Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bb6f6ae-bd2f-38a6-8ed5-ad5590d1fe9f.roa
File:                     5bb6f6ae-bd2f-38a6-8ed5-ad5590d1fe9f.roa (raw, json)
Hash identifier:          7/3zOORYFMVjXawGuq9FdF/956NZeXmPqaZd0mpOOzU=
Subject key identifier:   47:C3:69:5B:A9:53:44:74:CC:EA:CE:53:6F:3E:B6:60:65:E1:72:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A38A41D2AA18744D80E6BE7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bb6f6ae-bd2f-38a6-8ed5-ad5590d1fe9f.roa
Signing time:             Tue 17 Jun 2025 12:36:42 +0000
ROA not before:           Tue 17 Jun 2025 12:36:42 +0000
ROA not after:            Mon 15 Sep 2025 12:36:42 +0000
asID:                     36618
IP address blocks:        2001:501:b1f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:38:a4:1d:2a:a1:87:44:d8:0e:6b:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 17 12:36:42 2025 GMT
            Not After : Sep 15 12:36:42 2025 GMT
        Subject: CN=b142783f-560a-455d-baf1-7cf93e1b9e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4c:73:f7:fe:84:66:bf:b8:82:cf:b8:2a:ca:
                    ce:65:28:4c:0e:fd:77:45:8b:1e:22:89:f2:9d:26:
                    b2:88:53:1d:09:3d:85:d0:ad:42:16:d9:47:5e:7b:
                    71:a4:21:49:22:84:95:41:8c:c2:a8:53:ef:57:e4:
                    58:41:ff:48:47:01:0c:88:cf:77:28:c2:bb:fe:e8:
                    d4:93:b7:18:7e:81:90:75:a2:a4:ad:03:64:43:50:
                    9e:11:09:b6:f3:6b:1a:70:3c:7d:85:01:aa:34:ae:
                    09:ad:0f:75:0a:29:23:4a:d5:46:d6:62:a9:9f:96:
                    bb:9b:47:ab:91:38:17:e1:d6:78:9a:b8:b3:ff:a3:
                    7f:5f:95:0e:42:05:4f:e1:ec:dd:2f:53:bf:d2:1a:
                    f0:6d:ef:ca:79:61:1a:c2:5f:2d:55:d7:6f:4e:fb:
                    51:cd:93:42:97:7d:fb:09:c1:90:1c:20:02:d8:58:
                    be:69:a3:66:41:e1:cf:b0:ba:9b:06:31:5b:58:9f:
                    3e:00:49:dd:1c:41:ae:56:c0:e2:7d:c7:b0:b3:45:
                    d5:d8:f9:af:72:16:cc:50:ca:7a:7b:f3:d3:09:53:
                    af:b9:59:e5:ab:ca:43:49:6c:25:63:15:3f:ac:8e:
                    f5:9c:91:4b:a6:aa:f2:12:0b:93:28:1f:8d:b0:e3:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C3:69:5B:A9:53:44:74:CC:EA:CE:53:6F:3E:B6:60:65:E1:72:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bb6f6ae-bd2f-38a6-8ed5-ad5590d1fe9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:501:b1f9::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:f8:48:af:b6:73:8d:db:7d:f9:79:f8:46:85:13:53:6c:fa:
         de:bf:89:8a:ef:a5:9d:56:ec:9e:34:c0:b3:e9:63:f2:2d:5d:
         d1:f9:32:a1:b7:a4:7f:15:9a:04:45:bf:f3:06:cf:35:9b:a8:
         77:2e:10:d9:b9:82:29:8c:10:bb:9f:7d:17:a4:49:bc:bf:b4:
         0a:ae:85:f3:24:4e:f2:47:06:9a:7f:df:5d:c7:36:1e:84:4d:
         0f:bb:d6:7d:96:e9:67:fa:0a:81:7a:64:55:13:c1:17:72:ce:
         30:89:e6:5d:46:73:85:ea:b5:b6:ba:56:14:3b:db:e0:1c:55:
         df:3d:6c:55:f7:b0:ed:52:a9:b9:82:1b:88:76:e8:d9:32:76:
         e2:16:ef:49:01:bb:f3:63:41:d1:42:e2:65:0d:71:a0:b7:69:
         b9:12:e4:d1:b3:92:5c:60:0b:5c:d1:da:52:c0:5b:27:27:aa:
         ff:1c:71:16:b8:f4:83:30:34:ed:18:28:9d:e5:a9:3a:b9:75:
         6a:97:50:f2:a9:2b:d8:4e:0b:a0:21:8b:3f:a0:89:cd:28:da:
         35:5c:83:0d:4f:c5:95:5a:43:8f:20:38:28:8f:fa:62:70:81:
         37:11:f6:47:1e:b7:a8:0a:32:c3:c5:d1:23:e1:8a:04:4d:63:
         b2:8a:9b:3f
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEo4pB0qoYdE2A5r58AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYxNzEyMzY0MloXDTI1MDkxNTEyMzY0MlowLzEtMCsGA1UEAxMk
YjE0Mjc4M2YtNTYwYS00NTVkLWJhZjEtN2NmOTNlMWI5ZThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhExz9/6EZr+4gs+4KsrOZShMDv13RYseIony
nSayiFMdCT2F0K1CFtlHXntxpCFJIoSVQYzCqFPvV+RYQf9IRwEMiM93KMK7/ujU
k7cYfoGQdaKkrQNkQ1CeEQm282sacDx9hQGqNK4JrQ91CikjStVG1mKpn5a7m0er
kTgX4dZ4mriz/6N/X5UOQgVP4ezdL1O/0hrwbe/KeWEawl8tVddvTvtRzZNCl337
CcGQHCAC2Fi+aaNmQeHPsLqbBjFbWJ8+AEndHEGuVsDifcews0XV2PmvchbMUMp6
e/PTCVOvuVnlq8pDSWwlYxU/rI71nJFLpqryEguTKB+NsOOlcwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEfDaVupU0R0zOrOU28+tmBl4XJzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWJiNmY2YWUtYmQyZi0z
OGE2LThlZDUtYWQ1NTkwZDFmZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAbH5
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAP4SK+2c43bffl5+EaFE1Ns+t6/iYrvpZ1W7J40wLPpY/ItXdH5
MqG3pH8VmgRFv/MGzzWbqHcuENm5gimMELuffRekSby/tAquhfMkTvJHBpp/313H
Nh6ETQ+71n2W6Wf6CoF6ZFUTwRdyzjCJ5l1Gc4Xqtba6VhQ72+AcVd89bFX3sO1S
qbmCG4h26NkyduIW70kBu/NjQdFC4mUNcaC3abkS5NGzklxgC1zR2lLAWycnqv8c
cRa49IMwNO0YKJ3lqTq5dWqXUPKpK9hOC6Ahiz+gic0o2jVcgw1PxZVaQ48gOCiP
+mJwgTcR9kcet6gKMsPF0SPhigRNY7KKmz8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 13:41:55 2025 by rpki-client