Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa
File:                     36db3a37-3c69-3146-ab84-6135cf19ca68.roa (raw, json)
Hash identifier:          0Qw65SF5PVCbfFZL0ZhFzA2Ox9R8sisujmSAqj5+thA=
Subject key identifier:   AB:29:E2:AA:A4:BC:91:66:E4:F4:57:D1:2E:F8:1E:10:33:25:37:04
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BC270D49BF4983E7D5154E200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     25485
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:d4:9b:f4:98:3e:7d:51:54:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=89d5b580-4a50-41cb-8206-40ecdbac3918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:43:24:90:67:37:8f:09:3c:79:1e:91:43:c1:
                    db:c7:7b:79:40:85:df:c8:2a:00:73:fc:6c:96:7d:
                    e7:06:98:88:5e:5d:d7:82:72:a0:58:a6:7b:45:9d:
                    25:93:43:ab:78:59:10:79:e1:04:87:c8:67:13:5f:
                    24:56:21:42:97:6a:b6:c0:45:5c:7f:c0:8c:ba:d1:
                    58:28:73:a9:96:16:c2:70:bc:81:ee:3a:98:69:82:
                    5e:6f:a1:2a:22:23:fc:b5:43:6f:72:c4:f6:1b:2b:
                    d5:03:39:29:a5:c3:e7:fa:de:14:fa:4f:38:99:03:
                    52:da:a1:83:f5:88:81:04:8e:70:ad:6b:eb:9e:06:
                    c3:83:b0:36:f3:1e:71:3c:61:01:6c:ef:ec:82:fe:
                    8e:22:f0:76:21:f1:b0:b2:ef:f0:f9:bc:25:b5:9e:
                    b3:53:0a:58:02:5b:98:96:f6:f3:3a:25:3f:41:8a:
                    87:d1:5b:a0:eb:00:64:cd:ba:e2:45:19:dd:e9:f7:
                    f1:b4:79:44:59:5a:50:fb:3e:7f:9d:b5:a2:44:f9:
                    73:90:e7:de:ab:81:0d:2c:40:93:bd:d5:93:a0:ca:
                    d5:8a:0c:46:93:53:4c:a1:e3:db:4e:74:f0:17:c1:
                    a1:86:17:b9:1f:0c:e0:a5:d0:78:b2:0c:0b:94:a9:
                    a0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:29:E2:AA:A4:BC:91:66:E4:F4:57:D1:2E:F8:1E:10:33:25:37:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36db3a37-3c69-3146-ab84-6135cf19ca68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:13:1d:ef:01:07:56:3f:00:1a:23:49:fb:85:8e:00:f8:9e:
         a8:4e:5b:de:6a:34:e9:45:95:e4:e2:c0:53:ff:19:a8:c2:c6:
         90:5d:5d:42:12:a2:05:b2:c5:9c:66:8b:25:63:e0:fe:b0:df:
         c3:20:f0:0e:35:82:40:b9:1d:0a:22:d7:99:31:18:9f:fd:ea:
         c2:a5:ba:2e:56:57:cf:ca:87:60:4f:d3:5b:8c:82:79:91:52:
         ed:96:b1:fc:e0:63:21:d0:17:30:09:d3:b2:3a:9e:0a:23:71:
         4c:d0:a1:6e:10:bc:c9:ce:c6:fd:21:69:3c:63:d8:e4:64:3d:
         8f:66:43:9f:c3:12:97:68:42:67:12:e8:e9:38:3a:8e:36:f2:
         22:b4:62:f9:b2:7f:10:b4:9c:01:fb:69:62:b0:c6:76:9f:67:
         4e:59:33:8b:f9:13:3b:ce:06:5e:70:dc:bf:18:8e:b4:c4:49:
         02:28:04:87:12:fc:f4:78:15:b4:6e:2e:b9:69:17:cb:be:46:
         d0:0e:a3:2a:87:88:94:70:86:b7:ac:ed:d2:9b:1d:74:8c:ba:
         ae:9b:6a:cc:70:ab:98:23:63:38:d6:a8:69:12:c2:76:31:2b:
         15:ad:d6:20:e7:7e:0f:44:a7:24:64:23:74:d3:a4:76:38:4f:
         5a:38:ae:30
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEvCcNSb9Jg+fVFU4gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk
ODlkNWI1ODAtNGE1MC00MWNiLTgyMDYtNDBlY2RiYWMzOTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkMkkGc3jwk8eR6RQ8Hbx3t5QIXfyCoAc/xs
ln3nBpiIXl3XgnKgWKZ7RZ0lk0OreFkQeeEEh8hnE18kViFCl2q2wEVcf8CMutFY
KHOplhbCcLyB7jqYaYJeb6EqIiP8tUNvcsT2GyvVAzkppcPn+t4U+k84mQNS2qGD
9YiBBI5wrWvrngbDg7A28x5xPGEBbO/sgv6OIvB2IfGwsu/w+bwltZ6zUwpYAluY
lvbzOiU/QYqH0Vug6wBkzbriRRnd6ffxtHlEWVpQ+z5/nbWiRPlzkOfeq4ENLECT
vdWToMrVigxGk1NMoePbTnTwF8Ghhhe5HwzgpdB4sgwLlKmg5QIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKsp4qqkvJFm5PRX0S74HhAzJTcEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzZkYjNhMzctM2M2OS0z
MTQ2LWFiODQtNjEzNWNmMTljYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQC3Ex3vAQdWPwAaI0n7hY4A+J6oTlveajTpRZXk
4sBT/xmowsaQXV1CEqIFssWcZoslY+D+sN/DIPAONYJAuR0KIteZMRif/erCpbou
VlfPyodgT9NbjIJ5kVLtlrH84GMh0BcwCdOyOp4KI3FM0KFuELzJzsb9IWk8Y9jk
ZD2PZkOfwxKXaEJnEujpODqONvIitGL5sn8QtJwB+2lisMZ2n2dOWTOL+RM7zgZe
cNy/GI60xEkCKASHEvz0eBW0bi65aRfLvkbQDqMqh4iUcIa3rO3Smx10jLqum2rM
cKuYI2M41qhpEsJ2MSsVrdYg534PRKckZCN006R2OE9aOK4w
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:13:36 2025 by rpki-client