Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11ceabaf-a9f1-30b6-9b7b-6ef3c0366400.roa
File:                     11ceabaf-a9f1-30b6-9b7b-6ef3c0366400.roa (raw, json)
Hash identifier:          0J1HPyA+cFIfo8/oiXzgN7RAT+tKIJ10xmEP41FCWpM=
Subject key identifier:   80:9A:D8:73:44:1F:4F:45:E6:63:24:35:8D:56:21:18:DB:ED:23:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196DCF5E879A6FEE21ABD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11ceabaf-a9f1-30b6-9b7b-6ef3c0366400.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396575
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:dc:f5:e8:79:a6:fe:e2:1a:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=ddc2e27c-3de1-428d-8e16-5d0674971eff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:47:25:f6:c2:a3:79:ab:22:45:b4:7b:14:13:
                    7f:13:88:a4:c7:2f:bf:9f:34:02:f7:4b:46:15:48:
                    97:5f:4f:b5:6c:47:f2:6b:f3:3a:b3:ae:02:8f:01:
                    e7:88:d1:c0:86:65:2a:87:6f:8b:23:59:96:98:b6:
                    ed:cc:cd:77:4a:b2:98:9a:e6:5a:76:cc:16:03:9c:
                    1a:12:2e:6b:96:2b:8e:49:30:28:c0:44:2a:05:8d:
                    9e:cf:f1:63:c0:c5:13:6f:6e:39:c7:4f:0b:3c:87:
                    65:6b:ab:37:2a:08:f7:7f:c2:e8:45:46:ac:c2:8a:
                    f8:79:67:df:15:25:76:b3:ec:e6:fd:4c:1f:ec:0f:
                    b1:ce:09:ca:0a:c8:e6:f2:ba:b2:f0:9c:8b:f8:85:
                    f1:0d:bf:c6:1b:ec:cc:9d:ff:35:0b:fe:6b:c5:ba:
                    ac:df:2a:27:8f:61:76:50:98:47:17:22:0b:84:6d:
                    e8:29:01:d4:f2:e0:25:62:bf:4f:f1:3e:96:5d:c7:
                    1d:a4:bc:bc:f0:29:c9:15:77:81:bc:96:11:48:33:
                    ab:5e:25:1f:55:44:e0:c7:a8:0d:a6:1d:24:7a:26:
                    8c:97:b7:3c:1a:38:25:a2:d5:45:d9:52:b7:89:61:
                    30:52:7e:18:0d:34:6c:7f:58:b8:30:31:01:db:d5:
                    d6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9A:D8:73:44:1F:4F:45:E6:63:24:35:8D:56:21:18:DB:ED:23:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11ceabaf-a9f1-30b6-9b7b-6ef3c0366400.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:7a:e8:18:55:a9:d7:78:2a:a9:42:6e:e0:97:3b:b7:07:92:
         bc:0d:e5:62:26:bc:71:e4:11:dc:a9:17:6f:c5:58:c6:69:be:
         d6:5e:21:0b:0a:9a:60:80:ba:e2:5a:1c:d3:e1:23:92:3a:6e:
         42:41:58:d5:23:fd:ee:a5:80:96:76:9b:50:2e:01:6e:5c:b8:
         b1:46:e5:43:7e:18:7a:59:48:03:30:60:9e:c3:6d:69:84:ff:
         c6:1f:ae:98:95:52:af:a6:52:76:df:70:0b:f9:89:ab:4b:98:
         ea:d4:5d:79:2d:d5:49:ab:c2:e8:20:12:01:30:f7:d5:23:1c:
         f8:43:95:af:19:87:37:37:ab:6f:bb:5c:66:8c:9e:90:a3:82:
         3c:65:4d:62:41:85:5b:12:6a:d0:0c:6a:09:66:d1:d4:91:a2:
         ab:c2:66:0a:32:55:89:96:7e:0e:27:62:63:0c:77:48:4e:39:
         a8:e0:79:1e:10:a4:a8:f4:a3:47:99:f6:4f:e1:0e:40:ac:92:
         9a:eb:f6:bf:f2:29:13:1a:fb:25:1b:95:dc:31:a1:c0:ee:cd:
         42:53:74:40:d9:fc:76:80:41:33:20:8b:05:4d:45:88:da:63:
         fe:b8:91:4e:a3:34:80:75:18:10:92:a2:cf:0c:8f:d9:6d:31:
         f8:85:75:2e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhltz16Hmm/uIavQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZGRjMmUyN2MtM2RlMS00MjhkLThlMTYtNWQwNjc0OTcxZWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ucl9sKjeasiRbR7FBN/E4ikxy+/nzQC90tG
FUiXX0+1bEfya/M6s64CjwHniNHAhmUqh2+LI1mWmLbtzM13SrKYmuZadswWA5wa
Ei5rliuOSTAowEQqBY2ez/FjwMUTb245x08LPIdla6s3Kgj3f8LoRUaswor4eWff
FSV2s+zm/Uwf7A+xzgnKCsjm8rqy8JyL+IXxDb/GG+zMnf81C/5rxbqs3yonj2F2
UJhHFyILhG3oKQHU8uAlYr9P8T6WXccdpLy88CnJFXeBvJYRSDOrXiUfVUTgx6gN
ph0keiaMl7c8GjglotVF2VK3iWEwUn4YDTRsf1i4MDEB29XWrwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFICa2HNEH09F5mMkNY1WIRjb7SPaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTFjZWFiYWYtYTlmMS0z
MGI2LTliN2ItNmVmM2MwMzY2NDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB2eugYVanXeCqpQm7glzu3B5K8DeViJrxx5BHc
qRdvxVjGab7WXiELCppggLriWhzT4SOSOm5CQVjVI/3upYCWdptQLgFuXLixRuVD
fhh6WUgDMGCew21phP/GH66YlVKvplJ233AL+YmrS5jq1F15LdVJq8LoIBIBMPfV
Ixz4Q5WvGYc3N6tvu1xmjJ6Qo4I8ZU1iQYVbEmrQDGoJZtHUkaKrwmYKMlWJln4O
J2JjDHdITjmo4HkeEKSo9KNHmfZP4Q5ArJKa6/a/8ikTGvslG5XcMaHA7s1CU3RA
2fx2gEEzIIsFTUWI2mP+uJFOozSAdRgQkqLPDI/ZbTH4hXUu
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:05 2025 by rpki-client