Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bef60fd-9b82-301a-b928-feae10f84f81.roa
File:                     6bef60fd-9b82-301a-b928-feae10f84f81.roa (raw, json)
Hash identifier:          r1vADyzl1+FKFSBy4Q8zGTutYJBDxZS6bo4lB9eCgdE=
Subject key identifier:   C2:C5:77:BB:85:9B:DF:B3:70:88:2D:34:F6:39:75:C0:FC:4C:C8:07
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B3AEC4D2CFADF31857B6EC8A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bef60fd-9b82-301a-b928-feae10f84f81.roa
Signing time:             Thu 18 Sep 2025 01:00:32 +0000
ROA not before:           Thu 18 Sep 2025 01:00:32 +0000
ROA not after:            Wed 17 Dec 2025 02:00:32 +0000
asID:                     397204
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3a:ec:4d:2c:fa:df:31:85:7b:6e:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 18 01:00:32 2025 GMT
            Not After : Dec 17 02:00:32 2025 GMT
        Subject: CN=6c9dc96f-60c3-4f56-aaf8-031e39a99991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:5c:09:85:62:9a:48:6b:c0:f8:6b:bd:50:
                    11:4f:08:87:eb:fd:4e:7f:bc:48:d5:45:2c:1c:19:
                    44:c6:85:b8:a0:50:69:54:0e:0f:62:b6:60:ec:da:
                    94:b0:37:e0:cc:e9:74:e0:2a:4e:bb:0c:70:c1:25:
                    b9:16:7e:e8:a6:d6:cf:b1:01:cc:6a:74:fc:0d:48:
                    57:3c:14:34:85:69:95:1e:cb:60:cf:dd:14:f0:a5:
                    52:03:71:9f:4b:d4:4d:a0:c4:b2:e3:4e:2e:e7:eb:
                    9f:db:e9:a7:2b:07:04:1a:07:59:7c:c3:81:c0:de:
                    7e:20:0b:d6:cd:9c:d4:6e:4e:3e:33:3f:46:79:0a:
                    1d:ee:e9:a8:c8:03:9e:0d:b0:ba:c3:4a:a8:97:ec:
                    7f:c6:4f:79:60:e4:8e:6e:c0:e7:6f:e6:07:73:ee:
                    e3:d4:0c:9f:24:5a:46:9e:14:6c:6b:0e:86:21:c6:
                    d5:07:12:cc:bb:65:b0:66:d3:a0:e8:58:85:95:05:
                    5f:f5:27:5e:37:9a:b1:b7:7e:21:e9:3c:09:0f:d4:
                    fa:99:39:74:95:6d:7b:29:7e:b3:b7:ee:77:cd:b5:
                    59:bd:13:45:7a:c8:14:bb:a7:da:79:d3:aa:10:bd:
                    b3:45:4c:1e:cd:9e:88:2d:25:bf:56:1c:6e:85:bf:
                    fe:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C5:77:BB:85:9B:DF:B3:70:88:2D:34:F6:39:75:C0:FC:4C:C8:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6bef60fd-9b82-301a-b928-feae10f84f81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e8:90:b5:af:bd:ae:43:9f:86:29:39:5e:56:f5:6a:2f:1d:
         da:31:16:19:3d:c0:b7:8f:d5:34:2a:98:91:12:1b:13:96:16:
         ba:58:90:43:01:47:a1:e9:34:bd:13:50:e8:a2:ec:7a:34:75:
         60:a3:34:fe:fb:3d:b6:28:b9:44:e8:3c:7c:b4:c6:4f:95:61:
         68:5e:93:79:5e:50:9f:84:98:d9:23:ac:1a:81:5d:64:49:df:
         9f:4d:b8:b1:cd:91:fd:cc:22:e5:fc:17:3b:a5:8b:24:12:ad:
         1b:37:b1:34:a1:74:b8:55:89:5e:44:82:3d:e6:d5:ba:e2:0c:
         fa:77:61:3b:e8:4e:91:e7:70:2e:22:18:91:67:ec:c8:63:80:
         f6:3c:28:a3:29:89:81:07:81:70:12:fc:4d:93:a1:fa:5f:e3:
         d9:0f:87:8f:87:22:79:7c:46:48:01:bc:02:09:2f:96:74:42:
         98:51:fb:40:51:cd:04:d2:98:34:6a:df:3c:cb:c7:4c:93:fa:
         a0:6a:82:4d:35:d3:4a:78:ef:95:c1:9f:59:ce:7f:fc:55:b3:
         69:7f:33:81:27:b4:66:b6:59:99:7b:f2:b3:ab:b8:05:9e:99:
         b1:5f:dc:42:2c:8d:01:7e:25:ac:6a:a9:71:1c:0a:df:b6:70:
         14:0f:60:5c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEs67E0s+t8xhXtuyKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxODAxMDAzMloXDTI1MTIxNzAyMDAzMlowLzEtMCsGA1UEAxMk
NmM5ZGM5NmYtNjBjMy00ZjU2LWFhZjgtMDMxZTM5YTk5OTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgRcCYVimkhrwPhrvVARTwiH6/1Of7xI1UUs
HBlExoW4oFBpVA4PYrZg7NqUsDfgzOl04CpOuwxwwSW5Fn7optbPsQHManT8DUhX
PBQ0hWmVHstgz90U8KVSA3GfS9RNoMSy404u5+uf2+mnKwcEGgdZfMOBwN5+IAvW
zZzUbk4+Mz9GeQod7umoyAOeDbC6w0qol+x/xk95YOSObsDnb+YHc+7j1AyfJFpG
nhRsaw6GIcbVBxLMu2WwZtOg6FiFlQVf9SdeN5qxt34h6TwJD9T6mTl0lW17KX6z
t+53zbVZvRNFesgUu6faedOqEL2zRUwezZ6ILSW/Vhxuhb/+6wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFMLFd7uFm9+zcIgtNPY5dcD8TMgHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmJlZjYwZmQtOWI4Mi0z
MDFhLWI5MjgtZmVhZTEwZjg0ZjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBo6JC1r72uQ5+GKTleVvVqLx3aMRYZPcC3j9U0
KpiREhsTlha6WJBDAUeh6TS9E1Dooux6NHVgozT++z22KLlE6Dx8tMZPlWFoXpN5
XlCfhJjZI6wagV1kSd+fTbixzZH9zCLl/Bc7pYskEq0bN7E0oXS4VYleRII95tW6
4gz6d2E76E6R53AuIhiRZ+zIY4D2PCijKYmBB4FwEvxNk6H6X+PZD4ePhyJ5fEZI
AbwCCS+WdEKYUftAUc0E0pg0at88y8dMk/qgaoJNNdNKeO+VwZ9Zzn/8VbNpfzOB
J7RmtlmZe/Kzq7gFnpmxX9xCLI0BfiWsaqlxHArftnAUD2Bc
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:28 2025 by rpki-client