Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e976f2-14a5-382d-9925-ad65fca9cfe5.roa
File:                     58e976f2-14a5-382d-9925-ad65fca9cfe5.roa (raw, json)
Hash identifier:          wbEUBhKdk4rtxU2CP4ZIEpJfx1HgnHDkqXLLN62wdpI=
Subject key identifier:   F9:82:69:D6:63:71:D0:1C:28:E4:AD:9A:ED:E1:F7:13:9D:FA:14:82
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196EEBB3638FDB905306CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e976f2-14a5-382d-9925-ad65fca9cfe5.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     32651
IP address blocks:        2001:500:125::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ee:bb:36:38:fd:b9:05:30:6c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=0dad249c-43f5-46c8-8b52-34b6a823a871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:ee:7e:b5:1d:e1:9f:59:c2:3c:1c:e1:b0:
                    3e:30:14:12:d1:39:95:d6:52:69:d1:88:1f:a6:86:
                    d8:5f:da:f4:d4:1a:f8:e1:d9:84:3b:cb:48:91:0e:
                    91:e3:51:9f:07:ff:9d:eb:37:d8:6d:72:47:f4:cd:
                    01:04:d7:c2:82:45:c3:d2:74:cd:a5:37:33:4b:b9:
                    19:d1:43:19:e0:56:56:77:43:c6:5a:2b:0c:01:5b:
                    98:ec:56:3e:38:f6:7f:bb:6c:d6:8b:f4:4c:82:88:
                    3d:93:1f:5d:07:81:06:38:13:e4:85:cc:78:84:46:
                    52:a0:a0:b0:64:ad:30:2b:bf:cf:0a:d3:41:dc:79:
                    ba:fc:ef:0d:9c:94:ec:45:5d:f1:6e:7a:f8:e2:41:
                    95:1c:33:eb:c1:f3:4e:fe:9f:c1:13:22:1d:14:ee:
                    45:69:8a:34:21:60:8e:ff:9d:5a:5f:f8:29:31:36:
                    2b:f4:36:c1:70:2a:15:20:fe:71:50:9d:bb:d8:81:
                    0c:b6:ce:71:7b:0c:72:82:12:d1:0f:76:ca:b0:46:
                    b5:ab:e4:ab:22:a6:2a:2f:db:06:69:6b:72:8b:88:
                    df:d6:19:82:12:e9:91:8f:1b:88:ca:a3:b5:56:c8:
                    d5:b1:b1:17:f0:56:b2:c7:f2:48:93:84:1c:6e:ad:
                    2a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:82:69:D6:63:71:D0:1C:28:E4:AD:9A:ED:E1:F7:13:9D:FA:14:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e976f2-14a5-382d-9925-ad65fca9cfe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:125:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:82:27:7c:1f:06:d6:22:d1:7b:8e:d2:72:84:10:22:f0:ef:
         78:8b:f4:c0:2f:a7:d7:34:07:51:88:46:c0:2a:04:cd:5f:2e:
         17:d5:7a:83:21:cf:58:1c:f0:d5:bf:71:f4:3c:bf:0d:90:c1:
         0e:ea:74:e3:af:45:b7:2c:ee:fd:20:5d:ae:c4:15:56:ac:74:
         ba:92:3f:f3:82:75:3d:be:e1:8d:0c:1d:0f:aa:85:c4:5c:56:
         e3:b0:5c:2e:0f:31:d2:d4:d0:b5:a1:68:bd:3f:c5:a7:4c:83:
         98:3e:d0:90:06:a5:0f:81:b3:bd:16:25:9e:2d:01:45:ab:7a:
         eb:9b:2b:8e:ed:f2:60:39:c7:a7:97:e5:08:4d:61:7f:df:2a:
         76:68:f4:d1:9f:a3:45:22:d7:0f:6e:c7:a3:49:de:1a:5c:1c:
         fb:a0:a3:5b:59:4b:b3:bd:fb:85:9e:72:8f:d0:a8:ca:84:3c:
         a9:4b:e4:fe:bc:d9:cf:33:5f:90:53:99:d9:7e:78:a1:f4:ee:
         c8:90:65:2e:ed:a0:e1:be:02:51:80:80:d9:b1:76:16:0b:3c:
         61:38:50:79:83:ba:d9:b9:82:ad:43:2f:f4:36:50:31:e3:3d:
         a0:7b:53:d3:a9:bf:3f:53:bb:95:8b:4d:b1:1a:84:84:58:35:
         6e:43:d5:5c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlu67Njj9uQUwbMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
MGRhZDI0OWMtNDNmNS00NmM4LThiNTItMzRiNmE4MjNhODcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtXufrUd4Z9Zwjwc4bA+MBQS0TmV1lJp0Ygf
pobYX9r01Br44dmEO8tIkQ6R41GfB/+d6zfYbXJH9M0BBNfCgkXD0nTNpTczS7kZ
0UMZ4FZWd0PGWisMAVuY7FY+OPZ/u2zWi/RMgog9kx9dB4EGOBPkhcx4hEZSoKCw
ZK0wK7/PCtNB3Hm6/O8NnJTsRV3xbnr44kGVHDPrwfNO/p/BEyIdFO5FaYo0IWCO
/51aX/gpMTYr9DbBcCoVIP5xUJ272IEMts5xewxyghLRD3bKsEa1q+SrIqYqL9sG
aWtyi4jf1hmCEumRjxuIyqO1VsjVsbEX8Fayx/JIk4Qcbq0qLQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPmCadZjcdAcKOStmu3h9xOd+hSCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNThlOTc2ZjItMTRhNS0z
ODJkLTk5MjUtYWQ2NWZjYTljZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEl
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBYgid8HwbWItF7jtJyhBAi8O94i/TAL6fXNAdR
iEbAKgTNXy4X1XqDIc9YHPDVv3H0PL8NkMEO6nTjr0W3LO79IF2uxBVWrHS6kj/z
gnU9vuGNDB0PqoXEXFbjsFwuDzHS1NC1oWi9P8WnTIOYPtCQBqUPgbO9FiWeLQFF
q3rrmyuO7fJgOcenl+UITWF/3yp2aPTRn6NFItcPbsejSd4aXBz7oKNbWUuzvfuF
nnKP0KjKhDypS+T+vNnPM1+QU5nZfnih9O7IkGUu7aDhvgJRgIDZsXYWCzxhOFB5
g7rZuYKtQy/0NlAx4z2ge1PTqb8/U7uVi02xGoSEWDVuQ9Vc
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:15:32 2025 by rpki-client