Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa
File:                     67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa (raw, json)
Hash identifier:          Td+CLSGYIf6py44yv1wmFG8z8rQcskYkeSE4WoThg5E=
Subject key identifier:   4D:27:4D:C0:BD:B0:DC:9C:DA:6A:BE:69:42:56:1C:E6:7A:D0:F6:F3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584BB88D4C2D6F5D1F125D96D300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     397206
IP address blocks:        2001:500:123::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:4c:2d:6f:5d:1f:12:5d:96:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=fc006f75-ca40-44f6-b2af-3755f53aacaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:4e:a4:e0:c6:62:e5:33:9f:6c:f8:71:30:
                    44:58:83:2c:45:7f:3b:d8:ee:61:08:1a:1c:db:71:
                    e2:f7:ba:fb:74:46:81:1e:fa:03:d2:d7:fb:08:41:
                    9d:54:4d:1e:c7:2f:fa:ee:55:bc:be:ed:2c:29:15:
                    73:2e:5e:89:65:5c:d4:62:74:9b:ac:a9:8e:60:f5:
                    36:80:aa:c4:f2:ca:d3:4a:07:f9:49:88:ce:bb:8f:
                    24:61:a8:85:b0:d9:03:91:86:3a:0f:31:5a:da:e0:
                    4d:ba:1d:20:4c:8a:f0:6e:12:d7:b9:f8:8c:3f:5c:
                    41:39:85:45:2e:e8:1d:fa:c7:7d:12:19:25:33:2f:
                    96:84:17:8c:bc:2d:a5:5d:4c:b7:d9:03:02:73:73:
                    89:c1:a4:48:9d:26:f3:01:be:53:e3:93:73:c9:f2:
                    5f:cc:53:cd:ff:c9:a9:b6:ea:50:05:95:c8:9d:f6:
                    75:04:a5:b0:67:e6:21:11:b3:cc:b8:c7:89:31:d0:
                    02:f3:61:53:45:d7:dd:11:de:ed:78:07:fd:b7:3c:
                    05:e9:09:ff:f9:2e:5f:7a:ff:ce:96:13:fa:f2:79:
                    f0:b8:80:df:01:8d:5b:c9:29:b2:17:9b:23:aa:48:
                    35:c2:b4:f5:6b:76:43:fa:3b:9c:00:48:39:48:eb:
                    5f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:27:4D:C0:BD:B0:DC:9C:DA:6A:BE:69:42:56:1C:E6:7A:D0:F6:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67ccf85b-8c51-3f00-b35d-7c2b5dfede00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:4a:c4:b6:09:12:64:f9:5d:9e:44:2c:41:aa:5b:0f:db:92:
         54:ba:fb:8d:e6:56:b9:45:35:90:91:4d:64:b8:84:cc:39:8e:
         43:7d:c6:78:36:e5:84:16:1f:57:ed:61:fd:06:cb:09:8a:36:
         f2:55:83:a0:3a:dc:a4:b5:97:b0:6c:fb:38:fa:57:57:e5:09:
         40:b6:1a:dd:56:10:a8:10:83:f5:03:8a:57:40:fc:8e:28:31:
         d3:06:ac:e7:ed:40:63:0e:7b:dc:d3:73:07:4d:ba:5f:c1:28:
         68:7a:40:0f:d2:ea:31:a1:4f:61:75:85:76:38:8f:aa:ab:11:
         7c:6a:f1:65:c2:68:37:5e:dd:aa:0e:27:ed:a7:9c:63:3f:79:
         6b:ed:5c:42:30:cc:25:01:06:5a:f2:5d:b6:c2:14:80:f5:a0:
         4c:24:73:f4:6d:13:b1:54:d1:8f:5c:b5:43:f2:a0:8d:ba:50:
         3c:3d:89:16:a8:e8:27:bd:2e:b6:eb:c3:a0:c9:c5:d5:9c:dc:
         c9:57:a5:39:88:e2:6c:a5:6b:ec:40:80:8e:c8:81:1c:f9:fa:
         a6:b7:43:ac:08:82:50:f8:d5:f7:2f:75:d2:05:8b:90:7c:b8:
         32:be:9c:64:e9:43:4a:e4:ce:a4:68:86:14:e3:af:b0:40:7d:
         7d:3a:29:f6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEu4jUwtb10fEl2W0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk
ZmMwMDZmNzUtY2E0MC00NGY2LWIyYWYtMzc1NWY1M2FhY2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZ9OpODGYuUzn2z4cTBEWIMsRX872O5hCBoc
23Hi97r7dEaBHvoD0tf7CEGdVE0exy/67lW8vu0sKRVzLl6JZVzUYnSbrKmOYPU2
gKrE8srTSgf5SYjOu48kYaiFsNkDkYY6DzFa2uBNuh0gTIrwbhLXufiMP1xBOYVF
Lugd+sd9EhklMy+WhBeMvC2lXUy32QMCc3OJwaRInSbzAb5T45NzyfJfzFPN/8mp
tupQBZXInfZ1BKWwZ+YhEbPMuMeJMdAC82FTRdfdEd7teAf9tzwF6Qn/+S5fev/O
lhP68nnwuIDfAY1bySmyF5sjqkg1wrT1a3ZD+jucAEg5SOtfFQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFE0nTcC9sNyc2mq+aUJWHOZ60PbzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjdjY2Y4NWItOGM1MS0z
ZjAwLWIzNWQtN2MyYjVkZmVkZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEj
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCgSsS2CRJk+V2eRCxBqlsP25JUuvuN5la5RTWQ
kU1kuITMOY5DfcZ4NuWEFh9X7WH9BssJijbyVYOgOtyktZewbPs4+ldX5QlAthrd
VhCoEIP1A4pXQPyOKDHTBqzn7UBjDnvc03MHTbpfwShoekAP0uoxoU9hdYV2OI+q
qxF8avFlwmg3Xt2qDiftp5xjP3lr7VxCMMwlAQZa8l22whSA9aBMJHP0bROxVNGP
XLVD8qCNulA8PYkWqOgnvS6268OgycXVnNzJV6U5iOJspWvsQICOyIEc+fqmt0Os
CIJQ+NX3L3XSBYuQfLgyvpxk6UNK5M6kaIYU46+wQH19Oin2
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:20 2025 by rpki-client