Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa
File:                     3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa (raw, json)
Hash identifier:          J3imOduxWkv1C3B5Avecktw4WMevVAoCMvVirc1hOag=
Subject key identifier:   7E:9E:E4:94:86:50:48:45:43:1D:E1:12:D4:F6:46:54:C9:F0:37:41
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F678A74289F92063F2DBC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     396587
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:78:a7:42:89:f9:20:63:f2:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=9259825b-dbad-4955-bb6a-d1dc183bdade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:db:2d:69:73:79:00:93:44:39:ab:c2:eb:69:
                    e4:b1:03:3e:b8:6a:80:88:cf:77:c5:e7:c1:af:40:
                    67:0e:d3:ea:74:23:bf:97:6b:d3:1b:7a:74:f2:81:
                    c8:5d:c8:6d:49:cc:1c:a5:42:d8:ab:af:1b:c6:e8:
                    30:dd:01:97:bc:38:a1:81:b3:86:dd:e1:e1:52:57:
                    1a:cf:d6:47:bc:ba:34:70:91:b6:22:3a:ab:f3:d4:
                    9b:2d:d8:8b:a1:01:7a:be:a3:d7:25:77:5f:bd:b8:
                    6b:f3:7a:26:a9:8f:fb:ed:df:19:58:c7:ac:df:6e:
                    00:9d:67:ad:f7:63:51:f6:5e:fa:62:06:a0:b6:e0:
                    32:41:52:0d:b1:ba:55:cf:7d:34:3c:da:5c:4e:79:
                    ec:de:f9:33:86:55:cc:e1:df:23:a6:20:80:04:a2:
                    1b:f9:57:1a:57:d9:05:0a:5f:b5:7b:0a:01:72:3d:
                    0c:56:1c:1b:05:28:59:c9:6c:ab:df:8d:d0:38:84:
                    02:8c:aa:01:ea:ff:77:40:b6:cd:97:25:fb:79:d7:
                    ec:c3:b4:54:bf:fb:eb:76:ec:f8:02:58:0a:af:3c:
                    f4:c4:25:65:a4:46:2e:4a:4b:a0:3d:f7:0d:30:43:
                    2e:9b:e3:d3:f9:04:11:af:16:fb:3a:4d:26:b3:5f:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9E:E4:94:86:50:48:45:43:1D:E1:12:D4:F6:46:54:C9:F0:37:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a38d017-41d5-3b4d-90ac-33ea69bfc92c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:5b:bb:35:a5:c1:2e:2b:7a:8a:92:c1:ac:8c:5c:40:d1:72:
         38:24:43:10:60:86:1b:3e:40:55:6f:c1:62:72:ea:27:e5:7d:
         c7:31:ed:8e:9c:7b:f5:5a:a4:10:57:ae:1c:90:61:40:38:c0:
         5a:78:57:e1:54:4c:74:28:24:54:32:da:fa:3d:68:bb:02:08:
         f7:31:78:8d:63:04:22:c0:a3:68:15:d1:f5:d4:f4:a2:98:6b:
         79:09:b3:95:46:25:92:49:9a:f3:80:69:ad:8b:4e:7a:d2:44:
         88:4b:ab:d1:fe:82:c7:a4:c5:27:0d:61:b1:47:1b:7e:e6:a1:
         ed:52:aa:f9:23:86:68:36:bc:87:6c:43:31:ec:9c:a7:5f:a1:
         97:42:ed:27:f0:9d:44:bd:7b:ce:f3:3a:87:43:44:46:df:f9:
         9c:32:72:b1:78:81:82:d8:d8:d9:9f:9a:e2:bc:d7:be:7d:ea:
         8a:e4:07:37:65:01:0f:65:3d:74:94:7c:a4:e8:03:26:5d:34:
         23:9b:20:f9:99:27:0b:f8:75:7d:48:d7:8f:d2:d1:55:3f:aa:
         32:df:a1:a8:db:fe:bc:db:0b:02:4f:fa:4a:aa:bd:68:df:1e:
         fd:9a:f2:f3:22:07:36:03:33:42:d7:c5:6a:87:eb:43:01:ab:
         6b:fd:18:5f
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9ninQon5IGPy28AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk
OTI1OTgyNWItZGJhZC00OTU1LWJiNmEtZDFkYzE4M2JkYWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19staXN5AJNEOavC62nksQM+uGqAiM93xefB
r0BnDtPqdCO/l2vTG3p08oHIXchtScwcpULYq68bxugw3QGXvDihgbOG3eHhUlca
z9ZHvLo0cJG2Ijqr89SbLdiLoQF6vqPXJXdfvbhr83omqY/77d8ZWMes324AnWet
92NR9l76YgagtuAyQVINsbpVz300PNpcTnns3vkzhlXM4d8jpiCABKIb+VcaV9kF
Cl+1ewoBcj0MVhwbBShZyWyr343QOIQCjKoB6v93QLbNlyX7edfsw7RUv/vrduz4
AlgKrzz0xCVlpEYuSkugPfcNMEMum+PT+QQRrxb7Ok0ms18ycQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFH6e5JSGUEhFQx3hEtT2RlTJ8DdBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2EzOGQwMTctNDFkNS0z
YjRkLTkwYWMtMzNlYTY5YmZjOTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAOW7s1pcEuK3qKksGsjFxA0XI4JEMQYIYbPkBV
b8Ficuon5X3HMe2OnHv1WqQQV64ckGFAOMBaeFfhVEx0KCRUMtr6PWi7Agj3MXiN
YwQiwKNoFdH11PSimGt5CbOVRiWSSZrzgGmti0560kSIS6vR/oLHpMUnDWGxRxt+
5qHtUqr5I4ZoNryHbEMx7JynX6GXQu0n8J1EvXvO8zqHQ0RG3/mcMnKxeIGC2NjZ
n5rivNe+feqK5Ac3ZQEPZT10lHyk6AMmXTQjmyD5mScL+HV9SNeP0tFVP6oy36Go
2/682wsCT/pKqr1o3x79mvLzIgc2AzNC18Vqh+tDAatr/Rhf
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:31:20 2025 by rpki-client