Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9214e721-ffb7-3767-8367-e78dfbc53b66.roa
File:                     9214e721-ffb7-3767-8367-e78dfbc53b66.roa (raw, json)
Hash identifier:          MfzRXreA8HM6ZivR1weEylvBslZ43PolksfamOHRcdY=
Subject key identifier:   A6:3E:2F:FB:52:3C:5E:54:F2:6D:96:ED:7C:48:FA:BB:AD:10:E9:8C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E9CED6D2187F75AB4C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9214e721-ffb7-3767-8367-e78dfbc53b66.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     396554
IP address blocks:        2001:500:124::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e9:ce:d6:d2:18:7f:75:ab:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=1cb387ab-5bb4-4152-9bdb-e75835975ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:0b:d9:51:89:1c:d1:76:8c:f7:a9:10:75:
                    a0:d8:22:0e:c8:5a:52:f9:7b:ec:94:bb:bb:c0:06:
                    02:91:28:67:73:75:2a:2c:b5:96:51:9e:af:d7:dc:
                    b5:a5:d9:17:3b:2f:f9:dc:87:8a:a9:06:5a:ce:90:
                    93:15:f2:04:c0:b0:e4:16:f5:55:fc:7f:d6:6d:77:
                    b4:b2:30:36:22:66:dc:52:47:af:79:6b:dc:0d:b2:
                    24:fb:32:83:08:dc:cf:dc:72:9a:79:15:1a:d5:e0:
                    22:66:e9:bf:3e:81:7d:52:d0:3a:c3:da:ab:45:ba:
                    91:1a:23:c8:2c:49:f2:69:cb:f0:65:23:b6:38:63:
                    bb:2d:18:da:ae:37:d5:d5:13:67:da:47:0e:dc:d2:
                    b0:7e:0c:ab:fe:a2:6d:ef:46:f8:94:c5:7e:54:24:
                    c0:43:cc:f8:a3:31:8a:a3:97:e7:ca:11:c6:54:ea:
                    3f:66:2a:68:a2:88:07:15:0f:a8:01:ac:a9:72:07:
                    44:75:d7:db:2d:12:38:e6:d3:e9:68:da:62:a9:17:
                    35:c3:2f:50:4c:13:91:60:16:c2:08:4f:c4:20:27:
                    f6:1f:7a:8d:8d:56:2a:56:66:7a:ff:19:bf:77:b6:
                    e0:07:78:e2:5a:02:57:24:b0:02:51:29:5e:ce:a8:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:3E:2F:FB:52:3C:5E:54:F2:6D:96:ED:7C:48:FA:BB:AD:10:E9:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9214e721-ffb7-3767-8367-e78dfbc53b66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:124:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:38:b4:48:2d:a1:76:cf:71:bb:d4:c0:45:bd:0f:a1:bd:84:
         70:aa:26:25:2f:56:dc:3e:4f:87:a2:b2:21:81:13:8b:2d:af:
         49:fc:08:76:fa:bd:95:f1:92:5d:0d:bf:1b:89:20:f6:2d:4d:
         19:e4:d5:14:60:ec:91:5e:08:23:c7:64:1d:af:11:0c:09:57:
         cd:69:05:ef:ca:cd:9e:45:42:01:d6:a5:66:bc:e4:90:a7:e8:
         02:b6:42:19:f8:ec:d9:27:6e:ee:a0:52:b7:35:05:e8:82:6e:
         ac:a4:d0:20:65:f3:48:b0:3f:9d:40:43:58:b2:05:c1:73:d4:
         27:6d:d9:97:7d:f8:10:c5:b1:d6:bb:4e:53:45:3d:43:93:a3:
         92:07:bc:f5:40:36:7e:29:13:92:e7:22:cd:4b:c9:f3:e7:dd:
         8a:8e:d2:9d:43:c2:ad:3e:25:9b:a5:40:91:59:be:8d:6d:06:
         82:6c:ca:dd:91:89:02:3e:fc:17:fa:7e:ae:34:74:33:7b:a0:
         45:3d:4a:1e:1e:bf:2c:8d:eb:fa:e9:c6:86:93:d5:43:f1:0a:
         c9:81:3b:44:dc:14:4f:f4:f8:e4:8d:f4:75:cb:1c:7e:d8:a8:
         ea:40:6a:4c:db:be:7d:b9:da:9a:28:3b:2d:12:4b:34:44:8f:
         8c:e3:c8:e4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlunO1tIYf3WrTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
MWNiMzg3YWItNWJiNC00MTUyLTliZGItZTc1ODM1OTc1ZWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzUL2VGJHNF2jPepEHWg2CIOyFpS+XvslLu7
wAYCkShnc3UqLLWWUZ6v19y1pdkXOy/53IeKqQZazpCTFfIEwLDkFvVV/H/WbXe0
sjA2ImbcUkeveWvcDbIk+zKDCNzP3HKaeRUa1eAiZum/PoF9UtA6w9qrRbqRGiPI
LEnyacvwZSO2OGO7LRjarjfV1RNn2kcO3NKwfgyr/qJt70b4lMV+VCTAQ8z4ozGK
o5fnyhHGVOo/ZipooogHFQ+oAaypcgdEddfbLRI45tPpaNpiqRc1wy9QTBORYBbC
CE/EICf2H3qNjVYqVmZ6/xm/d7bgB3jiWgJXJLACUSlezqiBsQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKY+L/tSPF5U8m2W7XxI+rutEOmMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTIxNGU3MjEtZmZiNy0z
NzY3LTgzNjctZTc4ZGZiYzUzYjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQApOLRILaF2z3G71MBFvQ+hvYRwqiYlL1bcPk+H
orIhgROLLa9J/Ah2+r2V8ZJdDb8biSD2LU0Z5NUUYOyRXggjx2QdrxEMCVfNaQXv
ys2eRUIB1qVmvOSQp+gCtkIZ+OzZJ27uoFK3NQXogm6spNAgZfNIsD+dQENYsgXB
c9QnbdmXffgQxbHWu05TRT1Dk6OSB7z1QDZ+KROS5yLNS8nz592KjtKdQ8KtPiWb
pUCRWb6NbQaCbMrdkYkCPvwX+n6uNHQze6BFPUoeHr8sjev66caGk9VD8QrJgTtE
3BRP9PjkjfR1yxx+2KjqQGpM2759udqaKDstEks0RI+M48jk
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:24:49 2025 by rpki-client