Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa
File:                     2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa (raw, json)
Hash identifier:          o4Z8EMLOXemlog+30lxzNZ5pSQY8MyYyA3ESaApZzg8=
Subject key identifier:   7B:95:D7:42:75:97:CC:F4:04:89:3A:36:06:AB:4B:A4:9E:4E:D8:09
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196DC300C6B5A1703EFE000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396581
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:dc:30:0c:6b:5a:17:03:ef:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=f1c515ce-d63c-4dc8-8d7f-bfde7dd68c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8f:2e:94:ed:2a:4a:62:63:7f:ce:92:50:fb:
                    e1:a5:f3:50:ae:db:9d:a4:90:36:c5:f6:5e:28:9a:
                    ac:55:e0:7f:cf:d0:dd:58:87:51:30:74:d2:b9:87:
                    e6:13:1c:84:81:f1:6e:0f:22:14:82:15:a4:78:df:
                    e0:81:5d:c2:c8:c5:ee:33:ad:75:3a:dd:66:1d:8e:
                    22:8a:52:1c:9c:bb:7c:12:a6:54:47:5c:d5:ee:b5:
                    23:39:37:0b:dc:08:86:77:ac:ac:ff:9a:03:d1:df:
                    95:ad:de:dc:75:e0:17:48:70:a1:11:71:8d:44:81:
                    a5:7f:67:93:4f:b2:e3:49:5c:1d:a9:ed:bb:0d:58:
                    a8:05:4e:fd:bc:b5:9c:ae:3c:c8:b4:e3:cc:0a:f2:
                    36:b2:a4:c3:72:fe:76:e4:08:dc:f5:ce:0e:4d:b3:
                    16:06:13:f1:c7:79:fc:c6:7b:4f:d9:ce:f6:d4:07:
                    ee:32:99:9b:57:ce:b4:0b:b4:b2:af:42:3e:0e:a9:
                    3b:36:3e:7f:41:db:db:d8:8f:78:07:44:da:49:11:
                    3b:44:49:ef:c7:5b:7f:64:1e:33:f4:59:de:47:94:
                    67:c7:4b:9c:1a:53:0e:79:69:4c:c9:62:73:e0:d3:
                    3b:08:85:12:b4:db:2f:9b:38:ce:52:69:5e:af:1f:
                    b4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:95:D7:42:75:97:CC:F4:04:89:3A:36:06:AB:4B:A4:9E:4E:D8:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e7f35fc-a5e5-39a1-84ab-70f8447b4db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:f4:17:68:7d:e1:2e:2b:94:50:a9:1d:43:0c:03:da:2f:a8:
         a4:5a:78:e5:5b:05:74:84:3c:d7:2a:69:f9:83:90:43:b6:bc:
         6d:ef:c5:d5:df:a3:fb:26:96:23:ac:2d:eb:5c:75:e2:2d:6d:
         69:62:61:93:a2:50:94:3c:40:a4:2c:b0:ec:0f:7e:23:0b:90:
         66:dd:0d:e4:f1:92:27:3b:7b:14:02:2b:c9:1a:b7:a3:50:7c:
         bc:34:7d:d5:f0:2e:9e:93:2c:ba:d5:57:4b:fb:89:ae:42:fd:
         55:1e:88:da:c4:ec:e0:6c:1f:b8:3d:91:05:56:39:f3:5c:a2:
         b0:86:19:1d:14:35:26:33:51:f8:6a:7f:50:22:23:c2:63:39:
         e1:a9:f1:6c:9f:93:0f:59:51:6f:c8:b1:b8:a0:87:1d:74:74:
         16:95:dc:18:77:be:4c:8d:98:3d:3a:72:03:e9:ba:89:67:df:
         11:69:e2:32:61:65:65:4c:5b:dc:e2:18:da:51:dc:df:21:b1:
         aa:70:fb:24:0b:33:33:f7:f9:a5:a1:d9:02:ce:45:95:86:a5:
         d8:87:71:e4:d9:fc:ac:70:ab:89:a9:a5:e0:f1:05:38:51:c7:
         00:9d:d2:ca:a0:35:da:27:49:2f:1a:45:63:1e:76:5e:0b:d9:
         d2:30:45:c4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhltwwDGtaFwPv4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZjFjNTE1Y2UtZDYzYy00ZGM4LThkN2YtYmZkZTdkZDY4YzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Y8ulO0qSmJjf86SUPvhpfNQrtudpJA2xfZe
KJqsVeB/z9DdWIdRMHTSuYfmExyEgfFuDyIUghWkeN/ggV3CyMXuM611Ot1mHY4i
ilIcnLt8EqZUR1zV7rUjOTcL3AiGd6ys/5oD0d+Vrd7cdeAXSHChEXGNRIGlf2eT
T7LjSVwdqe27DVioBU79vLWcrjzItOPMCvI2sqTDcv525Ajc9c4OTbMWBhPxx3n8
xntP2c721AfuMpmbV860C7Syr0I+Dqk7Nj5/Qdvb2I94B0TaSRE7REnvx1t/ZB4z
9FneR5Rnx0ucGlMOeWlMyWJz4NM7CIUStNsvmzjOUmlerx+0rwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFHuV10J1l8z0BIk6NgarS6SeTtgJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmU3ZjM1ZmMtYTVlNS0z
OWExLTg0YWItNzBmODQ0N2I0ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCS9BdofeEuK5RQqR1DDAPaL6ikWnjlWwV0hDzX
Kmn5g5BDtrxt78XV36P7JpYjrC3rXHXiLW1pYmGTolCUPECkLLDsD34jC5Bm3Q3k
8ZInO3sUAivJGrejUHy8NH3V8C6ekyy61VdL+4muQv1VHojaxOzgbB+4PZEFVjnz
XKKwhhkdFDUmM1H4an9QIiPCYznhqfFsn5MPWVFvyLG4oIcddHQWldwYd75MjZg9
OnID6bqJZ98RaeIyYWVlTFvc4hjaUdzfIbGqcPskCzMz9/mlodkCzkWVhqXYh3Hk
2fyscKuJqaXg8QU4UccAndLKoDXaJ0kvGkVjHnZeC9nSMEXE
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:00:05 2025 by rpki-client