Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/bc8decf1-00d8-3d56-b0f2-3b6947810aa8.roa
File:                     bc8decf1-00d8-3d56-b0f2-3b6947810aa8.roa (raw, json)
Hash identifier:          ab5HHxmZThZV5eSHjTsjZ6NSHb36cZl1WZuRkgFwBE8=
Subject key identifier:   53:01:F2:07:7C:45:AF:DC:C7:C2:39:F7:A9:46:C7:C2:60:B8:37:19
Certificate issuer:       /CN=27c1dec1-056b-4683-80a9-498890185763
Certificate serial:       010D0C9F4328584A9FFBAC35B43FED51B3D7A700
Authority key identifier: 5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/bc8decf1-00d8-3d56-b0f2-3b6947810aa8.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        2001:19e8:1003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:ac:35:b4:3f:ed:51:b3:d7:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c1dec1-056b-4683-80a9-498890185763
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=e2f7f4f5-4327-43a4-ade3-fbc8c0410106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1e:0c:4d:86:1d:d7:d1:70:c8:cd:78:fc:89:
                    77:48:f8:ff:0d:c2:80:8d:e2:f0:c4:39:57:f2:59:
                    27:a7:68:28:e9:b4:8c:d0:af:fe:8c:97:13:c2:46:
                    ad:ee:91:06:1d:ae:35:08:b8:ed:cb:41:b5:6f:80:
                    be:3d:50:4a:8d:cd:12:e8:97:82:b6:e6:4d:b6:e3:
                    b5:a9:4f:1e:3d:5f:44:17:d2:0f:26:17:85:9c:fb:
                    4f:44:7c:10:85:f6:87:e3:b5:16:f9:a6:c3:b3:a6:
                    37:33:ff:30:7d:2b:53:0a:07:35:38:19:b8:96:b6:
                    d7:4d:df:7c:e2:04:43:f9:40:5e:8c:c3:59:99:e5:
                    24:93:7f:c7:47:13:96:e5:fc:5d:1c:0e:a7:bd:2f:
                    66:5e:3f:a2:e0:fe:8c:69:d9:93:b4:22:0b:93:78:
                    83:cf:90:14:1f:b5:7d:88:2f:1d:9c:33:be:72:30:
                    20:3f:4e:ed:38:d7:84:dc:3a:2e:b7:56:bb:62:2a:
                    a4:69:3e:27:ba:ed:56:f9:d7:8b:3b:5b:a1:d7:21:
                    20:6f:42:b4:a2:7c:9e:d8:50:72:cf:04:7a:31:38:
                    9a:fc:62:f9:87:4d:69:b4:94:d6:81:ca:3b:82:e8:
                    84:3c:de:ab:1a:08:a2:ce:85:81:04:b2:58:88:9f:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:01:F2:07:7C:45:AF:DC:C7:C2:39:F7:A9:46:C7:C2:60:B8:37:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/bc8decf1-00d8-3d56-b0f2-3b6947810aa8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763/27c1dec1-056b-4683-80a9-498890185763.crl

            X509v3 Authority Key Identifier:
                keyid:5B:F7:35:27:E5:64:B4:C1:F1:66:FA:A1:40:95:06:A3:08:52:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/27c1dec1-056b-4683-80a9-498890185763.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:19e8:1003::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:69:09:ca:f4:ca:0a:1c:69:44:46:3d:c8:31:65:31:85:56:
         bb:e9:7b:cd:b9:25:92:fe:eb:85:de:e7:71:55:65:b8:2c:15:
         31:ef:b4:fb:d2:4c:a4:57:85:f0:73:95:47:94:d4:c7:ba:79:
         c4:50:2a:59:18:e4:67:49:b3:e5:c7:38:b8:ef:5e:56:44:c5:
         cd:01:0e:32:89:7d:6c:3e:9b:c9:e2:8e:16:f5:aa:31:89:97:
         40:26:e6:92:39:80:01:f6:e9:b2:d4:a8:d7:e0:8f:ca:95:9f:
         3e:f3:15:58:46:74:e8:31:9f:c7:7d:0a:75:aa:a5:0d:60:aa:
         f9:21:c8:47:cd:42:f5:f7:60:3f:80:e3:09:83:e5:e7:d6:46:
         d5:24:1d:92:38:3f:e9:3a:16:1d:e9:37:bc:72:41:79:84:b6:
         32:ec:9c:95:a8:1f:65:1a:c7:18:49:fa:89:2d:73:a2:83:f3:
         20:74:72:bc:85:8f:8f:2a:3a:61:42:14:99:5c:c1:31:e8:bc:
         be:c3:cf:ef:64:3f:f9:79:b5:9f:ee:33:ff:87:8b:22:6b:a4:
         ac:bc:c3:8f:e0:71:74:85:8d:12:92:b1:04:56:94:69:83:23:
         bb:6e:d4:9a:15:f1:a1:a1:fe:4f:52:54:16:26:05:61:48:32:
         e5:be:a3:d2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf+6w1tD/tUbPXpwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjdjMWRlYzEtMDU2Yi00NjgzLTgwYTktNDk4ODkwMTg1
NzYzMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
ZTJmN2Y0ZjUtNDMyNy00M2E0LWFkZTMtZmJjOGMwNDEwMTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B4MTYYd19FwyM14/Il3SPj/DcKAjeLwxDlX
8lknp2go6bSM0K/+jJcTwkat7pEGHa41CLjty0G1b4C+PVBKjc0S6JeCtuZNtuO1
qU8ePV9EF9IPJheFnPtPRHwQhfaH47UW+abDs6Y3M/8wfStTCgc1OBm4lrbXTd98
4gRD+UBejMNZmeUkk3/HRxOW5fxdHA6nvS9mXj+i4P6MadmTtCILk3iDz5AUH7V9
iC8dnDO+cjAgP07tONeE3Dout1a7YiqkaT4nuu1W+deLO1uh1yEgb0K0onye2FBy
zwR6MTia/GL5h01ptJTWgco7guiEPN6rGgiizoWBBLJYiJ/KTQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFMB8gd8Ra/cx8I596lGx8JguDcZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yN2Mx
ZGVjMS0wNTZiLTQ2ODMtODBhOS00OTg4OTAxODU3NjMvYmM4ZGVjZjEtMDBkOC0z
ZDU2LWIwZjItM2I2OTQ3ODEwYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjdjMWRlYzEtMDU2Yi00NjgzLTgw
YTktNDk4ODkwMTg1NzYzLzI3YzFkZWMxLTA1NmItNDY4My04MGE5LTQ5ODg5MDE4
NTc2My5jcmwwHwYDVR0jBBgwFoAUW/c1J+VktMHxZvqhQJUGowhShU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yN2MxZGVjMS0wNTZiLTQ2ODMtODBhOS00OTg4
OTAxODU3NjMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEZ6BAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIVpCcr0ygocaURGPcgxZTGFVrvpe825JZL+64Xe53FVZbgsFTHv
tPvSTKRXhfBzlUeU1Me6ecRQKlkY5GdJs+XHOLjvXlZExc0BDjKJfWw+m8nijhb1
qjGJl0Am5pI5gAH26bLUqNfgj8qVnz7zFVhGdOgxn8d9CnWqpQ1gqvkhyEfNQvX3
YD+A4wmD5efWRtUkHZI4P+k6Fh3pN7xyQXmEtjLsnJWoH2UaxxhJ+oktc6KD8yB0
cryFj48qOmFCFJlcwTHovL7Dz+9kP/l5tZ/uM/+HiyJrpKy8w4/gcXSFjRKSsQRW
lGmDI7tu1JoV8aGh/k9SVBYmBWFIMuW+o9I=
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:30:40 2025 by rpki-client