Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab11d9ed-05e8-379d-a412-1deb1a173917.roa
File:                     ab11d9ed-05e8-379d-a412-1deb1a173917.roa (raw, json)
Hash identifier:          4F6VYorsrCc6v8irC2Mb1tQsMgMV367crQsW5KtSFiI=
Subject key identifier:   B4:07:DE:94:33:B2:D9:71:92:AA:64:D1:B5:12:29:A5:A4:78:82:9F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE196E12C2C05B2DA94D1C980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab11d9ed-05e8-379d-a412-1deb1a173917.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     397199
IP address blocks:        2001:500:127::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:e1:2c:2c:05:b2:da:94:d1:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=1b24690d-f4c7-4342-8882-7fd3566b0928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:11:f4:e2:46:ab:e0:be:00:41:32:50:08:7b:
                    71:20:bc:fa:4a:71:e3:a0:70:08:c7:ce:65:e0:77:
                    04:de:f9:eb:ac:5d:01:ea:1f:60:44:f4:f9:91:31:
                    5f:e6:b3:74:b5:e3:35:66:59:11:1b:a5:8e:ae:b8:
                    22:0f:81:f7:3e:22:a3:a3:0c:db:8d:89:33:b1:dc:
                    31:24:5b:e0:6d:ab:0d:a8:1d:ec:73:fa:3e:e3:06:
                    7c:95:92:b2:b2:97:cc:aa:83:a6:8d:41:88:4d:2a:
                    5c:de:1a:74:57:05:90:a7:b1:37:14:c0:8b:45:bc:
                    69:87:37:2c:95:7f:5b:8c:80:dc:f9:6f:a0:32:97:
                    28:22:d3:8d:f4:bc:e2:c7:78:a7:11:b8:1a:5a:51:
                    66:5e:ff:4b:de:a6:4a:e9:27:48:a5:a2:8a:74:86:
                    55:57:4e:e0:eb:53:5d:38:7c:ee:e0:b6:4b:af:4f:
                    29:dc:2e:96:db:28:d4:5c:e6:3b:4a:45:17:8f:ad:
                    62:53:6a:5e:54:fb:91:93:e3:dd:4c:80:7c:e6:b0:
                    e7:c7:08:4b:b0:f1:a7:40:ee:d8:2b:41:82:8f:4c:
                    20:0f:7e:85:96:3a:80:dd:e5:3e:ee:35:0c:04:a9:
                    7a:1a:a5:a0:a3:df:f9:b9:47:72:68:24:b8:f0:00:
                    76:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:07:DE:94:33:B2:D9:71:92:AA:64:D1:B5:12:29:A5:A4:78:82:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab11d9ed-05e8-379d-a412-1deb1a173917.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:127:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:4b:03:64:7a:97:fc:d5:ec:c9:19:df:dc:f1:e5:b5:cd:17:
         6b:4b:dd:59:b5:12:8e:ef:b7:13:9e:3d:6b:77:80:21:1b:6c:
         8d:40:82:5b:c0:91:84:26:05:56:ba:c1:58:ab:1a:a1:aa:c4:
         69:6f:7c:02:f3:88:c2:14:2d:e2:39:40:bf:19:1e:f1:e8:71:
         21:37:68:fa:9d:f3:16:27:7b:61:dd:12:c2:cd:bf:20:9a:44:
         d6:44:91:7c:dd:f3:52:d1:80:f7:b0:b8:d1:0c:cc:4e:a0:dc:
         c1:c1:34:67:dd:76:31:39:29:eb:75:0d:ff:42:0e:6c:94:52:
         d7:e8:17:c6:1b:10:4d:94:c6:61:60:1c:85:02:16:5c:78:ab:
         3a:aa:bd:fe:71:ab:93:db:19:3a:64:09:8b:62:c0:95:22:01:
         42:23:24:d7:2d:e8:92:65:22:7d:bd:db:ec:97:86:9f:20:b5:
         24:4f:2d:42:ed:ec:a2:52:89:d8:e4:33:87:15:37:d9:ab:75:
         e0:b7:24:99:d8:3d:ba:4b:48:18:bb:06:a8:6e:3f:b8:ee:72:
         95:75:b3:52:8a:50:41:1a:55:69:16:56:82:39:6d:d5:32:d6:
         f3:a9:97:e6:7a:80:20:c6:8d:53:b9:a2:2b:30:b8:cb:ac:10:
         c3:0b:37:b6
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErhluEsLAWy2pTRyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
MWIyNDY5MGQtZjRjNy00MzQyLTg4ODItN2ZkMzU2NmIwOTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBH04kar4L4AQTJQCHtxILz6SnHjoHAIx85l
4HcE3vnrrF0B6h9gRPT5kTFf5rN0teM1ZlkRG6WOrrgiD4H3PiKjowzbjYkzsdwx
JFvgbasNqB3sc/o+4wZ8lZKyspfMqoOmjUGITSpc3hp0VwWQp7E3FMCLRbxphzcs
lX9bjIDc+W+gMpcoItON9Lzix3inEbgaWlFmXv9L3qZK6SdIpaKKdIZVV07g61Nd
OHzu4LZLr08p3C6W2yjUXOY7SkUXj61iU2peVPuRk+PdTIB85rDnxwhLsPGnQO7Y
K0GCj0wgD36FljqA3eU+7jUMBKl6GqWgo9/5uUdyaCS48AB2VQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFLQH3pQzstlxkqpk0bUSKaWkeIKfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWIxMWQ5ZWQtMDVlOC0z
NzlkLWE0MTItMWRlYjFhMTczOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEn
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBzSwNkepf81ezJGd/c8eW1zRdrS91ZtRKO77cT
nj1rd4AhG2yNQIJbwJGEJgVWusFYqxqhqsRpb3wC84jCFC3iOUC/GR7x6HEhN2j6
nfMWJ3th3RLCzb8gmkTWRJF83fNS0YD3sLjRDMxOoNzBwTRn3XYxOSnrdQ3/Qg5s
lFLX6BfGGxBNlMZhYByFAhZceKs6qr3+cauT2xk6ZAmLYsCVIgFCIyTXLeiSZSJ9
vdvsl4afILUkTy1C7eyiUonY5DOHFTfZq3XgtySZ2D26S0gYuwaobj+47nKVdbNS
ilBBGlVpFlaCOW3VMtbzqZfmeoAgxo1TuaIrMLjLrBDDCze2
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:51:00 2025 by rpki-client