Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/463f8166-185c-3183-b0f3-94babf4c89c0.roa
File:                     463f8166-185c-3183-b0f3-94babf4c89c0.roa (raw, json)
Hash identifier:          M5TYwqfvU6EHtgbT/SOGaatQjRWwsHHHdwKL6Vk1JlE=
Subject key identifier:   00:2D:49:A2:74:C4:A7:E8:F1:B9:71:A0:FC:BF:B3:7C:0E:50:60:C8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A1F90523DF5E25B53D8514500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/463f8166-185c-3183-b0f3-94babf4c89c0.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     397209
IP address blocks:        2001:501:8a29::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:52:3d:f5:e2:5b:53:d8:51:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=7653d6ac-574f-4339-bbb3-aae1f7487ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:75:1e:75:47:1c:b2:7e:31:11:e7:90:27:91:
                    19:f5:df:cb:32:41:2a:c8:a8:56:cc:d9:86:6f:39:
                    45:a8:d8:60:11:72:4c:1a:c5:d9:9c:6e:32:da:a2:
                    3b:cd:fa:47:e1:77:48:b5:cc:e0:32:18:ae:e6:4c:
                    ed:48:36:96:a6:ae:99:55:f6:6d:0a:0f:d5:b8:bb:
                    b8:b2:ac:df:3e:a9:e2:27:5c:42:7a:e8:ba:a7:c8:
                    8f:06:15:7b:cb:4a:78:2c:64:95:d2:f9:f9:5c:43:
                    f0:ff:c6:ab:ba:5d:62:59:49:db:c3:43:a8:29:76:
                    27:fc:e8:4d:73:3b:09:72:55:9c:15:ab:46:7f:d6:
                    ba:db:ba:ba:fa:cd:66:97:14:87:2e:ac:7d:1e:4f:
                    d7:75:cf:63:27:39:39:94:ff:14:bb:d4:37:82:a8:
                    b1:16:f4:e6:05:65:7a:cd:94:f1:13:a8:64:30:dc:
                    16:fa:90:c2:ac:3d:8f:de:60:cf:50:51:5f:57:41:
                    ed:72:8d:65:62:2d:32:53:77:b7:5a:ac:d1:20:9b:
                    16:a2:1c:da:5d:48:aa:8c:21:08:51:fb:30:05:85:
                    bb:6e:f5:7c:dd:f7:fb:ac:4b:81:84:79:3a:73:25:
                    67:dc:00:84:15:f9:c4:3f:a9:69:7f:7a:65:23:68:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2D:49:A2:74:C4:A7:E8:F1:B9:71:A0:FC:BF:B3:7C:0E:50:60:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/463f8166-185c-3183-b0f3-94babf4c89c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:8a29:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:4a:44:73:a7:6b:ec:06:4a:8e:a5:06:5f:1d:b2:90:11:89:
         8b:de:f0:71:fe:2f:c1:75:33:79:d9:61:2d:a4:d6:65:17:6b:
         fe:0a:f2:e2:81:b9:32:55:55:3a:71:44:48:dc:4e:85:48:07:
         79:27:9d:44:3c:15:1e:aa:30:d6:6b:7b:55:9c:8e:9e:22:cb:
         bf:33:79:c6:7a:04:08:89:37:73:cb:bf:a1:7a:7e:1f:4b:92:
         15:b7:f5:bb:40:dd:b5:10:50:4c:6e:79:b7:ed:3e:5f:4f:7c:
         4a:72:0f:b7:9e:ec:6f:b9:2a:56:49:42:2d:16:62:22:35:94:
         19:bd:30:2b:93:9f:f4:b6:bd:33:a2:5d:6b:3c:e4:f7:05:16:
         1a:8f:11:6b:21:0f:1b:2f:78:30:15:7b:a6:77:bc:98:b1:b7:
         36:2d:b3:ca:d7:07:1c:7b:ab:b7:40:15:a8:80:27:b6:49:d0:
         89:36:3b:c3:5c:b6:b5:99:07:39:b6:1a:46:66:69:b2:01:ac:
         f5:02:b4:1c:fb:15:9a:58:5a:71:bd:1f:dd:4f:d9:65:1f:70:
         b9:26:61:da:d9:46:e9:8d:93:d3:ce:66:64:3a:21:b3:40:03:
         de:0f:94:73:79:df:d3:2a:08:05:a8:83:fa:35:d9:f1:22:cf:
         79:3c:c9:e4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEofkFI99eJbU9hRRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYwODEzMDEwMVoXDTI1MDkwNjEzMDEwMVowLzEtMCsGA1UEAxMk
NzY1M2Q2YWMtNTc0Zi00MzM5LWJiYjMtYWFlMWY3NDg3ZWNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznUedUccsn4xEeeQJ5EZ9d/LMkEqyKhWzNmG
bzlFqNhgEXJMGsXZnG4y2qI7zfpH4XdItczgMhiu5kztSDaWpq6ZVfZtCg/VuLu4
sqzfPqniJ1xCeui6p8iPBhV7y0p4LGSV0vn5XEPw/8arul1iWUnbw0OoKXYn/OhN
czsJclWcFatGf9a627q6+s1mlxSHLqx9Hk/Xdc9jJzk5lP8Uu9Q3gqixFvTmBWV6
zZTxE6hkMNwW+pDCrD2P3mDPUFFfV0Htco1lYi0yU3e3WqzRIJsWohzaXUiqjCEI
UfswBYW7bvV83ff7rEuBhHk6cyVn3ACEFfnEP6lpf3plI2iAaQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAAtSaJ0xKfo8blxoPy/s3wOUGDIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDYzZjgxNjYtMTg1Yy0z
MTgzLWIwZjMtOTRiYWJmNGM4OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBQSkRzp2vsBkqOpQZfHbKQEYmL3vBx/i/BdTN5
2WEtpNZlF2v+CvLigbkyVVU6cURI3E6FSAd5J51EPBUeqjDWa3tVnI6eIsu/M3nG
egQIiTdzy7+hen4fS5IVt/W7QN21EFBMbnm37T5fT3xKcg+3nuxvuSpWSUItFmIi
NZQZvTArk5/0tr0zol1rPOT3BRYajxFrIQ8bL3gwFXumd7yYsbc2LbPK1wcce6u3
QBWogCe2SdCJNjvDXLa1mQc5thpGZmmyAaz1ArQc+xWaWFpxvR/dT9llH3C5JmHa
2UbpjZPTzmZkOiGzQAPeD5Rzed/TKggFqIP6NdnxIs95PMnk
-----END CERTIFICATE-----
Generated at Mon Jun 30 11:39:52 2025 by rpki-client