Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa
File:                     4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa (raw, json)
Hash identifier:          dw5QLAiS1ngSkf00KoYygnI49oCDEUgWOxJBh7EZ3IM=
Subject key identifier:   BE:51:C6:9C:5A:D1:CF:3F:AF:A8:F1:0C:25:20:DC:13:1B:B2:55:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AA2C63DEC718C0CB307933FC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa
Signing time:             Fri 25 Jul 2025 13:01:04 +0000
ROA not before:           Fri 25 Jul 2025 13:01:04 +0000
ROA not after:            Thu 23 Oct 2025 13:01:04 +0000
asID:                     396605
IP address blocks:        2001:502:cbe4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a2:c6:3d:ec:71:8c:0c:b3:07:93:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 25 13:01:04 2025 GMT
            Not After : Oct 23 13:01:04 2025 GMT
        Subject: CN=2e61ff9e-ff99-43e3-a774-89362bfb9615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d0:55:bd:53:2d:a1:32:54:83:5e:7f:cc:ee:
                    8b:66:38:5b:2c:cc:5c:e3:5d:17:b3:fb:6c:05:04:
                    eb:fd:11:e4:eb:ed:b0:94:59:66:a4:67:27:db:71:
                    6b:c5:75:f8:21:26:b6:ad:a1:61:4f:ce:f6:9c:a3:
                    29:55:e1:75:fc:30:0b:ca:9e:9b:df:34:38:b7:9e:
                    29:42:59:8d:61:3a:7e:01:d5:91:e3:c8:6d:d6:af:
                    98:f5:ed:c5:58:a6:58:eb:65:b3:03:a6:e0:55:b6:
                    1a:05:05:20:37:a9:be:b4:f0:6a:c8:32:62:67:a9:
                    34:c0:13:c6:12:4f:17:f7:22:2f:b1:a3:22:c9:d7:
                    7f:eb:b4:20:32:d5:36:f6:b8:0d:4c:4f:16:37:4a:
                    c9:78:36:d1:55:f3:45:6e:19:49:85:10:4f:40:fd:
                    bd:5e:98:d1:3b:5f:71:82:f6:5a:5f:81:e7:85:0a:
                    b5:e3:dd:8c:3b:18:00:96:92:fc:89:5a:2d:c6:c3:
                    59:36:42:74:05:a3:b7:79:6a:e7:04:36:80:26:85:
                    da:a2:77:e6:0d:e1:ee:33:1f:e0:3a:c4:fe:c4:13:
                    f3:e8:41:da:38:32:b5:b6:a4:97:81:d3:8f:5a:f1:
                    37:0c:55:87:ae:7a:ff:ee:bb:31:63:12:99:13:80:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:51:C6:9C:5A:D1:CF:3F:AF:A8:F1:0C:25:20:DC:13:1B:B2:55:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ea14ff0-dfde-3a54-9306-c36d35f1936c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:88:da:8b:eb:01:ea:4d:93:ec:c6:ae:81:d6:5b:7f:4e:74:
         09:89:94:38:b0:b3:03:b1:8b:9d:0c:6a:8b:1c:bf:f2:a5:93:
         65:a2:8a:14:3a:f7:ca:ef:56:71:8e:67:4a:45:38:c6:01:5a:
         24:0a:9f:97:58:39:47:cd:63:a4:c9:61:26:f3:7d:e1:71:76:
         b1:1a:34:5e:9f:93:89:b6:32:de:78:3d:d4:87:6e:32:f1:d9:
         74:66:c9:3a:af:e6:1b:1b:00:b3:8f:04:10:18:d9:08:3b:48:
         bc:38:24:06:85:7c:45:9a:eb:fd:88:14:f0:1b:02:62:3e:d6:
         23:2a:07:57:33:aa:a8:b9:90:59:9a:9c:c8:21:fa:62:42:db:
         5e:1f:e6:a1:7a:8e:dd:33:c5:db:f3:73:07:7b:bd:42:6a:7a:
         a0:b0:fe:95:b4:3e:df:ed:5b:8c:fc:03:75:07:ce:17:66:93:
         a0:a6:e1:60:a5:04:3b:34:58:c8:e8:30:22:f9:da:d1:2f:72:
         d2:f5:63:28:d5:24:2f:e2:7f:ad:67:41:09:27:5a:53:66:30:
         ff:ce:4a:07:9f:a7:10:fc:ed:3f:dd:cb:b3:d1:66:60:25:07:
         59:0a:ad:8b:75:89:8b:c2:5d:66:67:a4:5a:d1:68:e0:1f:57:
         0e:aa:23:aa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqixj3scYwMsweTP8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyNTEzMDEwNFoXDTI1MTAyMzEzMDEwNFowLzEtMCsGA1UEAxMk
MmU2MWZmOWUtZmY5OS00M2UzLWE3NzQtODkzNjJiZmI5NjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitBVvVMtoTJUg15/zO6LZjhbLMxc410Xs/ts
BQTr/RHk6+2wlFlmpGcn23FrxXX4ISa2raFhT872nKMpVeF1/DALyp6b3zQ4t54p
QlmNYTp+AdWR48ht1q+Y9e3FWKZY62WzA6bgVbYaBQUgN6m+tPBqyDJiZ6k0wBPG
Ek8X9yIvsaMiydd/67QgMtU29rgNTE8WN0rJeDbRVfNFbhlJhRBPQP29XpjRO19x
gvZaX4HnhQq1492MOxgAlpL8iVotxsNZNkJ0BaO3eWrnBDaAJoXaonfmDeHuMx/g
OsT+xBPz6EHaODK1tqSXgdOPWvE3DFWHrnr/7rsxYxKZE4Aq0QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFL5Rxpxa0c8/r6jxDCUg3BMbslVAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGVhMTRmZjAtZGZkZS0z
YTU0LTkzMDYtYzM2ZDM1ZjE5MzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABaI2ovrAepNk+zGroHWW39OdAmJlDiwswOxi50Maoscv/Klk2Wi
ihQ698rvVnGOZ0pFOMYBWiQKn5dYOUfNY6TJYSbzfeFxdrEaNF6fk4m2Mt54PdSH
bjLx2XRmyTqv5hsbALOPBBAY2Qg7SLw4JAaFfEWa6/2IFPAbAmI+1iMqB1czqqi5
kFmanMgh+mJC214f5qF6jt0zxdvzcwd7vUJqeqCw/pW0Pt/tW4z8A3UHzhdmk6Cm
4WClBDs0WMjoMCL52tEvctL1YyjVJC/if61nQQknWlNmMP/OSgefpxD87T/dy7PR
ZmAlB1kKrYt1iYvCXWZnpFrRaOAfVw6qI6o=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:31:15 2025 by rpki-client