Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/219b6855-74d7-35f5-84f7-a80ffa08bbe6.roa
File:                     219b6855-74d7-35f5-84f7-a80ffa08bbe6.roa (raw, json)
Hash identifier:          StsC3CaY1G62Fg0kDlgAeRKj5gTCWiXTWNqK1LPMJk8=
Subject key identifier:   A3:8C:4E:79:2A:7E:01:5F:2D:06:7C:8E:52:56:F0:B2:85:C7:1B:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A38A41F5F8094413714A13DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/219b6855-74d7-35f5-84f7-a80ffa08bbe6.roa
Signing time:             Tue 17 Jun 2025 12:36:43 +0000
ROA not before:           Tue 17 Jun 2025 12:36:43 +0000
ROA not after:            Mon 15 Sep 2025 12:36:43 +0000
asID:                     396544
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:a4:1f:5f:80:94:41:37:14:a1:3d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 17 12:36:43 2025 GMT
            Not After : Sep 15 12:36:43 2025 GMT
        Subject: CN=266e603a-3cb2-4bb7-a81e-7d009d4c29dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d4:67:45:55:75:20:d2:d0:db:a8:b9:1f:9e:
                    ac:62:fb:93:20:ed:a1:81:d7:60:52:da:ae:1d:01:
                    1b:e0:6b:8a:d5:48:88:6e:c4:07:be:d9:ad:bf:dd:
                    6e:69:94:23:a2:17:d8:1f:31:47:c8:7f:c5:49:bd:
                    94:d0:aa:b8:26:a0:0b:36:32:03:00:54:c2:f7:dd:
                    95:08:5c:67:e8:75:f3:92:b7:35:35:c9:bd:28:5a:
                    06:56:74:00:e6:d0:c8:77:41:2a:f8:a5:cf:1a:d7:
                    7b:b7:81:e0:6f:11:85:17:81:f3:74:89:19:cd:5d:
                    f3:18:b8:c7:b5:52:3a:93:16:36:0c:41:e2:c2:69:
                    ff:2f:96:d4:b4:10:8d:bd:5a:f7:be:ec:df:f6:a5:
                    ff:bf:c2:56:21:53:d5:5a:ea:b4:79:0d:42:4b:16:
                    ac:aa:39:be:8a:ce:1f:5b:b3:07:04:9b:1c:e1:4a:
                    c8:cc:3d:dd:9c:86:1c:57:d4:66:7b:90:4e:5f:bd:
                    e4:47:f1:88:f3:cd:df:3c:fd:73:95:cd:84:18:3e:
                    fc:35:17:43:ac:ba:bf:b1:e1:51:9e:6d:87:04:a9:
                    9a:94:d2:e3:de:21:e2:ff:51:9e:b2:0d:1a:52:9b:
                    f5:c0:b7:12:aa:7c:ae:45:aa:a8:4c:17:08:43:07:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8C:4E:79:2A:7E:01:5F:2D:06:7C:8E:52:56:F0:B2:85:C7:1B:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/219b6855-74d7-35f5-84f7-a80ffa08bbe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:97:ba:2e:81:57:1e:dd:fd:9d:ae:5c:67:e5:6d:fd:bd:6c:
         93:d8:0c:27:98:03:a2:57:6b:93:41:e2:5f:bc:b4:3f:ad:81:
         f2:80:88:31:fc:fe:2f:f6:ef:6e:97:42:d4:1b:b9:1a:ce:11:
         31:4b:62:1b:eb:2a:01:7b:7e:b5:ad:a7:1d:6b:05:54:ae:c8:
         ff:c5:31:e6:98:24:c9:c1:37:94:fa:be:ad:98:51:87:e0:5b:
         d4:35:bd:78:97:86:20:89:8a:d7:09:59:85:ec:20:dd:c4:eb:
         3b:a4:23:0d:3c:94:1f:6e:1d:09:1c:d7:eb:de:15:97:08:a9:
         53:ee:94:d9:a7:45:d5:ac:3f:29:ff:90:a8:3a:ba:1c:0c:d4:
         28:ea:fa:e2:3a:63:c3:60:30:65:bc:c2:89:16:11:af:3c:9c:
         b9:88:70:6b:3e:5f:06:75:5c:d2:85:21:cc:72:11:d7:d2:19:
         ac:5f:f3:66:9a:45:08:da:07:d2:ad:44:5f:e7:c0:50:56:3e:
         48:de:d0:d6:5f:6e:0a:6b:ab:63:c9:01:0d:80:f2:5f:39:a6:
         d9:1b:9b:23:fe:3a:23:80:9a:a7:5f:56:12:ee:1c:92:d3:2c:
         ac:ad:e2:34:f4:53:3b:7b:97:f9:b6:24:91:54:24:b4:5f:9d:
         5d:89:17:f2
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo4pB9fgJRBNxShPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxNzEyMzY0M1oXDTI1MDkxNTEyMzY0M1owLzEtMCsGA1UEAxMk
MjY2ZTYwM2EtM2NiMi00YmI3LWE4MWUtN2QwMDlkNGMyOWRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdRnRVV1INLQ26i5H56sYvuTIO2hgddgUtqu
HQEb4GuK1UiIbsQHvtmtv91uaZQjohfYHzFHyH/FSb2U0Kq4JqALNjIDAFTC992V
CFxn6HXzkrc1Ncm9KFoGVnQA5tDId0Eq+KXPGtd7t4HgbxGFF4HzdIkZzV3zGLjH
tVI6kxY2DEHiwmn/L5bUtBCNvVr3vuzf9qX/v8JWIVPVWuq0eQ1CSxasqjm+is4f
W7MHBJsc4UrIzD3dnIYcV9Rme5BOX73kR/GI883fPP1zlc2EGD78NRdDrLq/seFR
nm2HBKmalNLj3iHi/1Gesg0aUpv1wLcSqnyuRaqoTBcIQwcdLQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKOMTnkqfgFfLQZ8jlJW8LKFxxuMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjE5YjY4NTUtNzRkNy0z
NWY1LTg0ZjctYTgwZmZhMDhiYmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKKXui6BVx7d/Z2uXGflbf29bJPYDCeYA6JXa5NB4l+8tD+tgfKA
iDH8/i/2726XQtQbuRrOETFLYhvrKgF7frWtpx1rBVSuyP/FMeaYJMnBN5T6vq2Y
UYfgW9Q1vXiXhiCJitcJWYXsIN3E6zukIw08lB9uHQkc1+veFZcIqVPulNmnRdWs
Pyn/kKg6uhwM1Cjq+uI6Y8NgMGW8wokWEa88nLmIcGs+XwZ1XNKFIcxyEdfSGaxf
82aaRQjaB9KtRF/nwFBWPkje0NZfbgprq2PJAQ2A8l85ptkbmyP+OiOAmqdfVhLu
HJLTLKyt4jT0Uzt7l/m2JJFUJLRfnV2JF/I=
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:51:30 2025 by rpki-client