Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3938f98-38d1-3caf-85c8-2ab01b87163f.roa
File:                     d3938f98-38d1-3caf-85c8-2ab01b87163f.roa (raw, json)
Hash identifier:          TTiijylXGwCxGRLtkL5cbhm1VxqLXXGHwA0qDMlxtYk=
Subject key identifier:   A5:EC:0E:59:82:90:B4:50:8D:75:39:E8:F6:40:EC:44:CF:93:DD:FC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A5A307D8813564101B7BFBE60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3938f98-38d1-3caf-85c8-2ab01b87163f.roa
Signing time:             Sun 29 Jun 2025 13:01:03 +0000
ROA not before:           Sun 29 Jun 2025 13:01:03 +0000
ROA not after:            Sat 27 Sep 2025 13:01:03 +0000
asID:                     36616
IP address blocks:        2001:500:30ff::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5a:30:7d:88:13:56:41:01:b7:bf:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 29 13:01:03 2025 GMT
            Not After : Sep 27 13:01:03 2025 GMT
        Subject: CN=af4c8ff3-7807-4fdd-9aee-caab4116784b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7d:f0:ca:23:c1:ef:af:09:c3:ec:f4:e7:7a:
                    7a:ac:6b:89:82:53:e3:15:1b:87:31:34:d9:5d:b4:
                    13:d0:56:94:37:2a:b6:df:b5:91:eb:90:25:53:bb:
                    b5:20:01:79:0c:d4:e0:07:01:08:a0:ab:f6:e8:5f:
                    39:86:73:03:21:20:97:31:77:86:c7:54:87:6c:16:
                    3f:25:e5:42:0a:7c:63:f0:87:17:59:a1:45:b1:e5:
                    08:b3:31:a5:56:41:c1:0b:4b:45:00:57:32:45:15:
                    8d:24:f1:27:e5:86:56:9d:67:e5:f5:2f:63:7b:2d:
                    f9:d7:54:9b:84:df:60:21:97:e4:cd:09:eb:05:f7:
                    22:c3:a2:c9:d7:5e:cc:c5:7f:2f:3d:bd:55:f5:26:
                    14:f0:9b:1d:f4:83:47:ac:18:5d:4a:f9:d9:f2:aa:
                    89:49:8e:9b:c0:7d:0c:66:42:77:b4:39:85:e1:1a:
                    00:7e:5f:29:df:04:83:26:0e:b9:21:d4:50:9c:2e:
                    52:2e:4c:74:40:d3:3f:ec:8d:e6:ec:ab:8d:d9:5c:
                    b4:ef:14:4d:2c:43:7e:10:48:68:d4:ee:10:34:06:
                    28:90:d5:15:f9:2b:a1:90:6c:39:95:a2:1c:63:f6:
                    4f:3e:a0:dc:8c:e0:48:6e:f9:f8:b6:95:c9:d4:cf:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EC:0E:59:82:90:B4:50:8D:75:39:E8:F6:40:EC:44:CF:93:DD:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d3938f98-38d1-3caf-85c8-2ab01b87163f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:30ff:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:70:47:18:e2:b1:5f:a8:ca:92:1a:34:fb:5f:ee:be:d9:2f:
         55:3e:b6:14:9a:bd:50:68:c5:2e:a0:6e:59:e2:43:5a:b2:63:
         ee:8e:59:24:a2:c2:8c:79:79:ca:c7:ea:db:29:e3:ef:2c:5f:
         72:72:98:45:03:fe:c7:ec:56:9d:7e:d2:ff:dd:3a:f3:0c:26:
         cc:00:48:3f:bd:d5:17:5b:6b:ee:d6:0e:d6:8b:43:64:82:e6:
         e2:40:10:09:74:93:a7:e4:9c:42:fb:62:ff:5b:be:d5:d3:2f:
         24:be:a8:72:65:57:11:95:9d:f9:3c:f4:b4:64:db:de:20:e0:
         fd:06:4f:55:09:6c:fc:e9:c3:3e:28:7b:69:6e:8a:c7:02:ef:
         8c:27:9f:ee:e7:47:62:77:eb:cd:cb:0e:f9:15:c9:2c:32:ea:
         80:a1:9c:63:61:37:3e:3d:f2:59:a5:4b:67:d0:32:49:b0:03:
         e2:11:f7:72:7d:34:c2:25:f4:28:c3:f4:a7:c2:f3:cf:b5:ed:
         3d:c9:f1:30:cc:a8:05:ad:d8:8f:ac:f6:31:6b:36:d7:a2:99:
         26:db:9b:db:c1:38:5f:d1:45:3b:0b:76:95:4d:60:44:36:43:
         25:72:ef:cc:e0:ab:b4:f2:de:23:ab:63:fd:98:06:c8:5d:d4:
         35:ad:44:0e
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEpaMH2IE1ZBAbe/vmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyOTEzMDEwM1oXDTI1MDkyNzEzMDEwM1owLzEtMCsGA1UEAxMk
YWY0YzhmZjMtNzgwNy00ZmRkLTlhZWUtY2FhYjQxMTY3ODRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn3wyiPB768Jw+z053p6rGuJglPjFRuHMTTZ
XbQT0FaUNyq237WR65AlU7u1IAF5DNTgBwEIoKv26F85hnMDISCXMXeGx1SHbBY/
JeVCCnxj8IcXWaFFseUIszGlVkHBC0tFAFcyRRWNJPEn5YZWnWfl9S9jey3511Sb
hN9gIZfkzQnrBfciw6LJ117MxX8vPb1V9SYU8Jsd9INHrBhdSvnZ8qqJSY6bwH0M
ZkJ3tDmF4RoAfl8p3wSDJg65IdRQnC5SLkx0QNM/7I3m7KuN2Vy07xRNLEN+EEho
1O4QNAYokNUV+SuhkGw5laIcY/ZPPqDcjOBIbvn4tpXJ1M+zAwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFKXsDlmCkLRQjXU56PZA7ETPk938MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDM5MzhmOTgtMzhkMS0z
Y2FmLTg1YzgtMmFiMDFiODcxNjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFADD/
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQBYcEcY4rFfqMqSGjT7X+6+2S9VPrYUmr1QaMUu
oG5Z4kNasmPujlkkosKMeXnKx+rbKePvLF9ycphFA/7H7FadftL/3TrzDCbMAEg/
vdUXW2vu1g7Wi0NkgubiQBAJdJOn5JxC+2L/W77V0y8kvqhyZVcRlZ35PPS0ZNve
IOD9Bk9VCWz86cM+KHtpborHAu+MJ5/u50did+vNyw75FcksMuqAoZxjYTc+PfJZ
pUtn0DJJsAPiEfdyfTTCJfQow/SnwvPPte09yfEwzKgFrdiPrPYxazbXopkm25vb
wThf0UU7C3aVTWBENkMlcu/M4Ku08t4jq2P9mAbIXdQ1rUQO
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:08:55 2025 by rpki-client