Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c047b37-47ee-3878-bb8c-c2f4b72eea1d.roa
File:                     2c047b37-47ee-3878-bb8c-c2f4b72eea1d.roa (raw, json)
Hash identifier:          yC9W1qpdMozFl5vKjnwar6ByT79P7/hHC44Wo+gJWk0=
Subject key identifier:   5A:00:EE:43:BC:83:AC:A6:17:49:AF:EF:74:2B:07:F3:84:7D:2F:54
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F6797067E1B9C0DE4F9900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c047b37-47ee-3878-bb8c-c2f4b72eea1d.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     396612
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:79:70:67:e1:b9:c0:de:4f:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=eb71e08f-f5a6-40ea-8c67-15b4ba4482de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:28:b0:69:5f:5e:ee:3c:bc:40:5a:7d:7c:28:
                    9a:20:ae:b2:77:91:02:bb:48:33:7e:16:ee:d0:ce:
                    5e:bd:11:2d:0a:7e:b9:6a:25:70:0d:88:78:41:ed:
                    1b:3e:c8:14:9b:2a:13:4b:44:57:92:f6:c0:87:64:
                    cb:5c:a4:eb:7c:f8:b7:b8:5d:f4:7c:20:70:68:dd:
                    c5:29:3d:50:83:e1:6a:c5:9b:2d:b5:a0:a9:e6:7c:
                    5f:04:ea:69:0b:8e:72:3d:1b:4e:6d:12:f6:8c:87:
                    01:dc:aa:2b:89:4e:e5:ee:4e:2d:65:2b:df:07:d0:
                    4f:b9:57:1f:29:0b:56:91:06:e7:cf:05:08:4f:7c:
                    e4:82:c7:28:4b:5f:1b:b0:47:15:4c:96:6f:be:f2:
                    75:c7:3c:9b:39:95:86:4e:88:41:84:34:28:64:a0:
                    0b:ee:3d:8d:94:61:8d:5e:9c:59:5f:3b:dc:49:4f:
                    b8:5e:10:12:bc:19:e3:fe:78:e8:71:15:4c:02:99:
                    1f:7d:88:b3:d8:e3:0a:0e:c9:61:0b:6e:3b:07:f4:
                    7a:d1:cb:10:d7:c5:13:6d:ed:b4:6b:7a:16:25:d8:
                    0a:99:8a:fb:ff:b1:b6:5e:6d:f5:33:05:15:0d:96:
                    9d:59:e6:13:54:72:be:75:69:73:e7:0a:29:96:e5:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:00:EE:43:BC:83:AC:A6:17:49:AF:EF:74:2B:07:F3:84:7D:2F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c047b37-47ee-3878-bb8c-c2f4b72eea1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:19:cc:8f:74:b6:d8:e5:9f:9d:58:ad:1a:8e:2a:1a:a6:79:
         06:dd:ab:d2:d2:6f:ae:76:cc:c5:fe:35:5c:ff:88:00:d0:dd:
         20:8a:c1:83:71:28:f4:8b:04:de:ed:21:0c:76:f3:d1:56:09:
         87:15:c2:f2:f8:4f:35:ce:d7:6c:fc:70:7e:bc:9e:56:11:e9:
         82:a6:d7:9a:68:25:43:87:0f:7c:c9:ab:7c:58:8b:d9:71:64:
         93:57:fc:b0:24:1a:71:90:d7:28:35:ac:10:f3:12:6f:4e:5c:
         6d:bb:b5:24:cd:d7:71:7f:a3:fe:29:6f:71:ea:46:ae:b4:9e:
         ee:5f:72:53:83:bd:d7:1e:17:f3:b6:f5:31:cf:9f:42:e1:08:
         59:61:7a:5e:77:7d:3b:57:cd:93:48:2f:74:30:12:e6:95:ef:
         47:b6:a5:5d:f6:4d:92:e2:a3:24:f6:4d:38:91:92:44:71:44:
         ca:da:b9:41:15:3e:8b:52:ea:ba:27:fb:67:8b:44:15:e0:3b:
         ef:06:b4:09:f1:86:e8:79:e5:01:39:09:30:18:fc:95:18:14:
         58:b6:01:2b:37:18:b2:f2:ab:f3:e4:27:09:46:5b:44:a6:5e:
         1b:a1:86:a0:de:aa:a2:f7:67:4a:f5:31:12:d7:48:71:7c:80:
         e9:be:c0:5e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9nlwZ+G5wN5PmQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk
ZWI3MWUwOGYtZjVhNi00MGVhLThjNjctMTViNGJhNDQ4MmRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiiwaV9e7jy8QFp9fCiaIK6yd5ECu0gzfhbu
0M5evREtCn65aiVwDYh4Qe0bPsgUmyoTS0RXkvbAh2TLXKTrfPi3uF30fCBwaN3F
KT1Qg+FqxZsttaCp5nxfBOppC45yPRtObRL2jIcB3KoriU7l7k4tZSvfB9BPuVcf
KQtWkQbnzwUIT3zkgscoS18bsEcVTJZvvvJ1xzybOZWGTohBhDQoZKAL7j2NlGGN
XpxZXzvcSU+4XhASvBnj/njocRVMApkffYiz2OMKDslhC247B/R60csQ18UTbe20
a3oWJdgKmYr7/7G2Xm31MwUVDZadWeYTVHK+dWlz5wopluVERQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFFoA7kO8g6ymF0mv73QrB/OEfS9UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmMwNDdiMzctNDdlZS0z
ODc4LWJiOGMtYzJmNGI3MmVlYTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAXGcyPdLbY5Z+dWK0ajioapnkG3avS0m+udszF
/jVc/4gA0N0gisGDcSj0iwTe7SEMdvPRVgmHFcLy+E81ztds/HB+vJ5WEemCptea
aCVDhw98yat8WIvZcWSTV/ywJBpxkNcoNawQ8xJvTlxtu7Ukzddxf6P+KW9x6kau
tJ7uX3JTg73XHhfztvUxz59C4QhZYXped307V82TSC90MBLmle9HtqVd9k2S4qMk
9k04kZJEcUTK2rlBFT6LUuq6J/tni0QV4DvvBrQJ8YboeeUBOQkwGPyVGBRYtgEr
Nxiy8qvz5CcJRltEpl4boYag3qqi92dK9TES10hxfIDpvsBe
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:02:10 2025 by rpki-client