Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a56f50cc-4006-3487-b22e-23c0be29eb04.roa
File:                     a56f50cc-4006-3487-b22e-23c0be29eb04.roa (raw, json)
Hash identifier:          mt2DD2SvoiNddN+DUBi3MAQ8c3mYxbJB2S49BrY9cWs=
Subject key identifier:   F9:02:50:E6:56:4B:A8:A1:57:3F:01:5A:32:6D:B9:36:D3:57:30:73
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196CA22175B5EBD279CA680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a56f50cc-4006-3487-b22e-23c0be29eb04.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397196
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:ca:22:17:5b:5e:bd:27:9c:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=b1855a9d-a2b4-401f-a161-fe9b816ef788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:56:08:6f:3b:22:9a:fc:fc:bf:97:db:f2:5e:
                    15:fc:c0:c0:77:a4:62:d3:37:1e:7d:49:72:3b:f9:
                    14:a3:84:d8:27:09:06:4a:23:6a:87:14:df:8e:28:
                    c1:02:7e:89:04:b0:d8:46:45:d8:af:ba:f3:72:5a:
                    99:55:63:86:63:98:b9:5a:e2:ca:74:5b:fc:25:14:
                    d9:09:d0:77:91:bf:86:9e:a5:f5:18:61:b6:a7:70:
                    7f:cd:44:ef:64:b9:c5:eb:b1:a3:77:97:45:d2:9d:
                    06:45:54:5c:e0:66:d2:aa:ee:ce:a1:96:be:bc:b9:
                    73:58:17:f3:08:ce:27:99:4c:e7:55:c9:96:46:19:
                    9f:97:e2:5d:d8:b7:00:ee:a4:89:22:6a:28:70:a5:
                    f9:9a:55:56:da:90:98:35:71:ca:b8:c6:ec:07:2a:
                    44:69:04:33:d2:9b:17:7a:56:1d:a6:a3:32:dc:ca:
                    de:eb:eb:a4:ad:01:79:48:ab:23:96:e5:cf:d2:52:
                    5f:c1:f1:33:57:cd:af:93:2c:be:2c:bb:55:a3:4e:
                    34:4d:d7:c9:e1:1b:76:1d:cc:a5:9d:51:8a:b9:f0:
                    d6:59:d2:77:f9:c4:c9:db:bc:3c:65:bf:bc:14:dd:
                    9a:39:a4:50:24:81:5f:61:ae:81:23:38:dc:15:cb:
                    7b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:02:50:E6:56:4B:A8:A1:57:3F:01:5A:32:6D:B9:36:D3:57:30:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a56f50cc-4006-3487-b22e-23c0be29eb04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f8:00:6a:14:aa:9b:c6:21:ef:7c:e1:61:9a:6e:a7:63:f1:
         9f:a8:ee:d7:ed:40:d4:db:db:ff:80:26:b1:89:de:04:c0:99:
         54:b5:73:90:a4:3b:0c:ca:9a:3e:30:d0:75:ee:27:b7:7c:ee:
         19:e5:09:ef:2a:d3:61:a9:e7:b1:1e:7f:4d:0e:0a:80:37:56:
         19:0f:f2:df:dd:4a:fb:ac:98:92:ad:10:ba:69:5b:7c:85:22:
         a0:18:28:c9:5c:74:9f:b7:c2:e4:5d:32:f8:56:a5:39:0a:9d:
         32:8e:9e:12:f5:75:98:51:41:14:0e:2e:c1:62:eb:69:84:9a:
         5e:9d:05:e8:1f:11:9a:69:8f:a8:5a:15:b6:ba:6c:07:8a:f6:
         74:e7:1d:36:7e:37:21:f5:16:76:67:05:70:5d:37:6e:09:a6:
         c6:08:d3:b2:24:f4:b0:be:14:40:a1:50:f0:63:9a:a1:a7:47:
         67:a8:c4:11:7f:19:05:7b:5f:b3:b7:cd:c6:3c:84:d8:1c:3b:
         c7:0f:d8:db:17:94:30:17:51:97:99:3d:ec:5c:f1:95:08:fc:
         e8:23:da:8d:04:cf:21:b8:73:e7:a3:39:04:38:b8:cd:e0:f9:
         50:a4:5a:7c:bf:95:58:0d:8e:d5:15:56:07:d2:cd:d8:59:6c:
         1a:79:17:c4
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhlsoiF1tevSecpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
YjE4NTVhOWQtYTJiNC00MDFmLWExNjEtZmU5YjgxNmVmNzg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFYIbzsimvz8v5fb8l4V/MDAd6Ri0zcefUly
O/kUo4TYJwkGSiNqhxTfjijBAn6JBLDYRkXYr7rzclqZVWOGY5i5WuLKdFv8JRTZ
CdB3kb+GnqX1GGG2p3B/zUTvZLnF67Gjd5dF0p0GRVRc4GbSqu7OoZa+vLlzWBfz
CM4nmUznVcmWRhmfl+Jd2LcA7qSJImoocKX5mlVW2pCYNXHKuMbsBypEaQQz0psX
elYdpqMy3Mre6+ukrQF5SKsjluXP0lJfwfEzV82vkyy+LLtVo040TdfJ4Rt2Hcyl
nVGKufDWWdJ3+cTJ27w8Zb+8FN2aOaRQJIFfYa6BIzjcFct7+wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFPkCUOZWS6ihVz8BWjJtuTbTVzBzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTU2ZjUwY2MtNDAwNi0z
NDg3LWIyMmUtMjNjMGJlMjllYjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAf+ABqFKqbxiHvfOFhmm6nY/GfqO7X7UDU29v/
gCaxid4EwJlUtXOQpDsMypo+MNB17ie3fO4Z5QnvKtNhqeexHn9NDgqAN1YZD/Lf
3Ur7rJiSrRC6aVt8hSKgGCjJXHSft8LkXTL4VqU5Cp0yjp4S9XWYUUEUDi7BYutp
hJpenQXoHxGaaY+oWhW2umwHivZ05x02fjch9RZ2ZwVwXTduCabGCNOyJPSwvhRA
oVDwY5qhp0dnqMQRfxkFe1+zt83GPITYHDvHD9jbF5QwF1GXmT3sXPGVCPzoI9qN
BM8huHPnozkEOLjN4PlQpFp8v5VYDY7VFVYH0s3YWWwaeRfE
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:24:38 2025 by rpki-client