Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa
File:                     c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa (raw, json)
Hash identifier:          e19GJGqVMhXz1GFb+8ga+sAssLxH6m4C9J09IRblkB0=
Subject key identifier:   C9:A7:FB:DB:62:78:C7:E5:88:B1:67:DC:91:F1:20:C7:B7:CB:B0:77
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F4328584B328C44DD13F1D0F74EE0DE50
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     40401
IP address blocks:        2620:12e:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:44:dd:13:f1:d0:f7:4e:e0:de:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=07939ebf-3ad4-419b-bc07-d7f2f6776dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cf:3c:3b:c6:81:60:76:89:c9:0e:38:11:02:
                    c3:e5:37:4c:9a:9c:a7:2a:d3:7f:46:be:33:30:9d:
                    64:23:34:c1:cb:8b:19:32:ea:01:3d:e2:53:6b:ba:
                    16:83:5e:a7:10:3c:8f:ee:74:a6:a0:97:ee:45:dd:
                    9c:28:5b:69:69:70:62:52:64:9d:0f:ba:28:af:db:
                    c0:ca:c0:0b:59:bb:2a:c9:b2:3c:49:99:ca:2c:d6:
                    ba:a2:39:85:33:f6:cb:66:a3:eb:b1:e1:09:8d:8a:
                    8b:d5:49:7d:80:e1:da:c7:e5:5e:dc:13:5a:51:b4:
                    ab:d7:4a:f1:f4:64:34:2a:1f:77:6f:36:b8:af:87:
                    e8:1c:e8:41:84:fe:7c:7a:c7:66:c4:0b:64:78:09:
                    59:1a:f0:ad:78:3e:2c:30:dc:1b:c9:bb:ce:96:de:
                    05:44:2f:3a:64:ba:55:09:04:ed:4b:3f:29:be:79:
                    8d:4d:7e:dd:aa:f8:d3:58:3e:5b:7d:a5:89:fa:c0:
                    fa:39:d6:c6:17:a0:f6:d6:67:99:18:38:73:a3:8b:
                    70:66:3b:08:a5:fd:e6:e2:1f:b6:60:82:13:73:27:
                    8f:1a:7f:0f:c2:fd:5b:8f:0c:e6:24:65:bf:f6:21:
                    cf:6c:ae:27:d2:21:4a:80:cb:73:0d:3c:46:34:44:
                    82:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A7:FB:DB:62:78:C7:E5:88:B1:67:DC:91:F1:20:C7:B7:CB:B0:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/c1dbc48f-cb0b-3a0d-b700-86c10412a416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:12e:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:3b:f5:04:11:85:76:47:39:77:29:86:af:cb:39:89:72:5e:
         b8:2e:2c:03:24:30:50:fa:e5:fa:ce:c6:6f:4a:9d:52:eb:ba:
         52:37:2b:bb:d6:dc:1f:d5:34:a9:24:40:84:4f:3b:c8:63:60:
         06:02:bb:fe:e1:34:af:4c:7e:81:e3:93:68:be:83:7c:e3:79:
         d5:87:a7:94:ca:1a:8d:82:45:ed:c7:10:8d:6a:bb:1a:c8:63:
         a1:b2:2b:bd:73:6c:76:79:da:41:f8:ca:ee:f5:4f:e0:18:43:
         29:ff:90:17:0e:cc:58:8b:31:66:3a:92:2f:74:b4:54:a1:50:
         e6:5d:f2:f0:36:d0:d5:e5:66:a3:30:55:d5:d0:63:a8:61:a1:
         bb:8d:05:ef:46:88:6a:27:8e:0a:4f:b7:cb:70:87:12:68:1e:
         86:68:c0:23:ac:03:5c:4f:7d:cf:60:30:42:67:57:e2:68:eb:
         d2:df:1a:dc:e2:4b:2e:1a:af:2c:be:9f:86:8d:1f:e9:22:0b:
         8c:61:e4:2c:b4:98:7b:c4:98:ef:d1:0e:dc:ab:92:d7:5b:d6:
         b6:3d:b5:be:f9:ac:b9:14:ea:a8:9d:5e:92:81:d0:f4:70:68:
         5c:fb:6f:e5:bf:55:b7:e7:53:31:72:a0:69:6f:13:30:83:5f:
         15:27:b8:60
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsyjETdE/HQ907g3lAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MzMTNlMzktOTFmMS00MWZjLWJjNWMtZDIxM2E0Mjll
Mjg3MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk
MDc5MzllYmYtM2FkNC00MTliLWJjMDctZDdmMmY2Nzc2ZGM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3s88O8aBYHaJyQ44EQLD5TdMmpynKtN/Rr4z
MJ1kIzTBy4sZMuoBPeJTa7oWg16nEDyP7nSmoJfuRd2cKFtpaXBiUmSdD7oor9vA
ysALWbsqybI8SZnKLNa6ojmFM/bLZqPrseEJjYqL1Ul9gOHax+Ve3BNaUbSr10rx
9GQ0Kh93bza4r4foHOhBhP58esdmxAtkeAlZGvCteD4sMNwbybvOlt4FRC86ZLpV
CQTtSz8pvnmNTX7dqvjTWD5bfaWJ+sD6OdbGF6D21meZGDhzo4twZjsIpf3m4h+2
YIITcyePGn8Pwv1bjwzmJGW/9iHPbK4n0iFKgMtzDTxGNESCiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMmn+9tieMfliLFn3JHxIMe3y7B3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMx
M2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEzYTQyOWUyODcvYzFkYmM0OGYtY2IwYi0z
YTBkLWI3MDAtODZjMTA0MTJhNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2MzMTNlMzktOTFmMS00MWZjLWJj
NWMtZDIxM2E0MjllMjg3LzdjMzEzZTM5LTkxZjEtNDFmYy1iYzVjLWQyMTNhNDI5
ZTI4Ny5jcmwwHwYDVR0jBBgwFoAUfZc5aNgWxyYUfpq5JQWS6V07FCEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83YzMxM2UzOS05MWYxLTQxZmMtYmM1Yy1kMjEz
YTQyOWUyODcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABLsAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACw79QQRhXZHOXcphq/LOYlyXrguLAMkMFD65frOxm9KnVLrulI3
K7vW3B/VNKkkQIRPO8hjYAYCu/7hNK9MfoHjk2i+g3zjedWHp5TKGo2CRe3HEI1q
uxrIY6GyK71zbHZ52kH4yu71T+AYQyn/kBcOzFiLMWY6ki90tFShUOZd8vA20NXl
ZqMwVdXQY6hhobuNBe9GiGonjgpPt8twhxJoHoZowCOsA1xPfc9gMEJnV+Jo69Lf
GtziSy4aryy+n4aNH+kiC4xh5Cy0mHvEmO/RDtyrktdb1rY9tb75rLkU6qidXpKB
0PRwaFz7b+W/VbfnUzFyoGlvEzCDXxUnuGA=
-----END CERTIFICATE-----
Generated at Tue Oct 28 06:01:37 2025 by rpki-client