Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02a282df-c991-34a8-ba21-b3c834ed21e0.roa
File:                     02a282df-c991-34a8-ba21-b3c834ed21e0.roa (raw, json)
Hash identifier:          ugcDjFsHK9v3DjquCM2K5Pd/V0O0Cjv1CO/qH9EIx9o=
Subject key identifier:   0D:C1:A5:55:2A:28:B1:30:58:34:A9:9F:58:BD:E7:A0:E1:69:62:76
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA2C63DD63AE9FCAD099CB080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02a282df-c991-34a8-ba21-b3c834ed21e0.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     396608
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:3d:d6:3a:e9:fc:ad:09:9c:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=726b386d-eed0-4eea-9736-951874dd83f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e7:12:2a:2f:fe:0c:95:de:2f:fe:a5:5e:1d:
                    80:ac:5c:e7:01:09:21:1e:92:7e:d7:b8:f0:42:5b:
                    f6:89:97:e4:26:25:5a:8c:74:71:71:9a:64:dd:41:
                    47:a5:c2:0f:14:eb:10:29:9f:e4:e1:be:98:63:b8:
                    8a:ac:30:2a:0f:39:c2:97:d8:ce:a7:8e:6a:5f:a5:
                    d6:44:4a:22:fb:cb:5d:1d:c2:0e:09:47:66:89:07:
                    25:29:fa:a3:6a:35:53:32:ae:99:7b:6d:e4:f1:ce:
                    74:5f:94:5f:26:19:46:86:d3:90:48:89:71:9f:dc:
                    ae:22:83:70:d0:48:0c:3e:21:5d:f6:71:2b:8e:1d:
                    92:e9:12:b7:57:bb:9c:a5:5c:cf:8d:25:53:77:93:
                    98:67:9c:62:d8:8b:ea:e7:d3:7c:55:30:48:76:c2:
                    dd:2e:ac:2e:74:62:04:db:7f:33:65:99:d5:e6:bc:
                    e3:44:44:d0:3d:e3:8d:27:a8:4a:bd:38:89:42:4d:
                    f7:16:53:3a:9e:c2:d8:50:bf:45:6c:4b:e4:6f:cd:
                    87:52:a5:95:ae:89:9f:73:20:a3:9e:4a:29:a5:1a:
                    d9:c5:96:f5:13:03:11:13:dc:0f:fb:9c:32:97:b6:
                    28:a5:2b:c7:ef:32:0a:19:71:79:bf:74:e2:5e:6c:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C1:A5:55:2A:28:B1:30:58:34:A9:9F:58:BD:E7:A0:E1:69:62:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02a282df-c991-34a8-ba21-b3c834ed21e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:e9:4c:b2:21:44:99:64:c8:89:29:b0:81:46:14:c8:65:e9:
         ea:98:a8:82:3f:87:b4:8f:95:5e:f4:09:a7:ba:d2:06:29:6e:
         06:23:92:68:87:c5:60:e2:2d:0c:26:55:31:a0:41:08:26:8a:
         59:6e:50:06:6e:ba:65:bf:2d:2b:31:30:bf:84:88:a4:23:b7:
         28:a5:97:0e:59:b0:a8:a7:14:95:4c:87:73:ab:61:9e:4b:a7:
         2d:fc:05:11:4e:15:72:69:7c:43:28:e4:10:68:60:4f:c2:32:
         ac:e0:6c:db:ba:23:36:99:d2:17:bb:7b:c8:2c:c7:bb:4d:39:
         bd:79:02:24:fd:e4:03:c2:47:0a:59:6b:50:7f:8f:9e:39:a4:
         1f:22:ee:3c:5d:1a:f3:bd:39:6d:d0:03:7e:78:db:9a:1e:3b:
         ad:2c:ad:03:66:e5:81:f0:b9:6a:de:cc:19:6d:57:0a:63:21:
         35:a9:db:10:a8:8a:1d:df:bf:5d:ed:49:85:8a:95:d8:88:64:
         5b:07:fd:de:cc:69:07:8c:31:a5:38:02:74:4b:40:f8:5f:51:
         96:27:f8:a2:dd:4d:9f:84:92:6d:db:ce:47:5b:3c:67:a7:9e:
         a7:c3:62:6d:e8:33:b8:8a:82:9e:68:48:ce:9b:c1:8e:be:18:
         16:c7:dd:38
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqixj3WOun8rQmcsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk
NzI2YjM4NmQtZWVkMC00ZWVhLTk3MzYtOTUxODc0ZGQ4M2Y0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjucSKi/+DJXeL/6lXh2ArFznAQkhHpJ+17jw
Qlv2iZfkJiVajHRxcZpk3UFHpcIPFOsQKZ/k4b6YY7iKrDAqDznCl9jOp45qX6XW
REoi+8tdHcIOCUdmiQclKfqjajVTMq6Ze23k8c50X5RfJhlGhtOQSIlxn9yuIoNw
0EgMPiFd9nErjh2S6RK3V7ucpVzPjSVTd5OYZ5xi2Ivq59N8VTBIdsLdLqwudGIE
238zZZnV5rzjRETQPeONJ6hKvTiJQk33FlM6nsLYUL9FbEvkb82HUqWVromfcyCj
nkoppRrZxZb1EwMRE9wP+5wyl7YopSvH7zIKGXF5v3TiXmzq+QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFA3BpVUqKLEwWDSpn1i956DhaWJ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDJhMjgyZGYtYzk5MS0z
NGE4LWJhMjEtYjNjODM0ZWQyMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALzpTLIhRJlkyIkpsIFGFMhl6eqYqII/h7SPlV70Cae60gYpbgYj
kmiHxWDiLQwmVTGgQQgmilluUAZuumW/LSsxML+EiKQjtyillw5ZsKinFJVMh3Or
YZ5Lpy38BRFOFXJpfEMo5BBoYE/CMqzgbNu6IzaZ0he7e8gsx7tNOb15AiT95APC
RwpZa1B/j545pB8i7jxdGvO9OW3QA35425oeO60srQNm5YHwuWrezBltVwpjITWp
2xCoih3fv13tSYWKldiIZFsH/d7MaQeMMaU4AnRLQPhfUZYn+KLdTZ+Ekm3bzkdb
PGennqfDYm3oM7iKgp5oSM6bwY6+GBbH3Tg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:14 2025 by rpki-client