Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eef99e59-7829-3ad8-9bd2-c3ea1f6bad1d.roa
File:                     eef99e59-7829-3ad8-9bd2-c3ea1f6bad1d.roa (raw, json)
Hash identifier:          V3++nZY4jOy3Vhjiky+Kec0xeFfpfPNdwsybVZkEYCs=
Subject key identifier:   E0:C4:48:86:C9:64:AE:F6:F3:E2:EA:77:17:74:C0:FE:A4:E9:23:7C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF0837CBC1DFFD4DA4FD200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eef99e59-7829-3ad8-9bd2-c3ea1f6bad1d.roa
Signing time:             Thu 24 Jul 2025 12:38:54 +0000
ROA not before:           Thu 24 Jul 2025 12:38:54 +0000
ROA not after:            Wed 22 Oct 2025 12:38:54 +0000
asID:                     397212
IP address blocks:        2001:500:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:83:7c:bc:1d:ff:d4:da:4f:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:54 2025 GMT
            Not After : Oct 22 12:38:54 2025 GMT
        Subject: CN=f67b6c1e-6b6b-4e88-a454-4ed6fd864e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:65:f8:a9:e6:4f:04:58:92:68:55:27:7c:20:
                    00:0a:f9:4f:7e:9b:89:64:81:34:81:de:42:91:a4:
                    3f:f0:0a:25:35:81:a8:eb:dd:ba:e2:66:d3:4c:23:
                    af:92:fc:03:85:5e:41:04:e0:27:e7:af:4d:8a:53:
                    63:30:25:5a:62:08:0c:6a:1e:9c:31:d5:03:60:f8:
                    59:63:4b:ac:33:00:b6:f0:6d:16:58:79:35:56:43:
                    9a:35:c6:06:42:4f:4f:a1:01:06:d6:07:fe:5e:dc:
                    46:d1:a8:16:3e:b7:0b:33:3b:87:9a:63:f1:94:8a:
                    67:ca:c0:cd:6d:14:6b:d1:3f:d1:f6:27:70:08:9b:
                    34:1e:9b:c5:cf:5a:60:99:5e:f9:c0:cd:eb:fc:f3:
                    5c:20:d7:fb:46:e8:4f:3d:f1:b1:1f:82:57:a1:67:
                    81:78:ae:6b:10:14:25:72:2c:2c:67:59:f3:b1:cf:
                    0a:f2:77:af:e7:92:cb:6e:a0:9f:b0:01:94:ae:5d:
                    df:f3:5e:89:7c:26:24:49:28:6a:16:c2:f3:c6:d2:
                    de:49:d9:84:4a:32:a9:31:69:69:ca:09:2a:36:50:
                    55:e5:3e:74:f9:3a:c4:86:6f:80:59:15:0f:75:6d:
                    2f:d9:86:9b:9c:48:ce:2b:8a:71:49:14:52:33:cf:
                    88:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C4:48:86:C9:64:AE:F6:F3:E2:EA:77:17:74:C0:FE:A4:E9:23:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eef99e59-7829-3ad8-9bd2-c3ea1f6bad1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b1:d5:d9:9a:a7:ca:4f:44:0e:4e:48:a5:4e:b1:a9:dd:db:
         d1:d6:22:ab:88:c2:71:3d:89:ff:a7:01:1d:45:e1:96:8d:f4:
         67:2d:1d:1b:1e:ef:22:61:9c:11:1a:a0:2c:d2:3d:8a:1e:ce:
         ae:07:8d:12:b2:ed:8f:cb:10:f4:17:df:24:0a:64:22:ea:48:
         89:ea:c5:ef:b2:8d:9b:19:21:ab:0b:2c:90:db:a4:4a:18:ea:
         32:18:74:af:e3:fc:f7:a8:1c:3a:4d:cc:3c:77:a2:d9:9f:51:
         e4:ca:d7:c5:96:96:be:eb:41:2b:84:67:10:4e:f9:0a:14:2c:
         cb:11:da:e6:b0:8e:d5:40:2f:12:37:47:50:24:bd:27:04:99:
         c3:5d:8b:20:6d:d4:eb:26:aa:c8:d1:5c:4c:dd:03:7c:2c:b3:
         49:20:01:69:80:d6:6e:21:36:78:2a:76:ea:9e:0c:d6:eb:27:
         e6:d1:e3:37:d7:f7:1a:30:7e:e9:34:38:94:5b:89:97:34:9b:
         d8:7a:6f:85:7f:79:51:c9:2f:ea:f5:ad:8e:fd:f2:47:0d:e8:
         fb:e1:83:77:dd:aa:ce:52:55:19:f0:50:02:55:cd:33:f3:78:
         4e:a5:ca:76:2f:ae:47:0f:f7:8c:f7:c2:f7:bc:29:14:e7:cc:
         32:fb:99:7e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqf8IN8vB3/1NpP0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyNDEyMzg1NFoXDTI1MTAyMjEyMzg1NFowLzEtMCsGA1UEAxMk
ZjY3YjZjMWUtNmI2Yi00ZTg4LWE0NTQtNGVkNmZkODY0ZTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWX4qeZPBFiSaFUnfCAACvlPfpuJZIE0gd5C
kaQ/8AolNYGo69264mbTTCOvkvwDhV5BBOAn569NilNjMCVaYggMah6cMdUDYPhZ
Y0usMwC28G0WWHk1VkOaNcYGQk9PoQEG1gf+XtxG0agWPrcLMzuHmmPxlIpnysDN
bRRr0T/R9idwCJs0HpvFz1pgmV75wM3r/PNcINf7RuhPPfGxH4JXoWeBeK5rEBQl
ciwsZ1nzsc8K8nev55LLbqCfsAGUrl3f816JfCYkSShqFsLzxtLeSdmESjKpMWlp
ygkqNlBV5T50+TrEhm+AWRUPdW0v2YabnEjOK4pxSRRSM8+IMQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFODESIbJZK728+Lqdxd0wP6k6SN8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWVmOTllNTktNzgyOS0z
YWQ4LTliZDItYzNlYTFmNmJhZDFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIWx1dmap8pPRA5OSKVOsand29HWIquIwnE9if+nAR1F4ZaN9Gct
HRse7yJhnBEaoCzSPYoezq4HjRKy7Y/LEPQX3yQKZCLqSInqxe+yjZsZIasLLJDb
pEoY6jIYdK/j/PeoHDpNzDx3otmfUeTK18WWlr7rQSuEZxBO+QoULMsR2uawjtVA
LxI3R1AkvScEmcNdiyBt1OsmqsjRXEzdA3wss0kgAWmA1m4hNngqduqeDNbrJ+bR
4zfX9xowfuk0OJRbiZc0m9h6b4V/eVHJL+r1rY798kcN6Pvhg3fdqs5SVRnwUAJV
zTPzeE6lynYvrkcP94z3wve8KRTnzDL7mX4=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:22:28 2025 by rpki-client