Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa
File:                     499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa (raw, json)
Hash identifier:          09dg/6EoKIgah/OMQ8/3khHdvGecLJ/AU9L1PxGL8oU=
Subject key identifier:   CA:0B:14:FD:54:D1:32:35:A7:77:15:CA:7F:08:BF:BF:29:AC:F2:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CED137F522C755BEC780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397212
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ce:d1:37:f5:22:c7:55:be:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=4d433b23-bf0e-4b02-9085-d064de6987ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d2:a8:ce:fe:3c:32:22:4f:e2:cb:41:76:6c:
                    34:9b:c9:f9:57:3f:24:fd:58:99:cd:e0:de:d3:33:
                    22:8e:6e:ca:2e:01:fa:ed:42:c6:8f:47:15:ad:2c:
                    cf:8f:a6:95:d2:fe:6f:91:d7:3b:82:28:76:78:02:
                    41:a3:41:fc:1c:cc:07:e0:c4:aa:88:b1:4d:f3:ff:
                    a2:c8:c1:c6:3c:e2:d8:ed:bb:40:7e:f9:b7:17:b5:
                    06:4a:6d:73:92:e0:ba:0b:36:8a:a3:b4:b2:1e:72:
                    f7:5b:12:50:9f:7b:44:c4:5a:08:11:7c:04:b8:1c:
                    ee:b1:01:1b:52:17:e8:f4:a9:44:db:46:84:e0:a6:
                    63:51:ea:ef:48:97:19:a8:73:8e:22:0c:d3:99:17:
                    cb:11:ac:36:48:fe:82:16:34:64:b7:42:e7:36:c2:
                    91:d7:c2:50:00:6e:24:05:bb:39:cf:60:8e:8f:60:
                    dd:5f:d7:61:b1:29:46:8d:cb:7f:38:15:be:8d:e6:
                    6b:5f:56:ad:76:ee:a0:c4:3d:f2:c2:98:e0:01:04:
                    d2:a7:75:db:96:2d:65:ac:fa:eb:81:be:49:15:af:
                    38:e3:4a:ba:76:f9:a7:92:c1:83:cd:96:99:9a:a9:
                    95:97:35:6d:5e:0d:c1:ac:5a:6f:6d:fb:12:db:c1:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:0B:14:FD:54:D1:32:35:A7:77:15:CA:7F:08:BF:BF:29:AC:F2:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/499fca7e-36ec-37f1-a02c-1ba5710c78d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:66:34:ff:bb:56:3d:e4:de:08:ed:f2:54:65:fc:d6:81:c5:
         87:cf:48:2e:11:82:1c:ef:0b:d9:56:d5:f4:c7:e7:53:26:17:
         02:0b:de:15:b2:48:d3:08:bd:e8:c7:33:f5:06:bf:a6:c4:5c:
         d6:7f:fb:18:e3:d0:b4:d6:4a:bc:4d:3f:4e:27:c3:2f:59:62:
         70:fb:04:45:fa:2a:53:97:29:00:22:49:57:e7:ae:bd:7e:3f:
         16:1b:0c:59:75:06:28:d3:e3:a0:c9:52:cc:a0:94:05:fb:fb:
         b9:5d:59:e1:79:20:f9:33:8f:ee:07:7a:53:0f:95:18:ba:89:
         01:9c:df:51:b8:f5:14:4a:bb:82:3d:87:8f:f9:68:33:1f:eb:
         48:2b:19:4d:ba:e4:7c:9a:52:64:e5:0f:19:e8:7d:86:57:c7:
         a0:c2:28:20:4d:49:ee:31:8a:c4:52:4f:ef:41:e3:90:3a:10:
         45:31:4b:79:42:d9:e2:9c:a6:71:8c:41:68:3c:3e:0f:20:29:
         5b:fe:10:2d:12:86:e2:5c:3c:13:eb:7d:63:7c:0b:bb:1a:53:
         6e:0f:42:9f:a0:64:64:9d:a7:42:11:52:5a:98:62:8d:59:00:
         35:9e:68:f2:49:f2:1a:36:16:da:b0:7b:df:95:87:90:77:13:
         e8:8d:11:0e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhls7RN/Uix1W+x4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
NGQ0MzNiMjMtYmYwZS00YjAyLTkwODUtZDA2NGRlNjk4N2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNKozv48MiJP4stBdmw0m8n5Vz8k/ViZzeDe
0zMijm7KLgH67ULGj0cVrSzPj6aV0v5vkdc7gih2eAJBo0H8HMwH4MSqiLFN8/+i
yMHGPOLY7btAfvm3F7UGSm1zkuC6CzaKo7SyHnL3WxJQn3tExFoIEXwEuBzusQEb
Uhfo9KlE20aE4KZjUervSJcZqHOOIgzTmRfLEaw2SP6CFjRkt0LnNsKR18JQAG4k
Bbs5z2COj2DdX9dhsSlGjct/OBW+jeZrX1atdu6gxD3ywpjgAQTSp3Xbli1lrPrr
gb5JFa8440q6dvmnksGDzZaZmqmVlzVtXg3BrFpvbfsS28E5vQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMoLFP1U0TI1p3cVyn8Iv78prPJ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDk5ZmNhN2UtMzZlYy0z
N2YxLWEwMmMtMWJhNTcxMGM3OGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAYZjT/u1Y95N4I7fJUZfzWgcWHz0guEYIc7wvZ
VtX0x+dTJhcCC94VskjTCL3oxzP1Br+mxFzWf/sY49C01kq8TT9OJ8MvWWJw+wRF
+ipTlykAIklX5669fj8WGwxZdQYo0+OgyVLMoJQF+/u5XVnheSD5M4/uB3pTD5UY
uokBnN9RuPUUSruCPYeP+WgzH+tIKxlNuuR8mlJk5Q8Z6H2GV8egwiggTUnuMYrE
Uk/vQeOQOhBFMUt5QtninKZxjEFoPD4PIClb/hAtEobiXDwT631jfAu7GlNuD0Kf
oGRknadCEVJamGKNWQA1nmjySfIaNhbasHvflYeQdxPojREO
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:04:54 2025 by rpki-client