Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d311105e-3757-3217-8efb-57fcdea4b770.roa
File:                     d311105e-3757-3217-8efb-57fcdea4b770.roa (raw, json)
Hash identifier:          H+VQP9wcbMdYX8LyFOI4+5/MVlraCeuxMdWtlkMqkNQ=
Subject key identifier:   32:E8:BD:56:B3:9E:2D:96:7C:5E:5F:4E:E4:83:65:DB:D8:F2:E6:8B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B2CF711A744C90A2149A50D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d311105e-3757-3217-8efb-57fcdea4b770.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     36628
IP address blocks:        2001:500:7967::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:11:a7:44:c9:0a:21:49:a5:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=24150663-2c8b-4408-9e6c-65d9494bb3e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0a:5a:bf:be:38:52:61:68:05:10:0b:57:6b:
                    8f:b3:20:3f:9b:0e:79:12:49:ac:f7:71:ff:51:65:
                    b5:4d:8e:d2:d8:32:b2:88:31:6d:a5:c5:f4:24:c7:
                    e0:3f:b5:cb:df:0e:dd:da:29:a1:fb:75:8d:ca:aa:
                    11:ac:e1:21:b5:30:4e:5e:4a:38:d4:ee:06:7f:16:
                    93:5f:31:60:c0:b3:cb:58:27:30:84:a2:33:e0:43:
                    27:c2:d1:1a:6a:53:20:e4:66:79:63:9c:19:32:9e:
                    c9:52:61:14:b2:bc:55:b7:21:db:b1:00:57:9c:db:
                    a7:25:84:ce:27:e8:95:bd:35:bd:ba:48:6a:b0:07:
                    f0:ec:86:4f:87:34:48:ae:ff:bd:ea:f4:8b:e3:5e:
                    18:7e:e9:c0:ca:f2:29:5d:5c:83:40:88:a5:a7:07:
                    bc:70:53:dd:47:72:1a:bf:2e:a4:71:f4:4a:b4:4b:
                    44:9c:3f:03:41:87:d5:10:1c:4f:8f:85:8d:2d:dd:
                    6e:f8:05:0a:dd:76:d5:42:e8:81:71:e8:56:e7:7b:
                    98:72:73:0b:5a:2f:fb:88:f3:96:0a:3c:0d:0d:f5:
                    2f:fa:ea:3e:c5:43:9d:a9:8e:5b:0a:f9:36:2b:55:
                    f2:b6:e4:73:17:f4:42:9d:cc:b7:61:91:b1:75:ec:
                    03:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E8:BD:56:B3:9E:2D:96:7C:5E:5F:4E:E4:83:65:DB:D8:F2:E6:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d311105e-3757-3217-8efb-57fcdea4b770.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:7967:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ae:93:41:48:e5:38:10:7a:d7:41:75:b6:5d:fc:7b:32:e6:
         65:af:cf:04:86:5d:56:91:8c:09:84:08:bf:fa:e6:1d:b7:a2:
         0d:1b:78:a4:ee:ba:69:e4:69:ce:10:27:62:2a:c5:ec:59:9a:
         20:fb:fc:85:12:3c:08:4e:1c:25:b2:55:43:47:b3:30:c7:94:
         ad:c3:16:e7:85:d9:bd:af:db:2d:c2:ba:cc:b9:e8:8e:2d:f9:
         19:64:bd:a5:19:42:8c:64:92:69:f1:24:5d:d9:e9:75:35:48:
         6f:f2:cb:be:8e:5c:d7:c1:35:66:72:f0:2b:9e:33:46:6a:76:
         93:cd:5e:aa:dd:3c:0e:69:4e:dc:d5:db:a1:7b:da:56:cd:ba:
         ff:27:69:a6:d0:05:21:bf:12:f8:3c:56:24:69:32:ff:c7:ed:
         cc:09:b6:8d:f5:29:64:a4:92:ec:63:15:14:27:0b:a8:f2:3d:
         5f:ee:e2:88:d3:56:d9:d0:49:08:82:b9:14:b5:2a:5f:21:be:
         8a:84:96:c7:c2:e9:ba:79:84:95:c4:c8:fe:ba:41:b8:6b:01:
         6d:ad:1c:50:c8:f0:b8:a8:e3:6f:10:5f:ce:26:27:40:5c:aa:
         cd:6a:91:14:94:94:5e:55:24:8c:18:b3:9c:74:79:a5:36:50:
         a1:be:94:32
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEss9xGnRMkKIUmlDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk
MjQxNTA2NjMtMmM4Yi00NDA4LTllNmMtNjVkOTQ5NGJiM2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwpav744UmFoBRALV2uPsyA/mw55Ekms93H/
UWW1TY7S2DKyiDFtpcX0JMfgP7XL3w7d2imh+3WNyqoRrOEhtTBOXko41O4GfxaT
XzFgwLPLWCcwhKIz4EMnwtEaalMg5GZ5Y5wZMp7JUmEUsrxVtyHbsQBXnNunJYTO
J+iVvTW9ukhqsAfw7IZPhzRIrv+96vSL414YfunAyvIpXVyDQIilpwe8cFPdR3Ia
vy6kcfRKtEtEnD8DQYfVEBxPj4WNLd1u+AUK3XbVQuiBcehW53uYcnMLWi/7iPOW
CjwNDfUv+uo+xUOdqY5bCvk2K1XytuRzF/RCncy3YZGxdewDZwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFDLovVazni2WfF5fTuSDZdvY8uaLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDMxMTEwNWUtMzc1Ny0z
MjE3LThlZmItNTdmY2RlYTRiNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAHln
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQArrpNBSOU4EHrXQXW2Xfx7MuZlr88Ehl1WkYwJ
hAi/+uYdt6ING3ik7rpp5GnOECdiKsXsWZog+/yFEjwIThwlslVDR7Mwx5Stwxbn
hdm9r9stwrrMueiOLfkZZL2lGUKMZJJp8SRd2el1NUhv8su+jlzXwTVmcvArnjNG
anaTzV6q3TwOaU7c1duhe9pWzbr/J2mm0AUhvxL4PFYkaTL/x+3MCbaN9SlkpJLs
YxUUJwuo8j1f7uKI01bZ0EkIgrkUtSpfIb6KhJbHwum6eYSVxMj+ukG4awFtrRxQ
yPC4qONvEF/OJidAXKrNapEUlJReVSSMGLOcdHmlNlChvpQy
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:12:55 2025 by rpki-client