Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33183b92-bf82-312e-9ead-59ac573b9073.roa
File:                     33183b92-bf82-312e-9ead-59ac573b9073.roa (raw, json)
Hash identifier:          RWHllOls29dlnJYzGaFWWdajQikWwsxfIhW0Ebe8mHA=
Subject key identifier:   19:AB:89:9A:B5:06:C8:CB:39:75:54:37:9B:6E:1C:ED:8E:CF:E6:4A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A38A41F2465F0ED744B272980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33183b92-bf82-312e-9ead-59ac573b9073.roa
Signing time:             Tue 17 Jun 2025 12:36:43 +0000
ROA not before:           Tue 17 Jun 2025 12:36:43 +0000
ROA not after:            Mon 15 Sep 2025 12:36:43 +0000
asID:                     396605
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:a4:1f:24:65:f0:ed:74:4b:27:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 17 12:36:43 2025 GMT
            Not After : Sep 15 12:36:43 2025 GMT
        Subject: CN=3925ab00-8cc8-471d-9d8f-8f972aa03605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0e:54:1b:bd:6c:48:4e:bf:69:0a:8e:e2:83:
                    c0:13:13:27:29:1d:98:91:23:93:3d:c3:62:48:12:
                    ee:1a:4d:24:da:53:4d:df:a2:75:f2:b7:c1:13:1b:
                    0c:13:1e:89:9a:1c:d0:22:f5:8a:1d:16:01:d6:45:
                    25:94:82:4f:6f:b8:2a:52:32:10:c0:c3:62:eb:29:
                    a2:c7:51:d7:cf:cb:9c:9c:ea:3d:f0:df:73:c3:89:
                    3c:b1:5a:fb:11:39:d3:16:25:9a:17:bb:df:0f:a1:
                    03:95:30:c9:59:86:1f:6c:a5:02:82:24:67:5b:f8:
                    ff:ad:dd:50:52:d5:f2:3b:64:1f:45:5c:fb:51:cb:
                    8c:b1:ed:73:f8:64:7a:76:ed:5b:8c:22:7c:8d:70:
                    f3:4c:a0:80:e3:07:a5:21:ca:ba:96:eb:aa:8e:89:
                    9c:e0:e6:98:c7:78:0f:4f:8f:4b:03:b6:40:92:e6:
                    4a:69:23:c7:a9:51:27:d2:55:d4:dc:e3:f7:7a:16:
                    c7:e0:95:a9:ba:8b:12:07:8f:16:4e:fa:36:13:62:
                    bf:32:84:60:5f:71:9c:5b:b8:c9:36:85:18:7e:8b:
                    bb:cc:8d:75:f1:43:37:d2:1f:1a:61:ac:f8:27:92:
                    3c:f7:63:c3:3f:c1:bd:04:7c:cb:51:6c:f0:20:ef:
                    e6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AB:89:9A:B5:06:C8:CB:39:75:54:37:9B:6E:1C:ED:8E:CF:E6:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/33183b92-bf82-312e-9ead-59ac573b9073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:56:59:38:73:c0:6b:34:63:13:12:d9:3c:01:30:62:4b:83:
         e4:5d:55:09:5e:2b:41:fd:7b:90:1a:c0:09:c8:d9:89:31:f6:
         f9:a4:d6:6e:09:c5:b8:5c:fa:18:28:9b:78:aa:a0:7d:95:3b:
         b9:38:11:0a:4a:1e:61:05:31:23:b8:fd:1c:f1:68:d6:cb:3f:
         06:6a:be:fe:ea:1e:5a:a4:e7:00:1b:54:7c:92:4f:83:4f:1e:
         95:68:74:67:c6:d2:cf:06:95:b2:5c:66:cb:b0:83:20:3d:e5:
         62:7d:cd:6d:d6:93:5c:2a:42:5e:99:65:bd:0b:1a:73:15:e8:
         2d:27:de:da:b2:60:c5:4e:cd:ea:84:b6:76:ac:21:a2:1e:86:
         3d:f5:22:d1:e7:e2:db:af:8b:7a:0b:d5:9b:fa:cb:4a:d9:65:
         16:4f:8d:d5:68:15:fc:10:74:ba:fe:df:97:61:e7:84:f3:89:
         60:f4:74:71:b0:19:7d:73:58:22:dc:5b:8d:81:ab:b5:4d:59:
         f2:56:08:a3:2d:4b:81:24:de:22:c3:3f:e8:15:e6:7a:bd:11:
         6b:e3:37:ad:0f:d3:62:a1:f0:7b:50:65:f0:90:25:95:31:66:
         32:31:74:a4:cc:49:a1:1f:cc:75:b5:06:68:db:77:52:cc:02:
         8e:58:e6:fd
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo4pB8kZfDtdEsnKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxNzEyMzY0M1oXDTI1MDkxNTEyMzY0M1owLzEtMCsGA1UEAxMk
MzkyNWFiMDAtOGNjOC00NzFkLTlkOGYtOGY5NzJhYTAzNjA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A5UG71sSE6/aQqO4oPAExMnKR2YkSOTPcNi
SBLuGk0k2lNN36J18rfBExsMEx6JmhzQIvWKHRYB1kUllIJPb7gqUjIQwMNi6ymi
x1HXz8ucnOo98N9zw4k8sVr7ETnTFiWaF7vfD6EDlTDJWYYfbKUCgiRnW/j/rd1Q
UtXyO2QfRVz7UcuMse1z+GR6du1bjCJ8jXDzTKCA4welIcq6luuqjomc4OaYx3gP
T49LA7ZAkuZKaSPHqVEn0lXU3OP3ehbH4JWpuosSB48WTvo2E2K/MoRgX3GcW7jJ
NoUYfou7zI118UM30h8aYaz4J5I892PDP8G9BHzLUWzwIO/mFwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBmriZq1BsjLOXVUN5tuHO2Oz+ZKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzMxODNiOTItYmY4Mi0z
MTJlLTllYWQtNTlhYzU3M2I5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAKNWWThzwGs0YxMS2TwBMGJLg+RdVQleK0H9e5AawAnI2Ykx9vmk
1m4Jxbhc+hgom3iqoH2VO7k4EQpKHmEFMSO4/RzxaNbLPwZqvv7qHlqk5wAbVHyS
T4NPHpVodGfG0s8GlbJcZsuwgyA95WJ9zW3Wk1wqQl6ZZb0LGnMV6C0n3tqyYMVO
zeqEtnasIaIehj31ItHn4tuvi3oL1Zv6y0rZZRZPjdVoFfwQdLr+35dh54TziWD0
dHGwGX1zWCLcW42Bq7VNWfJWCKMtS4Ek3iLDP+gV5nq9EWvjN60P02Kh8HtQZfCQ
JZUxZjIxdKTMSaEfzHW1Bmjbd1LMAo5Y5v0=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:17:47 2025 by rpki-client