Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f76049-18b5-35ba-82d5-e9bf64dbecf6.roa
File:                     b9f76049-18b5-35ba-82d5-e9bf64dbecf6.roa (raw, json)
Hash identifier:          5Y6+rZewU+a7vyv45vk52mK4oO0AXxbQRaEudlTYC90=
Subject key identifier:   30:46:B8:F7:FB:DB:0F:9C:B4:8B:31:3E:89:6A:D3:35:7B:50:9D:22
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AF256944A5AE0703B42446848
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f76049-18b5-35ba-82d5-e9bf64dbecf6.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     397206
IP address blocks:        2001:502:cbe4::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:94:4a:5a:e0:70:3b:42:44:68:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=3ba577dc-131e-4eeb-9d64-5fcb2cfded8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8e:93:00:44:5b:5f:b8:46:48:73:e3:43:61:
                    a7:0d:fe:3e:9c:44:7a:0e:91:63:4e:74:bb:eb:9d:
                    f1:3f:48:9b:5c:3a:0f:7e:9a:31:8e:bc:0b:e4:a2:
                    eb:75:4e:f4:94:85:51:c5:cb:40:de:ce:fc:c1:a6:
                    49:c5:dc:d4:91:c8:38:4f:ee:39:0a:62:14:57:a5:
                    61:94:54:65:c2:b5:56:2a:c0:83:c7:95:bb:72:dc:
                    c6:5b:93:34:d0:29:fb:64:4b:80:fa:00:02:93:e7:
                    66:18:05:11:7f:35:b7:d6:e8:e9:fb:40:36:48:55:
                    a4:05:50:23:fc:83:ed:77:d8:e1:c6:dc:7b:6b:bc:
                    33:79:8f:f7:15:7e:20:47:07:c6:31:48:e7:12:af:
                    25:b9:2b:2f:a0:1b:6e:21:7f:d5:ef:0a:64:67:66:
                    5d:27:c7:0b:f5:41:e2:9e:12:f2:27:b9:57:b1:75:
                    21:ce:4c:12:57:63:bd:70:b4:51:21:3e:a1:79:0c:
                    7f:6a:cb:60:ac:67:47:67:18:b1:ba:ee:0b:b6:7d:
                    ab:2f:83:00:0a:d9:ed:6d:d2:7f:93:84:d2:51:33:
                    87:97:25:f0:b8:4d:a5:44:f0:71:e2:94:8c:3c:39:
                    64:00:9c:82:64:d1:fd:e4:b2:2f:80:76:17:d6:af:
                    a4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:46:B8:F7:FB:DB:0F:9C:B4:8B:31:3E:89:6A:D3:35:7B:50:9D:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9f76049-18b5-35ba-82d5-e9bf64dbecf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:cbe4:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:98:21:a0:03:ad:d4:10:24:48:67:2a:d4:b5:bb:52:97:8d:
         d0:e0:32:85:2d:5c:99:9c:1c:cf:8c:1c:8e:eb:c3:a9:c2:ee:
         cd:49:f2:2c:21:fd:9f:d6:1e:c5:b3:42:0f:83:54:76:ae:d8:
         2f:90:0a:b9:b5:0f:e2:95:df:86:95:fb:8c:a6:66:2c:96:16:
         c1:73:ac:89:26:0b:74:8f:7a:cf:ed:8f:3b:c8:89:07:d0:9c:
         5c:20:e1:d0:52:6c:bf:31:16:95:40:34:d9:23:d4:8f:9c:09:
         f9:b7:cd:b2:30:68:9e:d0:ed:2c:8a:89:08:94:7a:a3:4e:09:
         b6:7d:08:70:5d:47:53:1b:cd:ac:22:42:bd:4c:fb:ca:f2:a7:
         6d:58:57:78:39:9f:44:8b:a7:92:14:48:65:f0:34:ae:18:57:
         a5:b1:c9:7d:31:c8:09:99:a9:6b:15:18:43:c8:d9:fe:24:ff:
         a2:f6:80:e1:69:99:70:e0:3f:a4:3a:0c:c7:1d:07:5e:43:2e:
         8b:26:e7:22:5c:af:38:59:c5:46:e6:75:5d:86:42:cf:a5:e5:
         95:d9:4f:f3:06:40:2a:59:df:52:01:28:50:9e:4d:3c:c7:d9:
         9e:28:46:54:88:57:43:a5:c6:5f:d1:d8:b9:b5:68:d0:b4:b6:
         2e:19:97:6e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEryVpRKWuBwO0JEaEgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk
M2JhNTc3ZGMtMTMxZS00ZWViLTlkNjQtNWZjYjJjZmRlZDhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7o6TAERbX7hGSHPjQ2GnDf4+nER6DpFjTnS7
653xP0ibXDoPfpoxjrwL5KLrdU70lIVRxctA3s78waZJxdzUkcg4T+45CmIUV6Vh
lFRlwrVWKsCDx5W7ctzGW5M00Cn7ZEuA+gACk+dmGAURfzW31ujp+0A2SFWkBVAj
/IPtd9jhxtx7a7wzeY/3FX4gRwfGMUjnEq8luSsvoBtuIX/V7wpkZ2ZdJ8cL9UHi
nhLyJ7lXsXUhzkwSV2O9cLRRIT6heQx/astgrGdHZxixuu4Ltn2rL4MACtntbdJ/
k4TSUTOHlyXwuE2lRPBx4pSMPDlkAJyCZNH95LIvgHYX1q+k1wIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDBGuPf72w+ctIsxPolq0zV7UJ0iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjlmNzYwNDktMThiNS0z
NWJhLTgyZDUtZTliZjY0ZGJlY2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAsvk
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQCtmCGgA63UECRIZyrUtbtSl43Q4DKFLVyZnBzP
jByO68Opwu7NSfIsIf2f1h7Fs0IPg1R2rtgvkAq5tQ/ild+GlfuMpmYslhbBc6yJ
Jgt0j3rP7Y87yIkH0JxcIOHQUmy/MRaVQDTZI9SPnAn5t82yMGie0O0siokIlHqj
Tgm2fQhwXUdTG82sIkK9TPvK8qdtWFd4OZ9Ei6eSFEhl8DSuGFelscl9McgJmalr
FRhDyNn+JP+i9oDhaZlw4D+kOgzHHQdeQy6LJuciXK84WcVG5nVdhkLPpeWV2U/z
BkAqWd9SAShQnk08x9meKEZUiFdDpcZf0di5tWjQtLYuGZdu
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:25:33 2025 by rpki-client