Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9464097c-6aa9-3326-b71a-f87166a12a72.roa
File:                     9464097c-6aa9-3326-b71a-f87166a12a72.roa (raw, json)
Hash identifier:          mIq8UisrmAJy9Ha6z4217fZf/oBm+U46oWCYbIvYx1w=
Subject key identifier:   F8:BB:9C:F1:35:32:9B:9E:45:FF:4B:1E:72:5F:C7:E6:42:AC:30:D3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AB7B628E391C34F2753B729A5
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9464097c-6aa9-3326-b71a-f87166a12a72.roa
Signing time:             Sat 02 Aug 2025 01:00:32 +0000
ROA not before:           Sat 02 Aug 2025 01:00:32 +0000
ROA not after:            Fri 31 Oct 2025 01:00:32 +0000
asID:                     211369
IP address blocks:        2001:500:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b7:b6:28:e3:91:c3:4f:27:53:b7:29:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  2 01:00:32 2025 GMT
            Not After : Oct 31 01:00:32 2025 GMT
        Subject: CN=ff3cac96-6e53-44d7-8665-27e808eeeb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:39:fc:03:f1:3c:02:69:20:c2:a5:68:8a:42:
                    9f:43:18:5a:bf:7a:5f:26:fd:68:34:be:0c:af:37:
                    ad:73:7e:28:c5:25:58:88:5c:0c:14:6a:a7:ef:dd:
                    04:ed:a8:70:ab:25:88:16:aa:c3:18:25:c7:b5:a3:
                    a5:5c:f7:52:10:ce:0c:e1:bd:0d:1f:c1:88:73:ab:
                    84:91:71:24:e0:e6:05:09:8d:54:ac:43:5d:33:98:
                    20:c1:ab:a3:90:d2:9f:4a:54:8e:98:40:bc:20:cf:
                    b7:b1:d4:22:5a:3d:81:27:33:8d:7f:7d:d9:79:40:
                    73:30:11:af:ab:85:9d:ec:8d:d5:61:7e:dd:3b:1a:
                    22:23:82:f1:9d:d6:22:4f:7c:dc:4b:84:24:96:78:
                    f8:94:e2:35:76:3b:e4:5a:6e:7a:91:16:b2:dc:a2:
                    c1:33:24:3a:1c:5b:94:d4:28:e1:07:ef:c8:52:d4:
                    9a:74:3a:13:29:2c:97:07:97:54:ad:a3:c7:07:7c:
                    dd:56:c9:28:d7:58:79:cf:bc:0a:29:87:a1:57:d3:
                    04:37:56:b7:d2:dd:cf:5c:99:d7:ee:43:85:23:f4:
                    ca:b8:df:cb:37:dc:f2:34:31:22:f3:72:76:1d:24:
                    bc:47:d0:4a:04:f2:1d:a5:c4:35:53:0b:75:17:86:
                    24:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BB:9C:F1:35:32:9B:9E:45:FF:4B:1E:72:5F:C7:E6:42:AC:30:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9464097c-6aa9-3326-b71a-f87166a12a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:123::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:58:ab:fe:22:46:de:4b:24:8d:99:fe:de:d6:74:2d:11:92:
         8a:e6:c1:0f:7e:1b:71:84:28:e1:c4:90:74:39:c1:90:34:2c:
         09:b8:44:f9:ae:7a:11:8b:16:7f:4b:70:01:f6:8d:62:e2:e3:
         9c:93:0b:23:67:12:7a:28:be:37:a3:87:f9:42:86:3b:21:19:
         bb:2d:0d:d9:7d:21:37:ba:fb:be:cc:a3:d3:c6:43:b2:fa:8e:
         a2:f4:ba:89:16:16:ee:b6:ed:d4:98:df:65:dd:f1:3f:a7:74:
         6e:7f:a2:56:47:8e:84:a8:ac:8e:ac:41:fd:42:05:76:28:e7:
         c5:67:4d:df:ee:38:55:12:a9:1b:db:fd:6f:d0:e2:3b:19:98:
         d9:15:4b:1e:17:b0:05:8f:59:99:0f:cf:57:fd:82:68:42:cd:
         ac:65:b5:74:f4:5e:a5:e8:1c:da:ae:e2:4e:eb:69:4f:90:41:
         62:58:5d:26:d7:16:4a:30:5e:0b:11:2c:b1:8f:ec:17:4d:1c:
         d7:31:b6:fd:15:b0:0d:ab:e6:ee:9b:f6:8c:42:6a:a7:cc:e3:
         19:16:87:b8:bb:33:8e:0b:a1:cd:8f:9f:dd:ce:c2:8c:19:5e:
         9e:40:53:2e:8f:59:55:c4:57:b8:f0:77:35:40:4e:9e:c4:96:
         00:d4:cc:96
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq3tijjkcNPJ1O3KaUwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk
ZmYzY2FjOTYtNmU1My00NGQ3LTg2NjUtMjdlODA4ZWVlYjVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDn8A/E8AmkgwqVoikKfQxhav3pfJv1oNL4M
rzetc34oxSVYiFwMFGqn790E7ahwqyWIFqrDGCXHtaOlXPdSEM4M4b0NH8GIc6uE
kXEk4OYFCY1UrENdM5ggwaujkNKfSlSOmEC8IM+3sdQiWj2BJzONf33ZeUBzMBGv
q4Wd7I3VYX7dOxoiI4LxndYiT3zcS4Qklnj4lOI1djvkWm56kRay3KLBMyQ6HFuU
1CjhB+/IUtSadDoTKSyXB5dUraPHB3zdVsko11h5z7wKKYehV9MEN1a30t3PXJnX
7kOFI/TKuN/LN9zyNDEi83J2HSS8R9BKBPIdpcQ1Uwt1F4YkcQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPi7nPE1MpueRf9LHnJfx+ZCrDDTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTQ2NDA5N2MtNmFhOS0z
MzI2LWI3MWEtZjg3MTY2YTEyYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADZYq/4iRt5LJI2Z/t7WdC0RkormwQ9+G3GEKOHEkHQ5wZA0LAm4
RPmuehGLFn9LcAH2jWLi45yTCyNnEnoovjejh/lChjshGbstDdl9ITe6+77Mo9PG
Q7L6jqL0uokWFu627dSY32Xd8T+ndG5/olZHjoSorI6sQf1CBXYo58VnTd/uOFUS
qRvb/W/Q4jsZmNkVSx4XsAWPWZkPz1f9gmhCzaxltXT0XqXoHNqu4k7raU+QQWJY
XSbXFkowXgsRLLGP7BdNHNcxtv0VsA2r5u6b9oxCaqfM4xkWh7i7M44Loc2Pn93O
wowZXp5AUy6PWVXEV7jwdzVATp7ElgDUzJY=
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:53:49 2025 by rpki-client