Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a18b35a-c5bc-3aa8-9e89-2f7230b588cf.roa
File:                     7a18b35a-c5bc-3aa8-9e89-2f7230b588cf.roa (raw, json)
Hash identifier:          tCP15R+WUkoCoIVY9re9ZxHpxuc8w3D3TNLNn22fEuk=
Subject key identifier:   62:D3:7C:EF:AC:AB:9F:01:FC:07:20:50:81:9C:6B:C4:15:AB:5A:C0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196C7486C42DD57FFDEBF00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a18b35a-c5bc-3aa8-9e89-2f7230b588cf.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396613
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:c7:48:6c:42:dd:57:ff:de:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=d2ecb183-8b56-48b2-ab57-b934753c7d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:ee:d1:9c:b2:dd:a1:a8:74:b9:22:d7:ed:
                    d8:19:e2:a0:55:43:ff:88:ba:4e:24:18:51:31:14:
                    c5:19:f7:fe:0e:ee:97:bc:b7:c2:25:c3:f7:ba:a7:
                    b1:df:54:69:83:e5:e5:d6:42:cd:ec:f4:cc:aa:d9:
                    f7:d1:4f:21:95:45:56:5a:27:ea:1f:81:12:43:9b:
                    10:a6:19:5d:55:fe:07:d6:5d:c7:b9:8e:ae:94:79:
                    91:53:16:9b:4c:9c:fd:5e:ce:2c:e2:11:de:01:29:
                    ee:c6:04:a7:f9:fc:d2:44:15:5d:c5:d3:0b:b0:07:
                    22:0d:ad:43:26:53:d6:d4:16:dd:9c:d6:cb:11:2d:
                    e6:46:27:eb:24:6c:52:b1:a2:05:6d:e9:25:3b:f9:
                    3d:2f:f4:45:ee:04:1c:71:e1:1b:b5:9b:ad:7b:72:
                    10:e2:83:22:ef:ee:c8:4f:61:77:28:94:dd:39:19:
                    08:ea:30:e9:ba:17:68:6b:e9:74:53:56:c3:53:c5:
                    4f:94:4e:ee:6e:e4:48:cb:99:1e:7d:c0:43:02:12:
                    ce:00:6a:4b:d8:7b:78:6e:93:a2:ca:6b:d0:22:93:
                    34:53:80:28:9f:b3:45:28:c3:8b:85:65:8a:00:42:
                    25:5f:cb:60:67:a9:1c:2e:8e:16:23:23:12:af:15:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D3:7C:EF:AC:AB:9F:01:FC:07:20:50:81:9C:6B:C4:15:AB:5A:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a18b35a-c5bc-3aa8-9e89-2f7230b588cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:0a:18:bb:89:ef:65:2e:44:51:c2:40:0b:09:80:a5:68:b8:
         54:cc:d1:f7:68:d2:72:62:a3:33:35:47:a9:75:8a:ff:5e:0c:
         1e:47:81:49:dd:36:65:a4:12:cc:14:d0:d2:86:07:2f:5c:47:
         93:39:ce:c2:09:2e:f3:e3:45:12:92:19:fb:70:84:c4:6a:c3:
         9b:01:9e:db:de:5c:a7:3b:33:34:2c:e8:e8:d8:43:19:18:59:
         ef:37:50:e5:6b:32:dd:7f:19:ae:c8:64:d2:ba:50:db:24:71:
         a0:d9:3e:51:17:ca:14:c6:54:ad:e1:ea:fa:7d:76:85:53:d8:
         2f:93:af:b9:e2:6a:27:99:86:c0:5a:14:48:9f:6d:4f:3c:6e:
         55:96:34:ea:68:79:5f:05:52:06:96:9e:ad:51:17:dd:9b:3f:
         9d:bf:49:d1:97:f9:c2:b4:80:7d:2c:5a:34:4d:3b:16:3d:93:
         63:d5:dc:12:46:29:22:34:7b:1f:35:65:7c:af:8c:b7:99:d8:
         81:de:08:2d:37:66:29:f0:06:cd:d6:b0:36:7e:40:d2:06:07:
         10:b0:8f:91:fa:ee:91:fb:aa:ed:04:d4:2c:52:e4:97:61:3d:
         4e:00:69:07:d1:23:ee:d8:34:6c:a9:93:45:e8:34:b9:49:09:
         dc:ae:34:25
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlsdIbELdV//evwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZDJlY2IxODMtOGI1Ni00OGIyLWFiNTctYjkzNDc1M2M3ZDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Pu0Zyy3aGodLki1+3YGeKgVUP/iLpOJBhR
MRTFGff+Du6XvLfCJcP3uqex31Rpg+Xl1kLN7PTMqtn30U8hlUVWWifqH4ESQ5sQ
phldVf4H1l3HuY6ulHmRUxabTJz9Xs4s4hHeASnuxgSn+fzSRBVdxdMLsAciDa1D
JlPW1BbdnNbLES3mRifrJGxSsaIFbeklO/k9L/RF7gQcceEbtZute3IQ4oMi7+7I
T2F3KJTdORkI6jDpuhdoa+l0U1bDU8VPlE7ubuRIy5kefcBDAhLOAGpL2Ht4bpOi
ymvQIpM0U4Aon7NFKMOLhWWKAEIlX8tgZ6kcLo4WIyMSrxVamwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFGLTfO+sq58B/AcgUIGca8QVq1rAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2ExOGIzNWEtYzViYy0z
YWE4LTllODktMmY3MjMwYjU4OGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQB9Chi7ie9lLkRRwkALCYClaLhUzNH3aNJyYqMz
NUepdYr/XgweR4FJ3TZlpBLMFNDShgcvXEeTOc7CCS7z40USkhn7cITEasObAZ7b
3lynOzM0LOjo2EMZGFnvN1DlazLdfxmuyGTSulDbJHGg2T5RF8oUxlSt4er6fXaF
U9gvk6+54monmYbAWhRIn21PPG5VljTqaHlfBVIGlp6tURfdmz+dv0nRl/nCtIB9
LFo0TTsWPZNj1dwSRikiNHsfNWV8r4y3mdiB3ggtN2Yp8AbN1rA2fkDSBgcQsI+R
+u6R+6rtBNQsUuSXYT1OAGkH0SPu2DRsqZNF6DS5SQncrjQl
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:22:48 2025 by rpki-client