Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a4e415-f6fd-3b0f-ac95-32a58c0b0ed8.roa
File:                     a1a4e415-f6fd-3b0f-ac95-32a58c0b0ed8.roa (raw, json)
Hash identifier:          71MJ0Uoj4ymBMNVjifIeTcefGm8lDeR8o16BAyXfFnE=
Subject key identifier:   B8:0B:00:2B:A0:F8:36:E6:0E:20:1E:8F:A6:E0:2C:5A:2D:99:99:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF686A7429A2DD524A1676080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a4e415-f6fd-3b0f-ac95-32a58c0b0ed8.roa
Signing time:             Sun 24 Aug 2025 13:00:42 +0000
ROA not before:           Sun 24 Aug 2025 13:00:42 +0000
ROA not after:            Sat 22 Nov 2025 14:00:42 +0000
asID:                     397195
IP address blocks:        2001:500:7967::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f6:86:a7:42:9a:2d:d5:24:a1:67:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:42 2025 GMT
            Not After : Nov 22 14:00:42 2025 GMT
        Subject: CN=0050a7ab-67e5-4cf6-b08c-73e017f5626c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9d:cc:7a:ca:f1:28:24:f6:e2:4b:09:84:e9:
                    73:5f:68:69:c8:2e:33:c7:25:78:37:49:66:2e:22:
                    36:dc:aa:12:78:92:93:09:04:c1:46:c8:2d:f5:84:
                    b9:09:bf:a2:4d:0e:72:d4:6c:e5:22:17:93:a2:f5:
                    12:7e:0f:2d:e3:b5:56:ef:61:77:55:ee:78:37:f0:
                    fd:a4:63:1e:1c:1c:a7:5e:e0:fe:7b:d4:db:5c:3c:
                    00:42:03:68:42:5e:44:80:a4:7a:ed:c7:46:fd:02:
                    28:65:0b:33:70:5c:e0:d6:5a:ae:02:84:92:18:bc:
                    2f:14:20:44:a3:9c:ab:97:81:91:11:75:39:35:85:
                    14:78:d7:02:f2:b0:6f:64:bf:a2:d5:d7:ba:bf:6a:
                    97:ce:ac:cb:09:3a:06:be:9e:25:50:f9:6c:76:f1:
                    91:28:90:87:c6:da:89:54:c6:97:bf:0b:71:56:28:
                    1d:15:a1:4f:72:a7:00:69:90:0d:e3:2f:d5:ea:db:
                    7c:39:c2:dd:5a:21:e6:df:38:09:af:d7:82:e1:d7:
                    61:f4:94:97:66:bc:9f:75:0d:e9:da:6f:1d:e1:de:
                    f7:8c:8d:c2:5b:aa:f6:59:74:ff:8a:5e:8b:92:eb:
                    c1:77:54:dd:77:f4:f6:c9:e1:77:96:b3:8b:45:06:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0B:00:2B:A0:F8:36:E6:0E:20:1E:8F:A6:E0:2C:5A:2D:99:99:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1a4e415-f6fd-3b0f-ac95-32a58c0b0ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:9e:0e:b8:6a:d8:d4:55:9a:49:fa:dc:e1:b1:6a:03:5d:bf:
         f5:6e:d7:b1:4a:24:f3:5f:b7:00:49:c2:0b:49:77:10:72:e5:
         d1:38:bc:08:63:45:45:f7:47:64:4a:97:c3:93:6d:7e:05:ee:
         d8:2c:04:f4:cb:f0:64:51:27:f5:c2:f8:db:b6:7b:bc:56:2b:
         93:35:0b:27:e1:00:66:da:b9:43:d2:8e:bc:01:94:be:6c:27:
         78:56:84:14:54:0d:d0:50:ad:88:13:97:07:ed:92:2b:34:42:
         c8:30:f6:5d:aa:83:34:ca:76:06:81:32:ba:7a:94:a4:e0:5a:
         59:c4:01:71:9e:22:75:4b:0e:42:c4:ac:ea:c7:83:87:d0:aa:
         77:bf:50:db:d0:2a:c7:ef:39:51:7d:99:d8:68:fc:ba:83:7d:
         81:8c:50:57:27:2d:fc:a9:3e:bb:6e:4c:c0:62:df:6d:e4:b0:
         57:eb:8c:c6:68:bf:d8:27:c6:b9:bd:9b:b4:c1:8d:10:84:92:
         67:2d:bc:37:0c:b4:07:02:38:47:d2:62:d1:73:4e:14:6f:97:
         c9:cc:c0:df:ab:69:db:ed:74:db:2a:e2:7b:b3:3e:df:2d:99:
         5e:cf:7c:a3:75:b8:f1:4a:cf:61:f6:14:7b:96:6f:b3:ec:11:
         cf:76:fb:ee
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEr2hqdCmi3VJKFnYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk
MDA1MGE3YWItNjdlNS00Y2Y2LWIwOGMtNzNlMDE3ZjU2MjZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ3MesrxKCT24ksJhOlzX2hpyC4zxyV4N0lm
LiI23KoSeJKTCQTBRsgt9YS5Cb+iTQ5y1GzlIheTovUSfg8t47VW72F3Ve54N/D9
pGMeHBynXuD+e9TbXDwAQgNoQl5EgKR67cdG/QIoZQszcFzg1lquAoSSGLwvFCBE
o5yrl4GREXU5NYUUeNcC8rBvZL+i1de6v2qXzqzLCToGvp4lUPlsdvGRKJCHxtqJ
VMaXvwtxVigdFaFPcqcAaZAN4y/V6tt8OcLdWiHm3zgJr9eC4ddh9JSXZryfdQ3p
2m8d4d73jI3CW6r2WXT/il6LkuvBd1Tdd/T2yeF3lrOLRQYWiwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLgLACug+DbmDiAej6bgLFotmZk3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTFhNGU0MTUtZjZmZC0z
YjBmLWFjOTUtMzJhNThjMGIwZWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAF6eDrhq2NRVmkn63OGxagNdv/Vu17FKJPNftwBJwgtJdxBy5dE4
vAhjRUX3R2RKl8OTbX4F7tgsBPTL8GRRJ/XC+Nu2e7xWK5M1CyfhAGbauUPSjrwB
lL5sJ3hWhBRUDdBQrYgTlwftkis0Qsgw9l2qgzTKdgaBMrp6lKTgWlnEAXGeInVL
DkLErOrHg4fQqne/UNvQKsfvOVF9mdho/LqDfYGMUFcnLfypPrtuTMBi323ksFfr
jMZov9gnxrm9m7TBjRCEkmctvDcMtAcCOEfSYtFzThRvl8nMwN+radvtdNsq4nuz
Pt8tmV7PfKN1uPFKz2H2FHuWb7PsEc92++4=
-----END CERTIFICATE-----
Generated at Wed Sep 10 17:53:38 2025 by rpki-client