Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b827cfb-9db9-3f26-9f33-d3c5a9698e95.roa
File:                     4b827cfb-9db9-3f26-9f33-d3c5a9698e95.roa (raw, json)
Hash identifier:          KgZRuXMlACrRXhlQdb3ttWKctC5rtCi9mmjV996Nw+Q=
Subject key identifier:   5A:2C:CC:D7:27:63:D9:9F:05:F2:54:41:8F:4C:8D:45:03:74:89:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D4D70878CA753DEE94700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b827cfb-9db9-3f26-9f33-d3c5a9698e95.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     396590
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:4d:70:87:8c:a7:53:de:e9:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=e2a9b54d-9031-4756-94d2-acdfe5f18103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0b:50:e1:21:f1:69:4f:46:45:d0:ca:bb:38:
                    6e:85:55:f5:a7:35:a1:ac:c2:33:58:7b:98:c1:21:
                    01:69:55:bd:35:f4:f1:b8:f6:69:25:34:d4:34:25:
                    31:73:d8:33:d9:bb:80:1c:48:d2:fe:45:95:a4:87:
                    ac:b9:13:32:7d:47:6d:ef:41:cf:3b:58:69:bb:2e:
                    52:c9:bb:52:33:f8:f6:08:f9:0a:56:71:42:f5:c8:
                    ac:2b:59:8b:ab:e6:0e:95:72:6b:22:82:c4:80:fb:
                    d1:06:13:16:92:77:0f:b3:e1:5c:c4:42:e0:c3:38:
                    fd:8a:a8:03:d9:ca:a1:b5:8b:a0:ae:c1:a7:84:96:
                    7c:48:61:53:90:0c:ad:e8:42:f9:9b:91:1c:47:c1:
                    33:d2:92:eb:a0:88:5d:d9:c2:85:8e:86:71:16:91:
                    0f:a6:c0:b3:41:14:50:74:e4:33:20:7e:10:4f:54:
                    85:0d:5b:9b:6f:59:21:70:85:aa:8e:4f:22:01:d0:
                    95:38:70:6f:30:ed:03:c4:14:26:35:e2:7d:31:4f:
                    c2:84:ee:32:13:5d:38:ff:c5:08:a0:28:81:34:3e:
                    f2:e6:75:d8:c7:5c:03:77:c8:14:ab:e4:21:43:45:
                    7a:e0:77:9f:89:e3:ea:14:cb:7e:2b:1c:83:de:15:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2C:CC:D7:27:63:D9:9F:05:F2:54:41:8F:4C:8D:45:03:74:89:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b827cfb-9db9-3f26-9f33-d3c5a9698e95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:ba:63:87:72:2d:d4:96:a0:38:7d:af:33:07:8e:14:aa:6f:
         72:5e:35:fe:ff:01:7f:7f:48:8c:3a:ca:d7:e0:00:57:41:e6:
         18:23:5c:a2:c4:8a:37:ea:f5:7e:c3:47:45:5c:23:4c:59:91:
         96:5d:d1:77:95:b1:d8:b4:bd:77:2c:2e:cf:0b:a3:e9:4c:72:
         43:47:d0:16:14:71:c9:36:fb:83:c6:47:ad:4f:f5:d1:cf:60:
         cb:ee:d4:04:70:e9:40:71:91:a9:d0:57:9e:12:59:6a:9e:bd:
         02:46:fa:2d:e8:6a:b5:32:38:7d:0a:7b:73:43:45:95:4a:2f:
         7b:93:ee:1f:96:39:f5:bb:2e:0a:05:93:ec:53:06:0d:8c:a8:
         be:a9:cd:d9:5e:2d:e1:cd:cd:dd:bf:79:41:16:6a:bd:32:bd:
         47:e9:a5:25:c1:b0:d0:4b:21:d8:37:bf:a8:5e:35:9a:3a:0d:
         a8:c4:01:52:af:30:11:13:bd:b3:71:75:ba:3e:1f:00:0b:38:
         ba:e0:64:5e:ca:7f:d6:3b:1d:b3:62:aa:3d:d2:7c:be:cb:7b:
         ac:2b:28:fa:52:c2:81:9f:57:02:e5:1c:47:b4:ad:70:c8:ec:
         a8:67:67:e8:02:20:5f:11:a2:7b:19:1c:39:aa:b5:b2:8f:4a:
         10:6c:6e:cb
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jU1wh4ynU97pRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZTJhOWI1NGQtOTAzMS00NzU2LTk0ZDItYWNkZmU1ZjE4MTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAtQ4SHxaU9GRdDKuzhuhVX1pzWhrMIzWHuY
wSEBaVW9NfTxuPZpJTTUNCUxc9gz2buAHEjS/kWVpIesuRMyfUdt70HPO1hpuy5S
ybtSM/j2CPkKVnFC9cisK1mLq+YOlXJrIoLEgPvRBhMWkncPs+FcxELgwzj9iqgD
2cqhtYugrsGnhJZ8SGFTkAyt6EL5m5EcR8Ez0pLroIhd2cKFjoZxFpEPpsCzQRRQ
dOQzIH4QT1SFDVubb1khcIWqjk8iAdCVOHBvMO0DxBQmNeJ9MU/ChO4yE104/8UI
oCiBND7y5nXYx1wDd8gUq+QhQ0V64HefiePqFMt+KxyD3hVIZwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFoszNcnY9mfBfJUQY9MjUUDdIljMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGI4MjdjZmItOWRiOS0z
ZjI2LTlmMzMtZDNjNWE5Njk4ZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAOumOHci3UlqA4fa8zB44Uqm9yXjX+/wF/f0iM
OsrX4ABXQeYYI1yixIo36vV+w0dFXCNMWZGWXdF3lbHYtL13LC7PC6PpTHJDR9AW
FHHJNvuDxketT/XRz2DL7tQEcOlAcZGp0FeeEllqnr0CRvot6Gq1Mjh9CntzQ0WV
Si97k+4fljn1uy4KBZPsUwYNjKi+qc3ZXi3hzc3dv3lBFmq9Mr1H6aUlwbDQSyHY
N7+oXjWaOg2oxAFSrzARE72zcXW6Ph8ACzi64GReyn/WOx2zYqo90ny+y3usKyj6
UsKBn1cC5RxHtK1wyOyoZ2foAiBfEaJ7GRw5qrWyj0oQbG7L
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:09:56 2025 by rpki-client