Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9682a8d9-d899-3f69-bbfd-26ae5215f732.roa
File:                     9682a8d9-d899-3f69-bbfd-26ae5215f732.roa (raw, json)
Hash identifier:          SZ/C8tHNS4XFj6uRG1tFiuepGl6s1PemSDcgVrog4LI=
Subject key identifier:   99:8B:DF:90:E5:45:EC:14:5A:FA:A4:D9:EB:C1:43:49:06:E3:E0:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B1806FD8A0523B57AE8654A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9682a8d9-d899-3f69-bbfd-26ae5215f732.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     396545
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:fd:8a:05:23:b5:7a:e8:65:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=cd1ea6c9-1d2a-4392-aec5-6f3657f7c261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:80:73:69:94:dd:7e:e3:14:7c:25:37:f1:
                    74:54:0d:92:e2:24:97:51:b8:be:30:fe:80:b6:0c:
                    80:bb:78:e4:31:17:ca:a2:1c:3d:b8:a4:51:81:af:
                    cd:53:42:d7:11:fe:33:22:41:54:67:02:fa:63:1b:
                    27:3c:17:c7:76:f8:db:fc:d6:9c:af:fd:a6:b6:f6:
                    27:51:20:6e:95:ae:04:b9:53:af:9c:3e:82:89:d9:
                    ec:4a:6c:58:6d:0b:35:bd:4e:86:e2:47:48:1e:c7:
                    60:7d:b9:c3:b1:47:52:c8:c7:50:15:4d:e1:a6:ea:
                    e8:2e:a7:72:4b:44:75:0f:76:bd:41:80:11:94:a1:
                    15:ec:f5:3c:f5:8f:ff:a3:72:0b:4a:09:67:e3:7e:
                    78:92:f3:0e:ce:cc:41:ef:3a:be:ab:ca:d4:fc:c3:
                    6c:1a:4b:0e:7e:96:19:0e:6e:78:59:5f:f8:55:21:
                    49:cb:8f:94:16:25:5d:0d:4a:e9:e9:53:6d:a9:d6:
                    18:af:91:63:1c:ed:16:08:b8:b6:cc:fd:4f:09:00:
                    b0:b8:0e:57:27:9c:6f:be:9f:30:44:f6:bc:d9:71:
                    9f:74:e9:59:42:39:b1:ae:b9:57:18:2c:6a:b1:fc:
                    76:5f:61:59:46:d0:47:b3:72:60:b0:b4:84:fd:9c:
                    e1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8B:DF:90:E5:45:EC:14:5A:FA:A4:D9:EB:C1:43:49:06:E3:E0:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9682a8d9-d899-3f69-bbfd-26ae5215f732.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:c5:f5:62:31:93:79:f4:cb:1f:77:b6:99:b2:16:d6:a9:84:
         cf:6f:13:38:ef:57:f2:0d:7f:09:98:4d:f9:24:c6:10:44:4b:
         87:0a:2d:78:40:8a:e3:24:b2:cf:69:0d:71:c0:e4:16:f6:1f:
         c1:72:85:5d:7d:ad:67:37:7f:80:1c:0d:bc:9b:ef:c0:0f:95:
         3e:e1:ac:36:3d:a5:2d:03:8e:f6:75:33:97:60:49:cb:77:66:
         b3:e4:1e:34:00:19:8b:1f:28:4c:64:31:b9:1f:97:d8:65:cd:
         60:0d:7c:8c:51:9a:98:f8:55:26:fb:d2:6f:f4:93:f5:62:05:
         d3:13:ba:e7:20:71:b3:2d:12:f9:d3:96:19:da:8c:9f:c6:ff:
         6e:f3:38:0b:8f:76:98:84:ec:d1:be:a5:e1:8b:a4:4b:65:1a:
         01:6a:04:79:3c:80:c8:c2:4c:b0:2c:77:64:fd:40:35:f8:6d:
         9c:81:bf:ce:05:77:b2:72:bc:cb:f6:0c:80:8a:1c:81:cc:60:
         ed:16:f6:18:27:c2:e3:96:cb:49:c2:2e:62:e6:d6:3f:a9:0b:
         f7:5c:34:e2:f7:1a:b3:c5:01:36:fb:d3:b5:c1:b6:ed:55:75:
         2d:f2:49:c2:95:69:53:4e:64:ed:c4:d4:95:50:ce:49:79:3f:
         66:a2:cb:d5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsYBv2KBSO1euhlSoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk
Y2QxZWE2YzktMWQyYS00MzkyLWFlYzUtNmYzNjU3ZjdjMjYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNSAc2mU3X7jFHwlN/F0VA2S4iSXUbi+MP6A
tgyAu3jkMRfKohw9uKRRga/NU0LXEf4zIkFUZwL6YxsnPBfHdvjb/Nacr/2mtvYn
USBula4EuVOvnD6CidnsSmxYbQs1vU6G4kdIHsdgfbnDsUdSyMdQFU3hpuroLqdy
S0R1D3a9QYARlKEV7PU89Y//o3ILSgln4354kvMOzsxB7zq+q8rU/MNsGksOfpYZ
Dm54WV/4VSFJy4+UFiVdDUrp6VNtqdYYr5FjHO0WCLi2zP1PCQCwuA5XJ5xvvp8w
RPa82XGfdOlZQjmxrrlXGCxqsfx2X2FZRtBHs3JgsLSE/ZzhuQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJmL35DlRewUWvqk2evBQ0kG4+BBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTY4MmE4ZDktZDg5OS0z
ZjY5LWJiZmQtMjZhZTUyMTVmNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADfF9WIxk3n0yx93tpmyFtaphM9vEzjvV/INfwmYTfkkxhBES4cK
LXhAiuMkss9pDXHA5Bb2H8FyhV19rWc3f4AcDbyb78APlT7hrDY9pS0DjvZ1M5dg
Sct3ZrPkHjQAGYsfKExkMbkfl9hlzWANfIxRmpj4VSb70m/0k/ViBdMTuucgcbMt
EvnTlhnajJ/G/27zOAuPdpiE7NG+peGLpEtlGgFqBHk8gMjCTLAsd2T9QDX4bZyB
v84Fd7JyvMv2DICKHIHMYO0W9hgnwuOWy0nCLmLm1j+pC/dcNOL3GrPFATb707XB
tu1VdS3yScKVaVNOZO3E1JVQzkl5P2aiy9U=
-----END CERTIFICATE-----
Generated at Wed Sep 10 18:03:41 2025 by rpki-client