:8c:14:fa:88:04:24:78:
                    11:20:f5:c3:4d:09:33:eb:52:be:65:ee:61:3a:06:
                    7d:f7:1f:ad:ea:f0:2e:53:01:cf:ef:4f:5a:02:d1:
                    41:57:96:13:d0:0f:9e:0c:79:dd:b7:91:f5:03:bd:
                    29:30:a1:1b:26:0b:27:68:3d:0a:2b:9b:37:99:71:
                    f1:71:27:0e:25:ab:61:0d:06:4f:94:43:78:6c:ed:
                    31:a0:99:0f:71:5e:a3:52:f7:e2:c4:ef:a3:cb:d5:
                    25:cd:ad:a2:6b:39:62:3c:b0:7b:78:6a:16:bd:f3:
                    86:86:ba:c5:92:84:03:cb:be:1d:c7:0e:69:88:da:
                    3f:d2:b2:69:7e:95:f6:88:3e:3b:b7:8a:d0:06:ea:
                    a6:a3:40:e8:ab:c9:db:14:fe:81:fd:11:8a:d5:bc:
                    9d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8E:5C:48:5B:34:2A:49:83:B4:CB:D2:EC:22:03:BB:32:58:43:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83cbd0b8-6c69-381b-a78e-9ff095c8204d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f3:fe:8a:53:a1:6a:ec:39:8d:ef:7e:eb:ed:62:04:69:ae:
         2a:56:63:c7:38:d7:ce:b0:18:3e:21:4a:2e:4c:cc:d1:4c:eb:
         2b:7c:d9:56:89:6f:da:76:8a:49:f2:84:7d:51:09:8a:12:8e:
         2d:90:54:45:d9:d1:6c:07:7a:9c:7b:9c:d4:d5:d5:fd:80:64:
         1e:e4:33:36:27:8a:79:0b:8e:44:9b:f0:99:f5:e9:8b:5a:b5:
         2e:72:4a:55:1f:21:1e:64:86:e2:50:c9:bc:69:c2:65:e2:91:
         47:b7:d5:b2:63:90:fa:c0:89:09:35:58:5d:18:76:32:5f:e2:
         24:26:70:3b:e1:1e:8f:5e:44:f6:84:11:da:1c:27:1b:65:ce:
         f5:50:f7:16:12:f9:6e:ba:66:db:7e:85:99:c0:f5:f9:59:5c:
         7f:d6:67:4d:b9:d1:5c:02:30:e0:56:c0:1e:ce:09:7a:dd:90:
         89:7d:e6:d7:08:0a:96:ed:48:f3:9a:8d:e5:f1:59:53:de:30:
         5e:4f:00:84:01:8b:78:ae:e4:f0:45:d9:31:c1:6e:c2:fc:c8:
         c9:97:4e:d6:56:4f:8a:e2:66:6b:d3:20:24:45:48:57:0b:0c:
         63:e4:f0:e8:47:86:a0:17:7b:38:25:c1:40:05:c9:bf:61:43:
         f7:a1:01:78
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYnVMYVU7LSNuvEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
MmRhNzA4MTItMzBjOS00ZTczLWJhMDgtMWM3NWU0NjQwYzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiEtnnMYkZ1I59n/epmuzaF+Tbui0LAgL7iW
fv3yM3V6HsfEJ/WBOiqjDdPQeQanE0bBu1Tqew3sHWHklqHmhjmTGIq0m16j0Ha5
99DAAEsf0RsZxS+RkTFOkBiAiegah4wU+ogEJHgRIPXDTQkz61K+Ze5hOgZ99x+t
6vAuUwHP709aAtFBV5YT0A+eDHndt5H1A70pMKEbJgsnaD0KK5s3mXHxcScOJath
DQZPlEN4bO0xoJkPcV6jUvfixO+jy9Ulza2iazliPLB7eGoWvfOGhrrFkoQDy74d
xw5piNo/0rJpfpX2iD47t4rQBuqmo0Doq8nbFP6B/RGK1bydQwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHiOXEhbNCpJg7TL0uwiA7syWEMjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODNjYmQwYjgtNmM2OS0z
ODFiLWE3OGUtOWZmMDk1YzgyMDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB3z/opToWrsOY3vfuvtYgRpripWY8c4186wGD4hSi5MzNFM6yt8
2VaJb9p2iknyhH1RCYoSji2QVEXZ0WwHepx7nNTV1f2AZB7kMzYninkLjkSb8Jn1
6YtatS5ySlUfIR5khuJQybxpwmXikUe31bJjkPrAiQk1WF0YdjJf4iQmcDvhHo9e
RPaEEdocJxtlzvVQ9xYS+W66Ztt+hZnA9flZXH/WZ0250VwCMOBWwB7OCXrdkIl9
5tcICpbtSPOajeXxWVPeMF5PAIQBi3iu5PBF2THBbsL8yMmXTtZWT4riZmvTICRF
SFcLDGPk8OhHhqAXezglwUAFyb9hQ/ehAXg=
-----END CERTIFICATE-----
Generated at Wed Oct 29 09:04:51 2025 by rpki-client