Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c90bb841-d0aa-34df-aabd-736f7d9a0842.roa
File:                     c90bb841-d0aa-34df-aabd-736f7d9a0842.roa (raw, json)
Hash identifier:          9EByPlC0s8ETohp2ShVaHHDxF1CWFxOZxv8LZctKj9E=
Subject key identifier:   2C:9F:67:1D:0D:FB:D1:44:9C:53:56:09:46:99:63:2C:A8:79:60:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A30819042A0E169CFF81480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c90bb841-d0aa-34df-aabd-736f7d9a0842.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     396542
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:81:90:42:a0:e1:69:cf:f8:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=df575fc4-cbac-4db6-972a-cbfd13835d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:22:75:a2:5e:ec:b3:1b:cf:7d:d2:e4:63:c4:
                    e6:16:5e:47:42:5f:93:2a:12:22:f8:a8:d7:18:5a:
                    75:72:ce:14:91:3e:f0:5d:37:3f:12:d9:56:84:b5:
                    64:59:bc:e4:42:60:4f:a9:ac:39:12:ab:cd:f9:6a:
                    dc:f5:d3:02:95:14:4a:c9:a0:94:6c:64:00:d9:2c:
                    61:16:4e:05:1e:de:77:f5:ba:8c:47:5d:27:37:29:
                    3c:19:dc:dc:de:2d:2b:0f:f4:1d:1d:b9:b2:a2:62:
                    91:bd:25:7a:6d:6e:eb:88:c7:d2:dc:65:78:26:e1:
                    72:71:f4:59:98:67:c2:13:9e:f0:6b:b7:a4:3e:d9:
                    af:75:03:00:bd:64:a5:7f:c4:39:bb:15:90:e2:f7:
                    1e:a3:e1:c8:ec:d2:2f:a7:70:a3:c7:fd:c2:25:2f:
                    62:56:b7:45:eb:47:db:53:8e:12:d9:49:7a:59:f0:
                    18:88:a8:5e:71:19:28:b1:3e:47:eb:32:c9:b0:91:
                    0c:de:5c:ea:61:7a:72:fc:3f:b6:67:54:f1:1d:8a:
                    6f:b9:97:d8:d9:82:6e:1d:f4:71:c9:30:4f:14:25:
                    7b:98:5e:3f:46:b2:c7:fc:0b:dd:cc:f8:f7:d2:a8:
                    f6:10:2f:8b:2a:e8:e4:a0:f3:a8:10:b5:ef:62:06:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:67:1D:0D:FB:D1:44:9C:53:56:09:46:99:63:2C:A8:79:60:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c90bb841-d0aa-34df-aabd-736f7d9a0842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a8:d0:43:29:00:12:1a:e7:41:05:7a:fc:76:8e:1b:b3:fd:
         a2:b0:d6:b4:85:c7:2e:96:68:f4:01:0e:a3:dc:7b:a7:95:c4:
         1b:70:72:84:13:60:97:50:93:6c:56:f9:44:ef:0c:c7:99:52:
         84:ad:cf:50:fb:de:4f:61:13:9e:3e:7f:3c:02:12:31:49:06:
         1b:ae:f3:38:81:d0:8b:a6:e2:d5:f3:93:b8:18:7e:10:63:4d:
         d3:7d:af:8c:76:58:c1:3b:57:bc:b3:b4:cf:c5:6f:58:fe:7c:
         fa:f4:08:32:d9:f7:47:60:87:48:e5:ac:13:6b:f7:e3:cc:0f:
         94:2f:67:e2:0c:83:32:df:8b:9d:5d:ca:cb:c4:a8:c5:b7:69:
         ab:1d:b0:e3:3a:36:1f:e1:fd:6b:93:ae:87:39:6c:f6:b9:29:
         8e:ff:2e:d9:b5:6e:73:21:db:c7:b0:8f:3b:37:92:2a:ba:bf:
         34:2a:3a:8d:10:93:94:86:a4:73:82:58:ab:2b:55:0f:0f:c6:
         63:63:d7:e7:4f:73:3d:36:c0:d5:11:eb:36:0e:30:64:67:47:
         7d:62:95:bf:2e:08:51:f3:16:fa:47:eb:6b:a2:10:2a:43:a7:
         28:85:73:4c:06:3e:e8:b0:fb:cf:8f:15:0c:e1:da:b5:b7:72:
         f6:31:38:e0
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpaMIGQQqDhac/4FIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
ZGY1NzVmYzQtY2JhYy00ZGI2LTk3MmEtY2JmZDEzODM1ZDFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8iJ1ol7ssxvPfdLkY8TmFl5HQl+TKhIi+KjX
GFp1cs4UkT7wXTc/EtlWhLVkWbzkQmBPqaw5EqvN+Wrc9dMClRRKyaCUbGQA2Sxh
Fk4FHt539bqMR10nNyk8Gdzc3i0rD/QdHbmyomKRvSV6bW7riMfS3GV4JuFycfRZ
mGfCE57wa7ekPtmvdQMAvWSlf8Q5uxWQ4vceo+HI7NIvp3Cjx/3CJS9iVrdF60fb
U44S2Ul6WfAYiKhecRkosT5H6zLJsJEM3lzqYXpy/D+2Z1TxHYpvuZfY2YJuHfRx
yTBPFCV7mF4/RrLH/AvdzPj30qj2EC+LKujkoPOoELXvYgauYQIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFCyfZx0N+9FEnFNWCUaZYyyoeWChMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzkwYmI4NDEtZDBhYS0z
NGRmLWFhYmQtNzM2ZjdkOWEwODQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBxqNBDKQASGudBBXr8do4bs/2isNa0hcculmj0
AQ6j3HunlcQbcHKEE2CXUJNsVvlE7wzHmVKErc9Q+95PYROePn88AhIxSQYbrvM4
gdCLpuLV85O4GH4QY03Tfa+MdljBO1e8s7TPxW9Y/nz69Agy2fdHYIdI5awTa/fj
zA+UL2fiDIMy34udXcrLxKjFt2mrHbDjOjYf4f1rk66HOWz2uSmO/y7ZtW5zIdvH
sI87N5Iqur80KjqNEJOUhqRzglirK1UPD8ZjY9fnT3M9NsDVEes2DjBkZ0d9YpW/
LghR8xb6R+trohAqQ6cohXNMBj7osPvPjxUM4dq1t3L2MTjg
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:12:52 2025 by rpki-client