Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9b27e5-471f-3c09-aeb1-1b2773412efa.roa
File:                     0b9b27e5-471f-3c09-aeb1-1b2773412efa.roa (raw, json)
Hash identifier:          PEOEYjLbuRpcwreJv3u8KGaXjB/mnoBK+LxkQ+vZk34=
Subject key identifier:   85:44:C6:E8:52:6D:9E:16:03:BA:EE:31:09:0E:07:FF:FB:D8:12:CB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307C7EFE9BA49A74112400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9b27e5-471f-3c09-aeb1-1b2773412efa.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     20362
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7c:7e:fe:9b:a4:9a:74:11:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=49367dda-7c82-4ec2-9bea-043c22a1e0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:47:d7:f3:29:c2:8e:40:02:7b:2b:2a:32:2d:
                    f8:f3:a9:4f:31:f5:a6:25:37:07:26:ab:19:f3:fe:
                    7c:03:fa:b1:92:bc:91:38:42:7e:be:43:9e:33:74:
                    de:64:59:4a:08:31:53:2e:57:6e:38:f9:7d:ec:3b:
                    e2:ad:d2:da:2d:52:04:11:45:26:0a:7a:cd:18:bf:
                    d7:07:e8:da:4b:c4:ca:a1:3f:94:92:2d:b6:30:51:
                    87:72:8f:7f:36:84:d3:e1:84:0b:fd:58:76:e6:4c:
                    fc:51:6e:70:ff:38:2b:32:df:5b:ba:b2:24:48:1d:
                    20:b6:a5:c0:76:bd:20:d5:1f:30:70:c7:b7:ea:9e:
                    aa:d9:8b:e1:82:62:e7:6c:eb:4c:6c:e6:c0:f9:46:
                    e0:e0:49:e8:4c:78:22:53:ac:3f:3e:cf:7d:9c:ad:
                    13:1e:6e:54:aa:52:2e:f3:a4:d1:0a:6d:49:a2:91:
                    47:79:93:43:92:3e:0e:fb:6f:7a:83:b0:79:ab:a7:
                    82:03:0c:8d:5b:21:4d:d3:f1:7a:ab:1c:72:68:9e:
                    28:0b:d7:fb:c6:4c:95:0b:e0:b3:4b:c6:18:4c:3c:
                    6c:91:96:77:6e:b7:5a:84:7d:f6:d6:a0:3e:44:74:
                    8b:9c:3e:41:7d:00:e5:17:f6:d6:f0:68:66:a8:c3:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:44:C6:E8:52:6D:9E:16:03:BA:EE:31:09:0E:07:FF:FB:D8:12:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9b27e5-471f-3c09-aeb1-1b2773412efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:36:32:e1:ed:8f:08:d1:63:a2:12:42:9e:6d:f7:50:41:83:
         ec:63:37:35:24:46:7b:2d:b6:e7:6f:3f:d7:a0:02:40:8d:27:
         0a:03:3a:6b:03:1f:d1:e3:ad:fd:34:e6:8e:06:db:a2:b1:ed:
         46:19:11:85:4a:a3:19:88:52:cc:73:e1:36:18:97:ee:cd:14:
         35:6d:f5:30:9a:ad:7e:8b:79:17:85:eb:46:0e:fc:c1:96:9b:
         85:4b:34:d1:22:4a:8c:94:35:d8:40:45:ef:b3:c1:4e:b9:bb:
         56:c2:31:55:07:92:12:ab:a5:18:0f:fa:af:ee:db:3b:30:61:
         2c:f7:05:18:49:d8:3d:a0:25:52:a7:33:1a:d7:d0:40:fa:1c:
         4d:aa:4d:87:43:88:ea:92:b9:76:42:b4:59:78:e2:a1:28:e4:
         40:ea:19:b6:ea:0b:81:36:53:2e:07:c4:4d:cc:25:a2:c4:7f:
         32:79:dd:1a:32:08:31:b8:68:7b:19:8b:e6:75:57:c2:81:d3:
         01:87:dc:1a:aa:ec:5e:42:25:27:c1:d5:8f:ae:fb:22:92:d9:
         95:b4:17:48:bb:23:fb:f7:30:15:4b:66:78:f0:b8:73:46:61:
         ef:ce:8c:14:87:f7:ba:fc:db:90:0d:a1:da:16:0e:13:a9:e8:
         e7:cb:a5:0a
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpaMHx+/pukmnQRJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
NDkzNjdkZGEtN2M4Mi00ZWMyLTliZWEtMDQzYzIyYTFlMGJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkfX8ynCjkACeysqMi3486lPMfWmJTcHJqsZ
8/58A/qxkryROEJ+vkOeM3TeZFlKCDFTLlduOPl97DvirdLaLVIEEUUmCnrNGL/X
B+jaS8TKoT+Uki22MFGHco9/NoTT4YQL/Vh25kz8UW5w/zgrMt9burIkSB0gtqXA
dr0g1R8wcMe36p6q2YvhgmLnbOtMbObA+Ubg4EnoTHgiU6w/Ps99nK0THm5UqlIu
86TRCm1JopFHeZNDkj4O+296g7B5q6eCAwyNWyFN0/F6qxxyaJ4oC9f7xkyVC+Cz
S8YYTDxskZZ3brdahH321qA+RHSLnD5BfQDlF/bW8GhmqMOZJQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFIVExuhSbZ4WA7ruMQkOB//72BLLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI5YjI3ZTUtNDcxZi0z
YzA5LWFlYjEtMWIyNzczNDEyZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAFNjLh7Y8I0WOiEkKebfdQQYPsYzc1JEZ7Lbbn
bz/XoAJAjScKAzprAx/R4639NOaOBtuise1GGRGFSqMZiFLMc+E2GJfuzRQ1bfUw
mq1+i3kXhetGDvzBlpuFSzTRIkqMlDXYQEXvs8FOubtWwjFVB5ISq6UYD/qv7ts7
MGEs9wUYSdg9oCVSpzMa19BA+hxNqk2HQ4jqkrl2QrRZeOKhKORA6hm26guBNlMu
B8RNzCWixH8yed0aMggxuGh7GYvmdVfCgdMBh9waquxeQiUnwdWPrvsiktmVtBdI
uyP79zAVS2Z48LhzRmHvzowUh/e6/NuQDaHaFg4Tqejny6UK
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:31:30 2025 by rpki-client