Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa
File:                     35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa (raw, json)
Hash identifier:          sQRRhpBynnvL4sNcV/qg/jeZn+XHPmMR1zFCz4J9byk=
Subject key identifier:   9E:1B:A8:21:8D:D1:75:CB:30:29:91:D0:A7:60:A3:A1:F8:D5:51:3B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CF3C8914CB8380EB1CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396608
IP address blocks:        2001:500:126::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:cf:3c:89:14:cb:83:80:eb:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b0c919c8-37a6-46a2-977e-644c1ec99d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:07:2c:47:59:41:fa:cc:fe:0f:b2:64:5e:
                    fb:75:de:78:3e:0e:ea:83:96:1f:80:e5:c8:82:9e:
                    ed:1b:b9:a4:e3:e5:ef:ef:80:7a:66:e8:23:32:27:
                    1a:62:cb:b8:27:31:f4:53:6e:e6:04:5a:75:d6:19:
                    72:1b:4c:50:d9:df:60:de:55:b5:8b:6b:c9:47:55:
                    12:2e:be:6a:36:d8:2e:e7:7c:26:8c:e5:cf:72:ff:
                    35:3b:8f:95:9e:7e:d1:77:3f:a2:c9:66:54:e8:5d:
                    1a:25:b8:17:bf:98:e5:87:3e:62:32:da:e7:eb:0d:
                    10:d2:47:61:57:db:1f:3b:8f:bd:76:61:d5:7e:aa:
                    1a:d1:4d:63:e5:70:b0:4d:4a:5d:3a:c7:11:7f:ad:
                    e3:4e:a5:3b:df:85:78:df:31:42:78:81:f6:5f:ae:
                    a7:a6:75:b4:ad:eb:3f:ae:81:1b:ee:92:6b:1a:97:
                    a6:b3:b6:c8:f7:19:ac:8c:07:de:55:60:79:c1:02:
                    9f:49:2e:58:02:fa:7b:0d:35:f7:02:6d:0d:ac:56:
                    a0:fd:e9:fc:36:fe:e6:6f:5e:95:8f:7b:7a:8b:9f:
                    55:07:cc:6e:30:d5:73:b0:fd:97:ae:a9:f2:3d:60:
                    16:0b:4c:f8:c7:e2:d9:a0:21:b0:a6:13:3a:ed:5c:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1B:A8:21:8D:D1:75:CB:30:29:91:D0:A7:60:A3:A1:F8:D5:51:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35b3a6ea-fe1a-335d-9477-b4cf839d1a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:126:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:cb:9d:23:9f:49:25:f8:8d:d4:fa:ae:8b:b8:d2:d8:80:98:
         f1:65:27:b6:34:c4:1c:41:38:46:74:ac:7c:e9:5a:9e:fa:24:
         c9:c7:21:73:95:6f:57:ca:ee:bd:e9:78:6f:7f:4f:e8:75:14:
         72:ec:db:7d:35:13:e9:83:1b:63:94:84:f8:18:32:8c:ba:ec:
         64:fe:7b:d6:44:fa:cd:1a:4a:26:be:b8:e7:3a:30:4f:80:29:
         df:ed:1f:9c:63:19:07:3e:af:09:10:fc:46:24:c8:ff:8d:67:
         cc:8c:d8:29:81:e9:02:d4:63:40:46:ab:d4:7b:12:cd:30:5d:
         3c:80:55:c7:84:cc:5f:cf:cd:6e:5c:bb:75:e9:fc:05:d8:2a:
         89:bf:1a:25:45:60:1b:f3:29:df:3a:01:00:89:9a:a3:ab:03:
         48:34:3f:34:4a:61:73:ac:b0:36:85:ec:fe:59:71:55:48:6d:
         38:35:5b:2b:7b:f7:bf:12:15:3b:3b:8a:fe:32:06:15:35:36:
         ea:d9:e6:c2:e2:24:53:cc:a9:e2:4a:5e:22:71:05:ff:c7:5a:
         72:d3:f0:52:d9:13:84:7a:be:15:69:80:07:d8:74:98:89:01:
         a6:cb:57:7e:02:f4:dc:cd:bb:de:48:c7:e1:7d:e5:40:f6:89:
         57:2b:a0:84
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhls88iRTLg4DrHMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
YjBjOTE5YzgtMzdhNi00NmEyLTk3N2UtNjQ0YzFlYzk5ZDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLMHLEdZQfrM/g+yZF77dd54Pg7qg5YfgOXI
gp7tG7mk4+Xv74B6ZugjMicaYsu4JzH0U27mBFp11hlyG0xQ2d9g3lW1i2vJR1US
Lr5qNtgu53wmjOXPcv81O4+Vnn7Rdz+iyWZU6F0aJbgXv5jlhz5iMtrn6w0Q0kdh
V9sfO4+9dmHVfqoa0U1j5XCwTUpdOscRf63jTqU734V43zFCeIH2X66npnW0res/
roEb7pJrGpems7bI9xmsjAfeVWB5wQKfSS5YAvp7DTX3Am0NrFag/en8Nv7mb16V
j3t6i59VB8xuMNVzsP2XrqnyPWAWC0z4x+LZoCGwphM67VxsPQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFJ4bqCGN0XXLMCmR0Kdgo6H41VE7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzViM2E2ZWEtZmUxYS0z
MzVkLTk0NzctYjRjZjgzOWQxYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEm
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBNy50jn0kl+I3U+q6LuNLYgJjxZSe2NMQcQThG
dKx86Vqe+iTJxyFzlW9Xyu696Xhvf0/odRRy7Nt9NRPpgxtjlIT4GDKMuuxk/nvW
RPrNGkomvrjnOjBPgCnf7R+cYxkHPq8JEPxGJMj/jWfMjNgpgekC1GNARqvUexLN
MF08gFXHhMxfz81uXLt16fwF2CqJvxolRWAb8ynfOgEAiZqjqwNIND80SmFzrLA2
hez+WXFVSG04NVsre/e/EhU7O4r+MgYVNTbq2ebC4iRTzKniSl4icQX/x1py0/BS
2ROEer4VaYAH2HSYiQGmy1d+AvTczbveSMfhfeVA9olXK6CE
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:17:25 2025 by rpki-client