Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e091dc50-6ebe-3092-bbc1-4734eedaffbc.roa
File:                     e091dc50-6ebe-3092-bbc1-4734eedaffbc.roa (raw, json)
Hash identifier:          E7RkcQHw5TR2uADJE4DNklAeoEeXRPKRb3RmfEr7O+I=
Subject key identifier:   83:2E:9E:C8:A3:10:D6:71:5A:91:F3:67:9A:A5:69:09:C6:67:3D:84
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BAD6273E60844E70379DB0670
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e091dc50-6ebe-3092-bbc1-4734eedaffbc.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     396600
IP address blocks:        2620:0:5050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:73:e6:08:44:e7:03:79:db:06:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=2d96c7c5-0077-4e76-95bd-6df3d2d2bf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:79:ee:bb:f4:11:57:f2:22:55:76:68:86:fe:
                    1e:9a:bc:f8:35:f7:c9:26:75:b8:db:fb:d7:e0:d8:
                    a7:10:48:94:7b:94:82:a7:d5:0f:ac:99:26:c4:c1:
                    a5:3f:4f:d9:15:91:41:e6:9b:20:21:a1:91:2b:ef:
                    dd:2e:f9:ab:05:8c:3e:3a:de:8c:66:a7:56:20:3c:
                    f4:dc:ba:62:d3:4c:8f:15:a9:c0:9f:f8:53:05:11:
                    d0:51:6b:46:71:97:a2:08:2f:3e:3e:fd:27:24:f2:
                    ad:a1:27:0e:07:44:43:5b:0b:20:ba:17:c4:13:14:
                    3d:f8:0f:1f:10:30:dd:77:89:1f:00:1c:a3:51:d6:
                    01:6e:84:f6:c1:aa:89:0d:6a:bc:9d:91:f9:8d:5b:
                    e6:da:e6:ef:56:cd:86:f7:22:ce:9a:a5:e8:4a:0e:
                    b4:1f:0b:a0:37:d3:9c:4f:69:79:9f:e7:f3:78:77:
                    74:26:5a:06:3f:11:81:ab:0b:3b:ab:b9:87:e4:fe:
                    d9:af:04:52:76:b9:46:67:f1:1f:00:67:e4:38:80:
                    2f:e2:8e:4f:72:92:a9:16:d9:a9:ec:ba:47:40:1a:
                    b1:e5:15:b4:d8:8a:0b:c2:a5:9c:d1:ff:46:aa:61:
                    da:af:9f:7f:9c:bb:17:ad:c2:a0:d7:d8:7d:9e:16:
                    3a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2E:9E:C8:A3:10:D6:71:5A:91:F3:67:9A:A5:69:09:C6:67:3D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e091dc50-6ebe-3092-bbc1-4734eedaffbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:0:5050::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:83:b0:c1:1d:85:97:31:5e:57:40:bc:a3:b8:c3:31:f9:8a:
         cc:48:0e:bc:d7:4a:b3:ef:ab:5e:b3:d6:48:08:c0:95:84:f5:
         d0:02:f5:31:24:41:fe:df:11:26:ae:1c:7c:de:19:1c:f3:66:
         52:2f:25:72:6c:d8:16:b5:c6:18:23:36:b9:ed:8a:de:b3:52:
         2d:e2:ec:ae:37:e3:9a:e9:5a:cb:fb:6e:bc:84:04:33:64:8e:
         ac:f9:18:2c:0d:e4:d4:81:03:a1:b0:aa:e4:d2:45:42:10:d6:
         c7:8b:fd:ff:ea:be:c5:6e:07:56:a7:a9:54:1d:01:81:db:c9:
         93:9a:5b:50:0a:f1:30:e3:5f:2a:9c:12:8d:d0:5b:b1:1d:b3:
         80:5b:90:d2:e4:72:a7:28:c3:a0:3d:37:df:ea:7b:60:0b:25:
         74:56:eb:7c:3e:a4:79:fb:c1:62:a1:5d:31:a6:c6:45:c6:fb:
         e4:56:29:cb:13:b6:e5:09:03:8f:80:54:88:c4:13:37:34:a3:
         32:93:a7:c8:d0:29:21:38:c2:e4:24:8f:97:32:24:53:5c:76:
         52:ea:87:6f:e6:b0:3c:3d:5d:28:60:e8:3c:a4:c4:a4:b1:02:
         b6:7a:a2:bd:ec:d3:1f:29:dd:b7:81:83:05:82:d5:61:5f:3b:
         4e:1d:10:b8
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEutYnPmCETnA3nbBnAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
MmQ5NmM3YzUtMDA3Ny00ZTc2LTk1YmQtNmRmM2QyZDJiZjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3nuu/QRV/IiVXZohv4emrz4NffJJnW42/vX
4NinEEiUe5SCp9UPrJkmxMGlP0/ZFZFB5psgIaGRK+/dLvmrBYw+Ot6MZqdWIDz0
3Lpi00yPFanAn/hTBRHQUWtGcZeiCC8+Pv0nJPKtoScOB0RDWwsguhfEExQ9+A8f
EDDdd4kfAByjUdYBboT2waqJDWq8nZH5jVvm2ubvVs2G9yLOmqXoSg60HwugN9Oc
T2l5n+fzeHd0JloGPxGBqws7q7mH5P7ZrwRSdrlGZ/EfAGfkOIAv4o5PcpKpFtmp
7LpHQBqx5RW02IoLwqWc0f9GqmHar59/nLsXrcKg19h9nhY6ZwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIMunsijENZxWpHzZ5qlaQnGZz2EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTA5MWRjNTAtNmViZS0z
MDkyLWJiYzEtNDczNGVlZGFmZmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAASDsMEdhZcxXldAvKO4wzH5isxIDrzXSrPvq16z1kgIwJWE9dAC
9TEkQf7fESauHHzeGRzzZlIvJXJs2Ba1xhgjNrntit6zUi3i7K4345rpWsv7bryE
BDNkjqz5GCwN5NSBA6GwquTSRUIQ1seL/f/qvsVuB1anqVQdAYHbyZOaW1AK8TDj
XyqcEo3QW7Eds4BbkNLkcqcow6A9N9/qe2ALJXRW63w+pHn7wWKhXTGmxkXG++RW
KcsTtuUJA4+AVIjEEzc0ozKTp8jQKSE4wuQkj5cyJFNcdlLqh2/msDw9XShg6Dyk
xKSxArZ6or3s0x8p3beBgwWC1WFfO04dELg=
-----END CERTIFICATE-----
Generated at Wed Oct 29 07:07:52 2025 by rpki-client