Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d54568ad-0b33-3792-96cd-f2464aa7aae7.roa
File:                     d54568ad-0b33-3792-96cd-f2464aa7aae7.roa (raw, json)
Hash identifier:          kZj4xhY0c0wJVs65iBGV04vXif8Bjysihx6UBcoPvMk=
Subject key identifier:   07:76:F6:86:94:EB:EB:0A:41:C6:2E:90:E5:50:47:54:07:E7:0B:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584AE9F67A703C8B5F556BA23A20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d54568ad-0b33-3792-96cd-f2464aa7aae7.roa
Signing time:             Wed 20 Aug 2025 01:00:33 +0000
ROA not before:           Wed 20 Aug 2025 01:00:33 +0000
ROA not after:            Tue 18 Nov 2025 02:00:33 +0000
asID:                     396563
IP address blocks:        2001:500:121::30/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:f6:7a:70:3c:8b:5f:55:6b:a2:3a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 20 01:00:33 2025 GMT
            Not After : Nov 18 02:00:33 2025 GMT
        Subject: CN=33877c87-7100-4d7c-b32e-e33495fc4e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d6:dc:0e:79:fb:21:45:38:f3:8c:fe:d2:13:
                    5d:5c:a4:f1:b3:6d:2b:c5:b8:ed:9c:69:13:7a:97:
                    b1:a6:5c:80:ac:26:ec:81:ba:ee:39:2f:69:88:8d:
                    6a:18:b7:10:95:1b:db:ba:e7:a3:47:d5:a7:7b:3c:
                    64:56:91:40:5b:f0:57:b1:40:f7:3b:4c:95:4e:63:
                    dc:86:76:b2:43:62:86:70:d2:7c:cd:03:b9:ad:a2:
                    d7:d0:2f:58:00:ef:3f:5e:6d:1e:8a:77:7b:ab:6d:
                    c9:34:b5:68:a3:41:50:37:0d:38:b5:1f:dd:41:98:
                    f3:14:28:4f:53:d9:d3:a6:f9:35:8b:24:35:05:5d:
                    b4:26:53:34:9f:0c:7d:d4:70:75:9b:2e:52:d3:a6:
                    e5:80:af:c9:5c:29:97:39:6c:f8:ee:00:5c:66:ff:
                    a6:84:99:0b:85:02:ee:d6:99:b6:3c:a7:c5:50:6e:
                    65:1c:11:b2:da:5a:7d:73:d5:31:16:e9:ce:15:7f:
                    ac:ec:15:9d:7d:70:e1:3d:4a:b3:23:0e:d0:bc:7d:
                    4a:c9:d5:bd:ad:2f:ff:ea:df:f7:3d:e3:2e:75:43:
                    23:a3:c5:85:30:e5:d9:33:c0:a6:6d:bf:ba:83:45:
                    98:30:fa:54:ad:02:08:6b:39:1d:15:6d:f2:95:5c:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:76:F6:86:94:EB:EB:0A:41:C6:2E:90:E5:50:47:54:07:E7:0B:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d54568ad-0b33-3792-96cd-f2464aa7aae7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:121:0:0:0:0:30/128

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:19:ad:35:89:25:29:27:68:e1:76:a9:47:be:9a:8a:8f:48:
         e4:cc:97:03:3d:66:cc:b6:b7:be:d9:06:15:e4:39:3a:04:b0:
         a5:79:2e:c5:8b:87:c1:a2:8a:a0:2f:f5:b1:4f:37:5d:05:f7:
         2d:4c:c7:c7:08:f5:c1:6b:e7:0d:51:b7:35:c5:81:87:1c:fd:
         c9:5f:6a:75:33:a9:ae:32:af:02:4b:29:bd:eb:bd:a4:d3:0e:
         3c:00:da:5e:22:8b:28:67:17:01:43:35:7c:63:91:4a:77:fb:
         4b:5b:06:8a:8e:2f:3b:eb:f4:8a:c0:63:ac:46:cd:e8:4d:7a:
         89:5a:22:94:10:59:6e:e6:87:b5:91:32:36:74:3f:30:8d:a9:
         87:99:f0:9c:06:9b:0e:f6:3c:32:c3:aa:00:92:e3:e2:59:7e:
         e4:26:2c:76:7c:4b:63:ab:5c:d8:f5:a9:a1:d5:02:e8:6b:4a:
         37:9f:c9:d9:ef:e9:2f:46:4f:d8:f3:69:75:da:56:a5:af:79:
         49:74:f5:a8:30:3f:aa:c2:53:ce:20:14:4f:65:04:af:61:6c:
         26:f3:b5:3d:f8:92:ae:c4:1c:be:38:fa:c5:71:ae:6a:5e:dd:
         d2:5b:ce:fd:94:ca:04:de:6d:60:80:68:81:e2:17:02:31:02:
         a1:ed:81:0c
-----BEGIN CERTIFICATE-----
MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWErp9npwPItfVWuiOiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk
MzM4NzdjODctNzEwMC00ZDdjLWIzMmUtZTMzNDk1ZmM0ZTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitbcDnn7IUU484z+0hNdXKTxs20rxbjtnGkT
epexplyArCbsgbruOS9piI1qGLcQlRvbuuejR9WnezxkVpFAW/BXsUD3O0yVTmPc
hnayQ2KGcNJ8zQO5raLX0C9YAO8/Xm0eind7q23JNLVoo0FQNw04tR/dQZjzFChP
U9nTpvk1iyQ1BV20JlM0nwx91HB1my5S06blgK/JXCmXOWz47gBcZv+mhJkLhQLu
1pm2PKfFUG5lHBGy2lp9c9UxFunOFX+s7BWdfXDhPUqzIw7QvH1KydW9rS//6t/3
PeMudUMjo8WFMOXZM8Cmbb+6g0WYMPpUrQIIazkdFW3ylVwqfwIDAQABo4IDYjCC
A14wHQYDVR0OBBYEFAd29oaU6+sKQcYukOVQR1QH5wuhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDU0NTY4YWQtMGIzMy0z
NzkyLTk2Y2QtZjI0NjRhYTdhYWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEh
AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH
AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s
MA0GCSqGSIb3DQEBCwUAA4IBAQAhGa01iSUpJ2jhdqlHvpqKj0jkzJcDPWbMtre+
2QYV5Dk6BLCleS7Fi4fBooqgL/WxTzddBfctTMfHCPXBa+cNUbc1xYGHHP3JX2p1
M6muMq8CSym9672k0w48ANpeIosoZxcBQzV8Y5FKd/tLWwaKji876/SKwGOsRs3o
TXqJWiKUEFlu5oe1kTI2dD8wjamHmfCcBpsO9jwyw6oAkuPiWX7kJix2fEtjq1zY
9amh1QLoa0o3n8nZ7+kvRk/Y82l12lalr3lJdPWoMD+qwlPOIBRPZQSvYWwm87U9
+JKuxBy+OPrFca5qXt3SW879lMoE3m1ggGiB4hcCMQKh7YEM
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:27:58 2025 by rpki-client